@devtion/backend 0.0.0-4088679 → 0.0.0-477457c

package/dist/src/functions/index.js

@@ -1,6 +1,6 @@
 /**
- * @module @devtion/backend
- * @version 1.0.6
+ * @module @p0tion/backend
+ * @version 1.2.8
  * @file MPC Phase 2 backend for Firebase services management
  * @copyright Ethereum Foundation 2022
  * @license MIT
@@ -27,10 +27,13 @@ var path = require('path');
 var os = require('os');
 var clientSsm = require('@aws-sdk/client-ssm');
 var clientEc2 = require('@aws-sdk/client-ec2');
+var ethers = require('ethers');
 var functionsV1 = require('firebase-functions/v1');
 var functionsV2 = require('firebase-functions/v2');
 var timerNode = require('timer-node');
 var snarkjs = require('snarkjs');
+var apiSdk = require('@bandada/api-sdk');
+var auth = require('firebase-admin/auth');
 
 function _interopNamespaceDefault(e) {
     var n = Object.create(null);
@@ -72,7 +75,7 @@ var LogLevel;
  * @notice the set of Firebase Functions status codes. The codes are the same at the
  * ones exposed by {@link https://github.com/grpc/grpc/blob/master/doc/statuscodes.md | gRPC}.
  * @param errorCode <FunctionsErrorCode> - the set of possible error codes.
- * @param message <string> - the error messge.
+ * @param message <string> - the error message.
  * @param [details] <string> - the details of the error (optional).
  * @returns <HttpsError>
  */
@@ -144,7 +147,9 @@ const SPECIFIC_ERRORS = {
     SE_VM_FAILED_COMMAND_EXECUTION: makeError("failed-precondition", "VM command execution failed", "Please, contact the coordinator if this error persists."),
     SE_VM_TIMEDOUT_COMMAND_EXECUTION: makeError("deadline-exceeded", "VM command execution took too long and has been timed-out", "Please, contact the coordinator if this error persists."),
     SE_VM_CANCELLED_COMMAND_EXECUTION: makeError("cancelled", "VM command execution has been cancelled", "Please, contact the coordinator if this error persists."),
-    SE_VM_DELAYED_COMMAND_EXECUTION: makeError("unavailable", "VM command execution has been delayed since there were no available instance at the moment", "Please, contact the coordinator if this error persists.")
+    SE_VM_DELAYED_COMMAND_EXECUTION: makeError("unavailable", "VM command execution has been delayed since there were no available instance at the moment", "Please, contact the coordinator if this error persists."),
+    SE_VM_UNKNOWN_COMMAND_STATUS: makeError("unavailable", "VM command execution has failed due to an unknown status code", "Please, contact the coordinator if this error persists."),
+    WRONG_BUCKET_NAME: makeError("invalid-argument", "The provided bucket name is not valid.", "Bucket names must be between 3 and 63 characters long, can only contain lowercase letters, numbers, and hyphens, and must start and end with a letter or number.")
 };
 /**
  * A set of common errors.
@@ -163,6 +168,8 @@ const COMMON_ERRORS = {
     CM_INVALID_COMMAND_EXECUTION: makeError("unknown", "There was an error while executing the command on the VM", "Please, contact the coordinator if the error persists.")
 };
 
+dotenv.config();
+let provider;
 /**
  * Return a configured and connected instance of the AWS S3 client.
  * @dev this method check and utilize the environment variables to configure the connection
@@ -185,6 +192,36 @@ const getS3Client = async () => {
         region: process.env.AWS_REGION
     });
 };
+/**
+ * Returns a Prvider, connected via a configured JSON URL or else
+ * the ethers.js default provider, using configured API keys.
+ * @returns <ethers.providers.Provider> An Eth node provider
+ */
+const setEthProvider = () => {
+    if (provider)
+        return provider;
+    console.log(`setting new provider`);
+    // Use JSON URL if defined
+    // if ((hardhat as any).ethers) {
+    //     console.log(`using hardhat.ethers provider`)
+    //     provider = (hardhat as any).ethers.provider
+    // } else
+    if (process.env.ETH_PROVIDER_JSON_URL) {
+        console.log(`JSON URL provider at ${process.env.ETH_PROVIDER_JSON_URL}`);
+        provider = new ethers.providers.JsonRpcProvider({
+            url: process.env.ETH_PROVIDER_JSON_URL,
+            skipFetchSetup: true
+        });
+    }
+    else {
+        // Otherwise, connect the default provider with ALchemy, Infura, or both
+        provider = ethers.providers.getDefaultProvider("homestead", {
+            alchemy: process.env.ETH_PROVIDER_ALCHEMY_API_KEY,
+            infura: process.env.ETH_PROVIDER_INFURA_API_KEY
+        });
+    }
+    return provider;
+};
 
 dotenv.config();
 /**
@@ -287,7 +324,7 @@ const queryOpenedCeremonies = async () => {
 const getCircuitDocumentByPosition = async (ceremonyId, sequencePosition) => {
     // Query for all ceremony circuits.
     const circuits = await getCeremonyCircuits(ceremonyId);
-    // Apply a filter using the sequence postion.
+    // Apply a filter using the sequence position.
     const matchedCircuits = circuits.filter((circuit) => circuit.data().sequencePosition === sequencePosition);
     if (matchedCircuits.length !== 1)
         logAndThrowError(COMMON_ERRORS.CM_NO_CIRCUIT_FOR_GIVEN_SEQUENCE_POSITION);
@@ -328,7 +365,7 @@ const downloadArtifactFromS3Bucket = async (bucketName, objectKey, localFilePath
     const writeStream = node_fs.createWriteStream(localFilePath);
     const streamPipeline = node_util.promisify(node_stream.pipeline);
     await streamPipeline(response.body, writeStream);
-    writeStream.on('finish', () => {
+    writeStream.on("finish", () => {
         writeStream.end();
     });
 };
@@ -452,12 +489,14 @@ const htmlEncodeCircuitData = (circuitDocument) => ({
 const getGitHubVariables = () => {
     if (!process.env.GITHUB_MINIMUM_FOLLOWERS ||
         !process.env.GITHUB_MINIMUM_FOLLOWING ||
-        !process.env.GITHUB_MINIMUM_PUBLIC_REPOS)
+        !process.env.GITHUB_MINIMUM_PUBLIC_REPOS ||
+        !process.env.GITHUB_MINIMUM_AGE)
         logAndThrowError(COMMON_ERRORS.CM_WRONG_CONFIGURATION);
     return {
         minimumFollowers: Number(process.env.GITHUB_MINIMUM_FOLLOWERS),
         minimumFollowing: Number(process.env.GITHUB_MINIMUM_FOLLOWING),
-        minimumPublicRepos: Number(process.env.GITHUB_MINIMUM_PUBLIC_REPOS)
+        minimumPublicRepos: Number(process.env.GITHUB_MINIMUM_PUBLIC_REPOS),
+        minimumAge: Number(process.env.GITHUB_MINIMUM_AGE)
     };
 };
 /**
@@ -467,7 +506,7 @@ const getGitHubVariables = () => {
 const getAWSVariables = () => {
     if (!process.env.AWS_ACCESS_KEY_ID ||
         !process.env.AWS_SECRET_ACCESS_KEY ||
-        !process.env.AWS_ROLE_ARN ||
+        !process.env.AWS_INSTANCE_PROFILE_ARN ||
         !process.env.AWS_AMI_ID ||
         !process.env.AWS_SNS_TOPIC_ARN)
         logAndThrowError(COMMON_ERRORS.CM_WRONG_CONFIGURATION);
@@ -475,7 +514,7 @@ const getAWSVariables = () => {
         accessKeyId: process.env.AWS_ACCESS_KEY_ID,
         secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
         region: process.env.AWS_REGION || "eu-central-1",
-        roleArn: process.env.AWS_ROLE_ARN,
+        instanceProfileArn: process.env.AWS_INSTANCE_PROFILE_ARN,
         amiId: process.env.AWS_AMI_ID,
         snsTopic: process.env.AWS_SNS_TOPIC_ARN
     };
@@ -521,7 +560,7 @@ dotenv.config();
 const registerAuthUser = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .auth.user()
     .onCreate(async (user) => {
@@ -553,16 +592,18 @@ const registerAuthUser = functions__namespace
         email === process.env.CUSTOM_CLAIMS_COORDINATOR_EMAIL_ADDRESS_OR_DOMAIN)) {
         const auth = admin.auth();
         // if provider == github.com let's use our functions to check the user's reputation
-        if (user.providerData[0].providerId === "github.com") {
+        if (user.providerData.length > 0 && user.providerData[0].providerId === "github.com") {
             const vars = getGitHubVariables();
             // this return true or false
             try {
-                const { reputable, avatarUrl: avatarURL } = await actions.githubReputation(user.providerData[0].uid, vars.minimumFollowing, vars.minimumFollowers, vars.minimumPublicRepos);
+                const { reputable, avatarUrl: avatarURL } = await actions.githubReputation(user.providerData[0].uid, vars.minimumFollowing, vars.minimumFollowers, vars.minimumPublicRepos, vars.minimumAge);
                 if (!reputable) {
                     // Delete user
                     await auth.deleteUser(user.uid);
                     // Throw error
-                    logAndThrowError(makeError("permission-denied", "The user is not allowed to sign up because their Github reputation is not high enough.", `The user ${user.displayName === "Null" || user.displayName === null ? user.uid : user.displayName} is not allowed to sign up because their Github reputation is not high enough. Please contact the administrator if you think this is a mistake.`));
+                    logAndThrowError(makeError("permission-denied", "The user is not allowed to sign up because their Github reputation is not high enough.", `The user ${user.displayName === "Null" || user.displayName === null
+                        ? user.uid
+                        : user.displayName} is not allowed to sign up because their Github reputation is not high enough. Please contact the administrator if you think this is a mistake.`));
                 }
                 // store locally
                 avatarUrl = avatarURL;
@@ -577,13 +618,13 @@ const registerAuthUser = functions__namespace
     }
     // Set document (nb. we refer to providerData[0] because we use Github OAuth provider only).
     // In future releases we might want to loop through the providerData array as we support
-    // more providers. 
+    // more providers.
     await userRef.set({
         name: encodedDisplayName,
         encodedDisplayName,
         // Metadata.
         creationTime,
-        lastSignInTime,
+        lastSignInTime: lastSignInTime || creationTime,
         // Optional.
         email: email || "",
         emailVerified: emailVerified || false,
@@ -593,7 +634,7 @@ const registerAuthUser = functions__namespace
     // we want to create a new collection for the users to store the avatars
     const avatarRef = firestore.collection(actions.commonTerms.collections.avatars.name).doc(uid);
     await avatarRef.set({
-        avatarUrl: avatarUrl || "",
+        avatarUrl: avatarUrl || ""
     });
     printLog(`Authenticated user document with identifier ${uid} has been correctly stored`, LogLevel.DEBUG);
     printLog(`Authenticated user avatar with identifier ${uid} has been correctly stored`, LogLevel.DEBUG);
@@ -606,7 +647,7 @@ const registerAuthUser = functions__namespace
 const processSignUpWithCustomClaims = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .auth.user()
     .onCreate(async (user) => {
@@ -647,7 +688,7 @@ dotenv.config();
 const startCeremony = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .pubsub.schedule(`every 30 minutes`)
     .onRun(async () => {
@@ -669,7 +710,7 @@ const startCeremony = functions__namespace
 const stopCeremony = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .pubsub.schedule(`every 30 minutes`)
     .onRun(async () => {
@@ -691,7 +732,7 @@ const stopCeremony = functions__namespace
 const setupCeremony = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     // Check if the user has the coordinator claim.
@@ -729,7 +770,9 @@ const setupCeremony = functions__namespace
         // The VM unique identifier (if any).
         let vmInstanceId = "";
         // Get a new circuit document.
-        const circuitDoc = await firestore.collection(actions.getCircuitsCollectionPath(ceremonyDoc.ref.id)).doc().get();
+        const ccp = actions.getCircuitsCollectionPath(ceremonyDoc.ref.id);
+        printLog(`CircuitsCollectionPath = ${ccp}`, LogLevel.DEBUG);
+        const circuitDoc = await firestore.collection(ccp).doc().get();
         // Check if using the VM approach for contribution verification.
         if (circuit.verification.cfOrVm === "VM" /* CircuitContributionVerificationMechanism.VM */) {
             // VM command to be run at the startup.
@@ -766,12 +809,14 @@ const setupCeremony = functions__namespace
         }
         // Encode circuit data.
         const encodedCircuit = htmlEncodeCircuitData(circuit);
+        printLog(`writing circuit data...`, LogLevel.DEBUG);
         // Prepare tx to write circuit data.
         batch.create(circuitDoc.ref, {
             ...encodedCircuit,
             lastUpdated: getCurrentServerTimestampInMillis()
         });
     }
+    printLog(`Done handling circuits...`, LogLevel.DEBUG);
     // Send txs in a batch (to avoid race conditions).
     await batch.commit();
     printLog(`Setup completed for ceremony ${ceremonyDoc.id}`, LogLevel.DEBUG);
@@ -784,7 +829,7 @@ const setupCeremony = functions__namespace
 const initEmptyWaitingQueueForCircuit = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .firestore.document(`/${actions.commonTerms.collections.ceremonies.name}/{ceremony}/${actions.commonTerms.collections.circuits.name}/{circuit}`)
     .onCreate(async (doc) => {
@@ -816,7 +861,7 @@ const initEmptyWaitingQueueForCircuit = functions__namespace
 const finalizeCeremony = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || !context.auth.token.coordinator)
@@ -837,7 +882,7 @@ const finalizeCeremony = functions__namespace
     // Get ceremony circuits.
     const circuits = await getCeremonyCircuits(ceremonyId);
     // Get final contribution for each circuit.
-    // nb. the `getFinalContributionDocument` checks the existance of the final contribution document (if not present, throws).
+    // nb. the `getFinalContributionDocument` checks the existence of the final contribution document (if not present, throws).
     // Therefore, we just need to call the method without taking any data to verify the pre-condition of having already computed
     // the final contributions for each ceremony circuit.
     for await (const circuit of circuits)
@@ -890,9 +935,9 @@ dotenv.config();
  * @dev true when the participant can participate (1.A, 3.B, 1.D); otherwise false.
  */
 const checkParticipantForCeremony = functions__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -961,7 +1006,7 @@ const checkParticipantForCeremony = functions__namespace
             participantDoc.ref.update({
                 status: "EXHUMED" /* ParticipantStatus.EXHUMED */,
                 contributions,
-                tempContributionData: tempContributionData ? tempContributionData : firestore.FieldValue.delete(),
+                tempContributionData: tempContributionData || firestore.FieldValue.delete(),
                 contributionStep: "DOWNLOADING" /* ParticipantContributionStep.DOWNLOADING */,
                 contributionStartedAt: 0,
                 verificationStartedAt: firestore.FieldValue.delete(),
@@ -994,9 +1039,9 @@ const checkParticipantForCeremony = functions__namespace
  * 2) the participant has just finished the contribution for a circuit (contributionProgress != 0 && status = CONTRIBUTED && contributionStep = COMPLETED).
  */
 const progressToNextCircuitForContribution = functions__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -1041,9 +1086,9 @@ const progressToNextCircuitForContribution = functions__namespace
  * 5) Completed contribution computation and verification.
  */
 const progressToNextContributionStep = functions__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -1092,9 +1137,9 @@ const progressToNextContributionStep = functions__namespace
  * @dev enable the current contributor to resume a contribution from where it had left off.
  */
 const permanentlyStoreCurrentContributionTimeAndHash = functions__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -1134,9 +1179,9 @@ const permanentlyStoreCurrentContributionTimeAndHash = functions__namespace
  * @dev enable the current contributor to resume a multi-part upload from where it had left off.
  */
 const temporaryStoreCurrentContributionMultiPartUploadId = functions__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -1172,9 +1217,9 @@ const temporaryStoreCurrentContributionMultiPartUploadId = functions__namespace
  * @dev enable the current contributor to resume a multi-part upload from where it had left off.
  */
 const temporaryStoreCurrentContributionUploadedChunkData = functions__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -1214,9 +1259,9 @@ const temporaryStoreCurrentContributionUploadedChunkData = functions__namespace
  * contributed to every selected ceremony circuits (= DONE).
  */
 const checkAndPrepareCoordinatorForFinalization = functions__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || !context.auth.token.coordinator)
@@ -1293,7 +1338,7 @@ const coordinate = async (participant, circuit, isSingleParticipantCoordination,
     if (isSingleParticipantCoordination) {
         // Scenario (A).
         if (emptyWaitingQueue) {
-            printLog(`Coordinate - executing scenario A - emptyWaitingQueue`, LogLevel.DEBUG);
+            printLog(`Coordinate - executing scenario A - emptyWaitingQueue`, LogLevel.INFO);
             // Update.
             newCurrentContributorId = participant.id;
             newParticipantStatus = "CONTRIBUTING" /* ParticipantStatus.CONTRIBUTING */;
@@ -1302,14 +1347,14 @@ const coordinate = async (participant, circuit, isSingleParticipantCoordination,
         }
         // Scenario (A).
         else if (participantResumingAfterTimeoutExpiration) {
-            printLog(`Coordinate - executing scenario A - single - participantResumingAfterTimeoutExpiration`, LogLevel.DEBUG);
+            printLog(`Coordinate - executing scenario A - single - participantResumingAfterTimeoutExpiration`, LogLevel.INFO);
             newParticipantStatus = "CONTRIBUTING" /* ParticipantStatus.CONTRIBUTING */;
             newContributionStep = "DOWNLOADING" /* ParticipantContributionStep.DOWNLOADING */;
             newCurrentContributorId = participant.id;
         }
         // Scenario (B).
         else if (participantIsNotCurrentContributor) {
-            printLog(`Coordinate - executing scenario B - single - participantIsNotCurrentContributor`, LogLevel.DEBUG);
+            printLog(`Coordinate - executing scenario B - single - participantIsNotCurrentContributor`, LogLevel.INFO);
             newCurrentContributorId = currentContributor;
             newParticipantStatus = "WAITING" /* ParticipantStatus.WAITING */;
             newContributors.push(participant.id);
@@ -1328,7 +1373,7 @@ const coordinate = async (participant, circuit, isSingleParticipantCoordination,
         });
     }
     else if (participantIsCurrentContributor && participantCompletedOneOrAllContributions && !!ceremonyId) {
-        printLog(`Coordinate - executing scenario C - multi - participantIsCurrentContributor && participantCompletedOneOrAllContributions`, LogLevel.DEBUG);
+        printLog(`Coordinate - executing scenario C - multi - participantIsCurrentContributor && participantCompletedOneOrAllContributions`, LogLevel.INFO);
         newParticipantStatus = "CONTRIBUTING" /* ParticipantStatus.CONTRIBUTING */;
         newContributionStep = "DOWNLOADING" /* ParticipantContributionStep.DOWNLOADING */;
         // Remove from waiting queue of circuit X.
@@ -1346,7 +1391,7 @@ const coordinate = async (participant, circuit, isSingleParticipantCoordination,
                 contributionStartedAt: getCurrentServerTimestampInMillis(),
                 lastUpdated: getCurrentServerTimestampInMillis()
             });
-            printLog(`Participant ${newCurrentContributorId} is the new current contributor for circuit ${circuit.id}`, LogLevel.DEBUG);
+            printLog(`Participant ${newCurrentContributorId} is the new current contributor for circuit ${circuit.id}`, LogLevel.INFO);
         }
     }
     // Prepare tx - must be done for all Scenarios.
@@ -1366,54 +1411,74 @@ const coordinate = async (participant, circuit, isSingleParticipantCoordination,
  * Wait until the command has completed its execution inside the VM.
  * @dev this method implements a custom interval to check 5 times after 1 minute if the command execution
  * has been completed or not by calling the `retrieveCommandStatus` method.
- * @param {any} resolve the promise.
- * @param {any} reject the promise.
  * @param {SSMClient} ssm the SSM client.
  * @param {string} vmInstanceId the unique identifier of the VM instance.
  * @param {string} commandId the unique identifier of the VM command.
  * @returns <Promise<void>> true when the command execution succeed; otherwise false.
  */
-const waitForVMCommandExecution = (resolve, reject, ssm, vmInstanceId, commandId) => {
-    const interval = setInterval(async () => {
+const waitForVMCommandExecution = (ssm, vmInstanceId, commandId) => new Promise((resolve, reject) => {
+    const poll = async () => {
         try {
             // Get command status.
             const cmdStatus = await actions.retrieveCommandStatus(ssm, vmInstanceId, commandId);
             printLog(`Checking command ${commandId} status => ${cmdStatus}`, LogLevel.DEBUG);
-            if (cmdStatus === clientSsm.CommandInvocationStatus.SUCCESS) {
-                printLog(`Command ${commandId} successfully completed`, LogLevel.DEBUG);
-                // Resolve the promise.
-                resolve();
-            }
-            else if (cmdStatus === clientSsm.CommandInvocationStatus.FAILED) {
-                logAndThrowError(SPECIFIC_ERRORS.SE_VM_FAILED_COMMAND_EXECUTION);
-                reject();
-            }
-            else if (cmdStatus === clientSsm.CommandInvocationStatus.TIMED_OUT) {
-                logAndThrowError(SPECIFIC_ERRORS.SE_VM_TIMEDOUT_COMMAND_EXECUTION);
-                reject();
-            }
-            else if (cmdStatus === clientSsm.CommandInvocationStatus.CANCELLED) {
-                logAndThrowError(SPECIFIC_ERRORS.SE_VM_CANCELLED_COMMAND_EXECUTION);
-                reject();
+            let error;
+            switch (cmdStatus) {
+                case clientSsm.CommandInvocationStatus.CANCELLING:
+                case clientSsm.CommandInvocationStatus.CANCELLED: {
+                    error = SPECIFIC_ERRORS.SE_VM_CANCELLED_COMMAND_EXECUTION;
+                    break;
+                }
+                case clientSsm.CommandInvocationStatus.DELAYED: {
+                    error = SPECIFIC_ERRORS.SE_VM_DELAYED_COMMAND_EXECUTION;
+                    break;
+                }
+                case clientSsm.CommandInvocationStatus.FAILED: {
+                    error = SPECIFIC_ERRORS.SE_VM_FAILED_COMMAND_EXECUTION;
+                    break;
+                }
+                case clientSsm.CommandInvocationStatus.TIMED_OUT: {
+                    error = SPECIFIC_ERRORS.SE_VM_TIMEDOUT_COMMAND_EXECUTION;
+                    break;
+                }
+                case clientSsm.CommandInvocationStatus.IN_PROGRESS:
+                case clientSsm.CommandInvocationStatus.PENDING: {
+                    // wait a minute and poll again
+                    setTimeout(poll, 60000);
+                    return;
+                }
+                case clientSsm.CommandInvocationStatus.SUCCESS: {
+                    printLog(`Command ${commandId} successfully completed`, LogLevel.DEBUG);
+                    // Resolve the promise.
+                    resolve();
+                    return;
+                }
+                default: {
+                    logAndThrowError(SPECIFIC_ERRORS.SE_VM_UNKNOWN_COMMAND_STATUS);
+                }
             }
-            else if (cmdStatus === clientSsm.CommandInvocationStatus.DELAYED) {
-                logAndThrowError(SPECIFIC_ERRORS.SE_VM_DELAYED_COMMAND_EXECUTION);
-                reject();
+            if (error) {
+                logAndThrowError(error);
             }
         }
         catch (error) {
             printLog(`Invalid command ${commandId} execution`, LogLevel.DEBUG);
+            const ec2 = await createEC2Client();
+            // if it errors out, let's just log it as a warning so the coordinator is aware
+            try {
+                await actions.stopEC2Instance(ec2, vmInstanceId);
+            }
+            catch (stopError) {
+                printLog(`Error while stopping VM instance ${vmInstanceId} - Error ${stopError}`, LogLevel.WARN);
+            }
             if (!error.toString().includes(commandId))
                 logAndThrowError(COMMON_ERRORS.CM_INVALID_COMMAND_EXECUTION);
             // Reject the promise.
             reject();
         }
-        finally {
-            // Clear the interval.
-            clearInterval(interval);
-        }
-    }, 60000); // 1 minute.
-};
+    };
+    setTimeout(poll, 60000);
+});
 /**
  * This method is used to coordinate the waiting queues of ceremony circuits.
  * @dev this cloud function is triggered whenever an update of a document related to a participant of a ceremony occurs.
@@ -1434,9 +1499,9 @@ const waitForVMCommandExecution = (resolve, reject, ssm, vmInstanceId, commandId
  * - Just completed a contribution or all contributions for each circuit. If yes, coordinate (multi-participant scenario).
  */
 const coordinateCeremonyParticipant = functionsV1__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .firestore.document(`${actions.commonTerms.collections.ceremonies.name}/{ceremonyId}/${actions.commonTerms.collections.participants.name}/{participantId}`)
     .onUpdate(async (participantChanges) => {
@@ -1452,8 +1517,8 @@ const coordinateCeremonyParticipant = functionsV1__namespace
     // Extract data.
     const { contributionProgress: prevContributionProgress, status: prevStatus, contributionStep: prevContributionStep } = exParticipant.data();
     const { contributionProgress: changedContributionProgress, status: changedStatus, contributionStep: changedContributionStep } = changedParticipant.data();
-    printLog(`Coordinate participant ${exParticipant.id} for ceremony ${ceremonyId}`, LogLevel.DEBUG);
-    printLog(`Participant status: ${prevStatus} => ${changedStatus} - Participant contribution step: ${prevContributionStep} => ${changedContributionStep}`, LogLevel.DEBUG);
+    printLog(`Coordinate participant ${exParticipant.id} for ceremony ${ceremonyId}`, LogLevel.INFO);
+    printLog(`Participant status: ${prevStatus} => ${changedStatus} - Participant contribution step: ${prevContributionStep} => ${changedContributionStep}`, LogLevel.INFO);
     // Define pre-conditions.
     const participantReadyToContribute = changedStatus === "READY" /* ParticipantStatus.READY */;
     const participantReadyForFirstContribution = participantReadyToContribute && prevContributionProgress === 0;
@@ -1463,8 +1528,8 @@ const coordinateCeremonyParticipant = functionsV1__namespace
         prevContributionProgress !== 0;
     const participantCompletedEveryCircuitContribution = changedStatus === "DONE" /* ParticipantStatus.DONE */ && prevStatus !== "DONE" /* ParticipantStatus.DONE */;
     const participantCompletedContribution = prevContributionProgress === changedContributionProgress &&
-        prevStatus === "CONTRIBUTING" /* ParticipantStatus.CONTRIBUTING */ &&
-        prevContributionStep === "VERIFYING" /* ParticipantContributionStep.VERIFYING */ &&
+        (prevStatus === "CONTRIBUTING" /* ParticipantStatus.CONTRIBUTING */ ||
+            prevContributionStep === "VERIFYING" /* ParticipantContributionStep.VERIFYING */) &&
         changedStatus === "CONTRIBUTED" /* ParticipantStatus.CONTRIBUTED */ &&
         changedContributionStep === "COMPLETED" /* ParticipantContributionStep.COMPLETED */;
     // Step (2).
@@ -1472,7 +1537,7 @@ const coordinateCeremonyParticipant = functionsV1__namespace
         participantResumingContributionAfterTimeout ||
         participantReadyForNextContribution) {
         // Step (2.A).
-        printLog(`Participant is ready for first contribution (${participantReadyForFirstContribution}) or for the next contribution (${participantReadyForNextContribution}) or is resuming after a timeout expiration (${participantResumingContributionAfterTimeout})`, LogLevel.DEBUG);
+        printLog(`Participant is ready for first contribution (${participantReadyForFirstContribution}) or for the next contribution (${participantReadyForNextContribution}) or is resuming after a timeout expiration (${participantResumingContributionAfterTimeout})`, LogLevel.INFO);
         // Get the circuit.
         const circuit = await getCircuitDocumentByPosition(ceremonyId, changedContributionProgress);
         // Coordinate.
@@ -1481,7 +1546,7 @@ const coordinateCeremonyParticipant = functionsV1__namespace
     }
     else if (participantCompletedContribution || participantCompletedEveryCircuitContribution) {
         // Step (2.B).
-        printLog(`Participant completed a contribution (${participantCompletedContribution}) or every contribution for each circuit (${participantCompletedEveryCircuitContribution})`, LogLevel.DEBUG);
+        printLog(`Participant completed a contribution (${participantCompletedContribution}) or every contribution for each circuit (${participantCompletedEveryCircuitContribution})`, LogLevel.INFO);
         // Get the circuit.
         const circuit = await getCircuitDocumentByPosition(ceremonyId, prevContributionProgress);
         // Coordinate.
@@ -1505,11 +1570,9 @@ const checkIfVMRunning = async (ec2, vmInstanceId, attempts = 5) => {
     const isVMRunning = await actions.checkIfRunning(ec2, vmInstanceId);
     if (!isVMRunning) {
         printLog(`VM not running, ${attempts - 1} attempts remaining. Retrying in 1 minute...`, LogLevel.DEBUG);
-        return await checkIfVMRunning(ec2, vmInstanceId, attempts - 1);
-    }
-    else {
-        return true;
+        return checkIfVMRunning(ec2, vmInstanceId, attempts - 1);
     }
+    return true;
 };
 /**
  * Verify the contribution of a participant computed while contributing to a specific circuit of a ceremony.
@@ -1537,267 +1600,296 @@ const checkIfVMRunning = async (ec2, vmInstanceId, attempts = 5) => {
  *       1.A.4.C.1) If true, update circuit waiting for queue and average timings accordingly to contribution verification results;
  * 2) Send all updates atomically to the Firestore database.
  */
-const verifycontribution = functionsV2__namespace.https.onCall({ memory: "16GiB", timeoutSeconds: 3600, region: 'europe-west1' }, async (request) => {
-    if (!request.auth || (!request.auth.token.participant && !request.auth.token.coordinator))
-        logAndThrowError(SPECIFIC_ERRORS.SE_AUTH_NO_CURRENT_AUTH_USER);
-    if (!request.data.ceremonyId ||
-        !request.data.circuitId ||
-        !request.data.contributorOrCoordinatorIdentifier ||
-        !request.data.bucketName)
-        logAndThrowError(COMMON_ERRORS.CM_MISSING_OR_WRONG_INPUT_DATA);
-    if (!process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_NAME ||
-        !process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_VERSION ||
-        !process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_COMMIT_HASH)
-        logAndThrowError(COMMON_ERRORS.CM_WRONG_CONFIGURATION);
-    // Step (0).
-    // Prepare and start timer.
-    const verifyContributionTimer = new timerNode.Timer({ label: actions.commonTerms.cloudFunctionsNames.verifyContribution });
-    verifyContributionTimer.start();
-    // Get DB.
-    const firestore = admin.firestore();
-    // Prepare batch of txs.
-    const batch = firestore.batch();
-    // Extract data.
-    const { ceremonyId, circuitId, contributorOrCoordinatorIdentifier, bucketName } = request.data;
-    const userId = request.auth?.uid;
-    // Look for the ceremony, circuit and participant document.
-    const ceremonyDoc = await getDocumentById(actions.commonTerms.collections.ceremonies.name, ceremonyId);
-    const circuitDoc = await getDocumentById(actions.getCircuitsCollectionPath(ceremonyId), circuitId);
-    const participantDoc = await getDocumentById(actions.getParticipantsCollectionPath(ceremonyId), userId);
-    if (!ceremonyDoc.data() || !circuitDoc.data() || !participantDoc.data())
-        logAndThrowError(COMMON_ERRORS.CM_INEXISTENT_DOCUMENT_DATA);
-    // Extract documents data.
-    const { state } = ceremonyDoc.data();
-    const { status, contributions, verificationStartedAt, contributionStartedAt } = participantDoc.data();
-    const { waitingQueue, prefix, avgTimings, verification, files } = circuitDoc.data();
-    const { completedContributions, failedContributions } = waitingQueue;
-    const { contributionComputation: avgContributionComputationTime, fullContribution: avgFullContributionTime, verifyCloudFunction: avgVerifyCloudFunctionTime } = avgTimings;
-    const { cfOrVm, vm } = verification;
-    // we might not have it if the circuit is not using VM.
-    let vmInstanceId = "";
-    if (vm)
-        vmInstanceId = vm.vmInstanceId;
-    // Define pre-conditions.
-    const isFinalizing = state === "CLOSED" /* CeremonyState.CLOSED */ && request.auth && request.auth.token.coordinator; // true only when the coordinator verifies the final contributions.
-    const isContributing = status === "CONTRIBUTING" /* ParticipantStatus.CONTRIBUTING */;
-    const isUsingVM = cfOrVm === "VM" /* CircuitContributionVerificationMechanism.VM */ && !!vmInstanceId;
-    // Prepare state.
-    let isContributionValid = false;
-    let verifyCloudFunctionExecutionTime = 0; // time spent while executing the verify contribution cloud function.
-    let verifyCloudFunctionTime = 0; // time spent while executing the core business logic of this cloud function.
-    let fullContributionTime = 0; // time spent while doing non-verification contributions tasks (download, compute, upload).
-    let contributionComputationTime = 0; // time spent while computing the contribution.
-    let lastZkeyBlake2bHash = ""; // the Blake2B hash of the last zKey.
-    let verificationTranscriptTemporaryLocalPath = ""; // the local temporary path for the verification transcript.
-    let transcriptBlake2bHash = ""; // the Blake2B hash of the verification transcript.
-    let commandId = ""; // the unique identifier of the VM command.
-    // Derive necessary data.
-    const lastZkeyIndex = actions.formatZkeyIndex(completedContributions + 1);
-    const verificationTranscriptCompleteFilename = `${prefix}_${isFinalizing
-        ? `${contributorOrCoordinatorIdentifier}_${actions.finalContributionIndex}_verification_transcript.log`
-        : `${lastZkeyIndex}_${contributorOrCoordinatorIdentifier}_verification_transcript.log`}`;
-    const lastZkeyFilename = `${prefix}_${isFinalizing ? actions.finalContributionIndex : lastZkeyIndex}.zkey`;
-    // Prepare state for VM verification (if needed).
-    const ec2 = await createEC2Client();
-    const ssm = await createSSMClient();
-    // Step (1.A.1).
-    // Get storage paths.
-    const verificationTranscriptStoragePathAndFilename = actions.getTranscriptStorageFilePath(prefix, verificationTranscriptCompleteFilename);
-    // the zKey storage path is required to be sent to the VM api
-    const lastZkeyStoragePath = actions.getZkeyStorageFilePath(prefix, `${prefix}_${isFinalizing ? actions.finalContributionIndex : lastZkeyIndex}.zkey`);
-    const verificationTaskTimer = new timerNode.Timer({ label: `${ceremonyId}-${circuitId}-${participantDoc.id}` });
-    const completeVerification = async () => {
-        // Stop verification task timer.
-        printLog("Completing verification", LogLevel.DEBUG);
-        verificationTaskTimer.stop();
-        verifyCloudFunctionExecutionTime = verificationTaskTimer.ms();
-        if (isUsingVM) {
-            // Create temporary path.
-            verificationTranscriptTemporaryLocalPath = createTemporaryLocalPath(`${circuitId}_${participantDoc.id}.log`);
-            await sleep(1000); // wait 1s for file creation.
-            // Download from bucket.
-            // nb. the transcript MUST be uploaded from the VM by verification commands.
-            await downloadArtifactFromS3Bucket(bucketName, verificationTranscriptStoragePathAndFilename, verificationTranscriptTemporaryLocalPath);
-            // Read the verification trascript and validate data by checking for core info ("ZKey Ok!").
-            const content = fs.readFileSync(verificationTranscriptTemporaryLocalPath, "utf-8");
-            if (content.includes("ZKey Ok!"))
-                isContributionValid = true;
-            // If the contribution is valid, then format and store the trascript.
-            if (isContributionValid) {
-                // eslint-disable-next-line no-control-regex
-                const updated = content.replace(/\x1b[[0-9;]*m/g, "");
-                fs.writeFileSync(verificationTranscriptTemporaryLocalPath, updated);
+const verifycontribution = functionsV2__namespace.https.onCall({ memory: "32GiB", timeoutSeconds: 3600, region: "europe-west1", cpu: 8 }, async (request) => {
+    try {
+        if (!request.auth || (!request.auth.token.participant && !request.auth.token.coordinator))
+            logAndThrowError(SPECIFIC_ERRORS.SE_AUTH_NO_CURRENT_AUTH_USER);
+        if (!request.data.ceremonyId ||
+            !request.data.circuitId ||
+            !request.data.contributorOrCoordinatorIdentifier ||
+            !request.data.bucketName)
+            logAndThrowError(COMMON_ERRORS.CM_MISSING_OR_WRONG_INPUT_DATA);
+        if (!process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_NAME ||
+            !process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_VERSION ||
+            !process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_COMMIT_HASH)
+            logAndThrowError(COMMON_ERRORS.CM_WRONG_CONFIGURATION);
+        const BUCKET_NAME_REGEX = /^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/;
+        if (!BUCKET_NAME_REGEX.test(request.data.bucketName))
+            logAndThrowError(SPECIFIC_ERRORS.WRONG_BUCKET_NAME);
+        // Step (0).
+        // Prepare and start timer.
+        const verifyContributionTimer = new timerNode.Timer({ label: actions.commonTerms.cloudFunctionsNames.verifyContribution });
+        verifyContributionTimer.start();
+        // Get DB.
+        const firestore = admin.firestore();
+        // Prepare batch of txs.
+        const batch = firestore.batch();
+        // Extract data.
+        const { ceremonyId, circuitId, contributorOrCoordinatorIdentifier, bucketName } = request.data;
+        const userId = request.auth?.uid;
+        // Look for the ceremony, circuit and participant document.
+        const ceremonyDoc = await getDocumentById(actions.commonTerms.collections.ceremonies.name, ceremonyId);
+        const circuitDoc = await getDocumentById(actions.getCircuitsCollectionPath(ceremonyId), circuitId);
+        const participantDoc = await getDocumentById(actions.getParticipantsCollectionPath(ceremonyId), userId);
+        if (!ceremonyDoc.data() || !circuitDoc.data() || !participantDoc.data())
+            logAndThrowError(COMMON_ERRORS.CM_INEXISTENT_DOCUMENT_DATA);
+        // Extract documents data.
+        const { state } = ceremonyDoc.data();
+        const { status, contributions, verificationStartedAt, contributionStartedAt } = participantDoc.data();
+        const { waitingQueue, prefix, avgTimings, verification, files } = circuitDoc.data();
+        const { completedContributions, failedContributions } = waitingQueue;
+        const { contributionComputation: avgContributionComputationTime, fullContribution: avgFullContributionTime, verifyCloudFunction: avgVerifyCloudFunctionTime } = avgTimings;
+        const { cfOrVm, vm } = verification;
+        // we might not have it if the circuit is not using VM.
+        let vmInstanceId = "";
+        if (vm)
+            vmInstanceId = vm.vmInstanceId;
+        // Define pre-conditions.
+        const isFinalizing = state === "CLOSED" /* CeremonyState.CLOSED */ && request.auth && request.auth.token.coordinator; // true only when the coordinator verifies the final contributions.
+        const isContributing = status === "CONTRIBUTING" /* ParticipantStatus.CONTRIBUTING */;
+        const isUsingVM = cfOrVm === "VM" /* CircuitContributionVerificationMechanism.VM */ && !!vmInstanceId;
+        // Prepare state.
+        let isContributionValid = false;
+        let verifyCloudFunctionExecutionTime = 0; // time spent while executing the verify contribution cloud function.
+        let verifyCloudFunctionTime = 0; // time spent while executing the core business logic of this cloud function.
+        let fullContributionTime = 0; // time spent while doing non-verification contributions tasks (download, compute, upload).
+        let contributionComputationTime = 0; // time spent while computing the contribution.
+        let lastZkeyBlake2bHash = ""; // the Blake2B hash of the last zKey.
+        let verificationTranscriptTemporaryLocalPath = ""; // the local temporary path for the verification transcript.
+        let transcriptBlake2bHash = ""; // the Blake2B hash of the verification transcript.
+        let commandId = ""; // the unique identifier of the VM command.
+        // Derive necessary data.
+        const lastZkeyIndex = actions.formatZkeyIndex(completedContributions + 1);
+        const verificationTranscriptCompleteFilename = `${prefix}_${isFinalizing
+            ? `${contributorOrCoordinatorIdentifier}_${actions.finalContributionIndex}_verification_transcript.log`
+            : `${lastZkeyIndex}_${contributorOrCoordinatorIdentifier}_verification_transcript.log`}`;
+        const lastZkeyFilename = `${prefix}_${isFinalizing ? actions.finalContributionIndex : lastZkeyIndex}.zkey`;
+        // Prepare state for VM verification (if needed).
+        const ec2 = await createEC2Client();
+        const ssm = await createSSMClient();
+        // Step (1.A.1).
+        // Get storage paths.
+        const verificationTranscriptStoragePathAndFilename = actions.getTranscriptStorageFilePath(prefix, verificationTranscriptCompleteFilename);
+        // the zKey storage path is required to be sent to the VM api
+        const lastZkeyStoragePath = actions.getZkeyStorageFilePath(prefix, `${prefix}_${isFinalizing ? actions.finalContributionIndex : lastZkeyIndex}.zkey`);
+        const verificationTaskTimer = new timerNode.Timer({ label: `${ceremonyId}-${circuitId}-${participantDoc.id}` });
+        const dumpLog = async (path) => {
+            printLog(`transcript >>>>>>`, LogLevel.DEBUG);
+            try {
+                const data = await fs.promises.readFile(path, "utf8");
+                printLog(data, LogLevel.DEBUG);
             }
-        }
-        printLog(`The contribution has been verified - Result ${isContributionValid}`, LogLevel.DEBUG);
-        // Create a new contribution document.
-        const contributionDoc = await firestore
-            .collection(actions.getContributionsCollectionPath(ceremonyId, circuitId))
-            .doc()
-            .get();
-        // Step (1.A.4).
-        if (isContributionValid) {
-            // Sleep ~3 seconds to wait for verification transcription.
-            await sleep(3000);
-            // Step (1.A.4.A.1).
+            catch (readError) {
+                printLog(readError, LogLevel.ERROR);
+            }
+        };
+        const completeVerification = async () => {
+            // Stop verification task timer.
+            printLog("Completing verification", LogLevel.DEBUG);
+            verificationTaskTimer.stop();
+            verifyCloudFunctionExecutionTime = verificationTaskTimer.ms();
             if (isUsingVM) {
-                // Retrieve the contribution hash from the command output.
-                lastZkeyBlake2bHash = await actions.retrieveCommandOutput(ssm, vmInstanceId, commandId);
-                const hashRegex = /[a-fA-F0-9]{64}/;
-                const match = lastZkeyBlake2bHash.match(hashRegex);
-                lastZkeyBlake2bHash = match.at(0);
-                // re upload the formatted verification transcript
-                await uploadFileToBucket(bucketName, verificationTranscriptStoragePathAndFilename, verificationTranscriptTemporaryLocalPath, true);
+                // Create temporary path.
+                verificationTranscriptTemporaryLocalPath = createTemporaryLocalPath(`${circuitId}_${participantDoc.id}.log`);
+                await sleep(1000); // wait 1s for file creation.
+                // Download from bucket.
+                // nb. the transcript MUST be uploaded from the VM by verification commands.
+                await downloadArtifactFromS3Bucket(bucketName, verificationTranscriptStoragePathAndFilename, verificationTranscriptTemporaryLocalPath);
+                // Read the verification trascript and validate data by checking for core info ("ZKey Ok!").
+                const content = fs.readFileSync(verificationTranscriptTemporaryLocalPath, "utf-8");
+                if (content.includes("ZKey Ok!"))
+                    isContributionValid = true;
+                // If the contribution is valid, then format and store the trascript.
+                if (isContributionValid) {
+                    // eslint-disable-next-line no-control-regex
+                    const updated = content.replace(/\x1b[[0-9;]*m/g, "");
+                    fs.writeFileSync(verificationTranscriptTemporaryLocalPath, updated);
+                }
+            }
+            printLog(`The contribution has been verified - Result ${isContributionValid}`, LogLevel.DEBUG);
+            // Create a new contribution document.
+            const contributionDoc = await firestore
+                .collection(actions.getContributionsCollectionPath(ceremonyId, circuitId))
+                .doc()
+                .get();
+            // Step (1.A.4).
+            if (isContributionValid) {
+                // Sleep ~3 seconds to wait for verification transcription.
+                await sleep(3000);
+                // Step (1.A.4.A.1).
+                if (isUsingVM) {
+                    // Retrieve the contribution hash from the command output.
+                    lastZkeyBlake2bHash = await actions.retrieveCommandOutput(ssm, vmInstanceId, commandId);
+                    const hashRegex = /[a-fA-F0-9]{64}/;
+                    const match = lastZkeyBlake2bHash.match(hashRegex);
+                    lastZkeyBlake2bHash = match.at(0);
+                    // re upload the formatted verification transcript
+                    await uploadFileToBucket(bucketName, verificationTranscriptStoragePathAndFilename, verificationTranscriptTemporaryLocalPath, true);
+                }
+                else {
+                    // Upload verification transcript.
+                    /// nb. do not use multi-part upload here due to small file size.
+                    await uploadFileToBucket(bucketName, verificationTranscriptStoragePathAndFilename, verificationTranscriptTemporaryLocalPath, true);
+                }
+                // Compute verification transcript hash.
+                transcriptBlake2bHash = await actions.blake512FromPath(verificationTranscriptTemporaryLocalPath);
+                // Free resources by unlinking transcript temporary file.
+                fs.unlinkSync(verificationTranscriptTemporaryLocalPath);
+                // Filter participant contributions to find the data related to the one verified.
+                const participantContributions = contributions.filter((contribution) => !!contribution.hash && !!contribution.computationTime && !contribution.doc);
+                /// @dev (there must be only one contribution with an empty 'doc' field).
+                if (participantContributions.length !== 1)
+                    logAndThrowError(SPECIFIC_ERRORS.SE_VERIFICATION_NO_PARTICIPANT_CONTRIBUTION_DATA);
+                // Get contribution computation time.
+                contributionComputationTime = contributions.at(0).computationTime;
+                // Step (1.A.4.A.2).
+                batch.create(contributionDoc.ref, {
+                    participantId: participantDoc.id,
+                    contributionComputationTime,
+                    verificationComputationTime: verifyCloudFunctionExecutionTime,
+                    zkeyIndex: isFinalizing ? actions.finalContributionIndex : lastZkeyIndex,
+                    files: {
+                        transcriptFilename: verificationTranscriptCompleteFilename,
+                        lastZkeyFilename,
+                        transcriptStoragePath: verificationTranscriptStoragePathAndFilename,
+                        lastZkeyStoragePath,
+                        transcriptBlake2bHash,
+                        lastZkeyBlake2bHash
+                    },
+                    verificationSoftware: {
+                        name: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_NAME),
+                        version: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_VERSION),
+                        commitHash: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_COMMIT_HASH)
+                    },
+                    valid: isContributionValid,
+                    lastUpdated: getCurrentServerTimestampInMillis()
+                });
+                verifyContributionTimer.stop();
+                verifyCloudFunctionTime = verifyContributionTimer.ms();
             }
             else {
-                // Upload verification transcript.
-                /// nb. do not use multi-part upload here due to small file size.
-                await uploadFileToBucket(bucketName, verificationTranscriptStoragePathAndFilename, verificationTranscriptTemporaryLocalPath, true);
+                // Step (1.A.4.B).
+                // Free-up storage by deleting invalid contribution.
+                await deleteObject(bucketName, lastZkeyStoragePath);
+                // Step (1.A.4.B.1).
+                batch.create(contributionDoc.ref, {
+                    participantId: participantDoc.id,
+                    verificationComputationTime: verifyCloudFunctionExecutionTime,
+                    zkeyIndex: isFinalizing ? actions.finalContributionIndex : lastZkeyIndex,
+                    verificationSoftware: {
+                        name: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_NAME),
+                        version: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_VERSION),
+                        commitHash: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_COMMIT_HASH)
+                    },
+                    valid: isContributionValid,
+                    lastUpdated: getCurrentServerTimestampInMillis()
+                });
+            }
+            // Stop VM instance
+            if (isUsingVM) {
+                // using try and catch as the VM stopping function can throw
+                // however we want to continue without stopping as the
+                // verification was valid, and inform the coordinator
+                try {
+                    await actions.stopEC2Instance(ec2, vmInstanceId);
+                }
+                catch (error) {
+                    printLog(`Error while stopping VM instance ${vmInstanceId} - Error ${error}`, LogLevel.WARN);
+                }
+            }
+            // Step (1.A.4.C)
+            if (!isFinalizing) {
+                // Step (1.A.4.C.1)
+                // Compute new average contribution/verification time.
+                fullContributionTime = Number(verificationStartedAt) - Number(contributionStartedAt);
+                const newAvgContributionComputationTime = avgContributionComputationTime > 0
+                    ? (avgContributionComputationTime + contributionComputationTime) / 2
+                    : contributionComputationTime;
+                const newAvgFullContributionTime = avgFullContributionTime > 0
+                    ? (avgFullContributionTime + fullContributionTime) / 2
+                    : fullContributionTime;
+                const newAvgVerifyCloudFunctionTime = avgVerifyCloudFunctionTime > 0
+                    ? (avgVerifyCloudFunctionTime + verifyCloudFunctionTime) / 2
+                    : verifyCloudFunctionTime;
+                // Prepare tx to update circuit average contribution/verification time.
+                const updatedCircuitDoc = await getDocumentById(actions.getCircuitsCollectionPath(ceremonyId), circuitId);
+                const { waitingQueue: updatedWaitingQueue } = updatedCircuitDoc.data();
+                /// @dev this must happen only for valid contributions.
+                batch.update(circuitDoc.ref, {
+                    avgTimings: {
+                        contributionComputation: isContributionValid
+                            ? newAvgContributionComputationTime
+                            : avgContributionComputationTime,
+                        fullContribution: isContributionValid
+                            ? newAvgFullContributionTime
+                            : avgFullContributionTime,
+                        verifyCloudFunction: isContributionValid
+                            ? newAvgVerifyCloudFunctionTime
+                            : avgVerifyCloudFunctionTime
+                    },
+                    waitingQueue: {
+                        ...updatedWaitingQueue,
+                        completedContributions: isContributionValid
+                            ? completedContributions + 1
+                            : completedContributions,
+                        failedContributions: isContributionValid ? failedContributions : failedContributions + 1
+                    },
+                    lastUpdated: getCurrentServerTimestampInMillis()
+                });
+            }
+            // Step (2).
+            await batch.commit();
+            printLog(`The contribution #${isFinalizing ? actions.finalContributionIndex : lastZkeyIndex} of circuit ${circuitId} (ceremony ${ceremonyId}) has been verified as ${isContributionValid ? "valid" : "invalid"} for the participant ${participantDoc.id}`, LogLevel.INFO);
+        };
+        // Step (1).
+        if (isContributing || isFinalizing) {
+            // Prepare timer.
+            verificationTaskTimer.start();
+            // Step (1.A.3.0).
+            if (isUsingVM) {
+                printLog(`Starting the VM mechanism`, LogLevel.DEBUG);
+                // Prepare for VM execution.
+                let isVMRunning = false; // true when the VM is up, otherwise false.
+                // Step (1.A.3.1).
+                await actions.startEC2Instance(ec2, vmInstanceId);
+                await sleep(60000); // nb. wait for VM startup (1 mins + retry).
+                // Check if the startup is running.
+                isVMRunning = await checkIfVMRunning(ec2, vmInstanceId);
+                printLog(`VM running: ${isVMRunning}`, LogLevel.DEBUG);
+                // Step (1.A.3.2).
+                // Prepare.
+                const verificationCommand = actions.vmContributionVerificationCommand(bucketName, lastZkeyStoragePath, verificationTranscriptStoragePathAndFilename);
+                // Run.
+                commandId = await actions.runCommandUsingSSM(ssm, vmInstanceId, verificationCommand);
+                printLog(`Starting the execution of command ${commandId}`, LogLevel.DEBUG);
+                // Step (1.A.3.3).
+                return await waitForVMCommandExecution(ssm, vmInstanceId, commandId)
+                    .then(async () => {
+                    // Command execution successfully completed.
+                    printLog(`Command ${commandId} execution has been successfully completed`, LogLevel.DEBUG);
+                    await completeVerification();
+                })
+                    .catch((error) => {
+                    // Command execution aborted.
+                    printLog(`Command ${commandId} execution has been aborted - Error ${error}`, LogLevel.WARN);
+                    logAndThrowError(COMMON_ERRORS.CM_INVALID_COMMAND_EXECUTION);
+                });
             }
-            // Compute verification transcript hash.
-            transcriptBlake2bHash = await actions.blake512FromPath(verificationTranscriptTemporaryLocalPath);
-            // Free resources by unlinking transcript temporary file.
-            fs.unlinkSync(verificationTranscriptTemporaryLocalPath);
-            // Filter participant contributions to find the data related to the one verified.
-            const participantContributions = contributions.filter((contribution) => !!contribution.hash && !!contribution.computationTime && !contribution.doc);
-            /// @dev (there must be only one contribution with an empty 'doc' field).
-            if (participantContributions.length !== 1)
-                logAndThrowError(SPECIFIC_ERRORS.SE_VERIFICATION_NO_PARTICIPANT_CONTRIBUTION_DATA);
-            // Get contribution computation time.
-            contributionComputationTime = contributions.at(0).computationTime;
-            // Step (1.A.4.A.2).
-            batch.create(contributionDoc.ref, {
-                participantId: participantDoc.id,
-                contributionComputationTime,
-                verificationComputationTime: verifyCloudFunctionExecutionTime,
-                zkeyIndex: isFinalizing ? actions.finalContributionIndex : lastZkeyIndex,
-                files: {
-                    transcriptFilename: verificationTranscriptCompleteFilename,
-                    lastZkeyFilename,
-                    transcriptStoragePath: verificationTranscriptStoragePathAndFilename,
-                    lastZkeyStoragePath,
-                    transcriptBlake2bHash,
-                    lastZkeyBlake2bHash
-                },
-                verificationSoftware: {
-                    name: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_NAME),
-                    version: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_VERSION),
-                    commitHash: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_COMMIT_HASH)
-                },
-                valid: isContributionValid,
-                lastUpdated: getCurrentServerTimestampInMillis()
-            });
-            verifyContributionTimer.stop();
-            verifyCloudFunctionTime = verifyContributionTimer.ms();
-        }
-        else {
-            // Step (1.A.4.B).
-            // Free-up storage by deleting invalid contribution.
-            await deleteObject(bucketName, lastZkeyStoragePath);
-            // Step (1.A.4.B.1).
-            batch.create(contributionDoc.ref, {
-                participantId: participantDoc.id,
-                verificationComputationTime: verifyCloudFunctionExecutionTime,
-                zkeyIndex: isFinalizing ? actions.finalContributionIndex : lastZkeyIndex,
-                verificationSoftware: {
-                    name: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_NAME),
-                    version: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_VERSION),
-                    commitHash: String(process.env.CUSTOM_CONTRIBUTION_VERIFICATION_SOFTWARE_COMMIT_HASH)
-                },
-                valid: isContributionValid,
-                lastUpdated: getCurrentServerTimestampInMillis()
-            });
-        }
-        // Stop VM instance
-        if (isUsingVM)
-            await actions.stopEC2Instance(ec2, vmInstanceId);
-        // Step (1.A.4.C)
-        if (!isFinalizing) {
-            // Step (1.A.4.C.1)
-            // Compute new average contribution/verification time.
-            fullContributionTime = Number(verificationStartedAt) - Number(contributionStartedAt);
-            const newAvgContributionComputationTime = avgContributionComputationTime > 0
-                ? (avgContributionComputationTime + contributionComputationTime) / 2
-                : contributionComputationTime;
-            const newAvgFullContributionTime = avgFullContributionTime > 0
-                ? (avgFullContributionTime + fullContributionTime) / 2
-                : fullContributionTime;
-            const newAvgVerifyCloudFunctionTime = avgVerifyCloudFunctionTime > 0
-                ? (avgVerifyCloudFunctionTime + verifyCloudFunctionTime) / 2
-                : verifyCloudFunctionTime;
-            // Prepare tx to update circuit average contribution/verification time.    
-            const updatedCircuitDoc = await getDocumentById(actions.getCircuitsCollectionPath(ceremonyId), circuitId);
-            const { waitingQueue: updatedWaitingQueue } = updatedCircuitDoc.data();
-            /// @dev this must happen only for valid contributions.
-            batch.update(circuitDoc.ref, {
-                avgTimings: {
-                    contributionComputation: isContributionValid
-                        ? newAvgContributionComputationTime
-                        : avgContributionComputationTime,
-                    fullContribution: isContributionValid ? newAvgFullContributionTime : avgFullContributionTime,
-                    verifyCloudFunction: isContributionValid
-                        ? newAvgVerifyCloudFunctionTime
-                        : avgVerifyCloudFunctionTime
-                },
-                waitingQueue: {
-                    ...updatedWaitingQueue,
-                    completedContributions: isContributionValid
-                        ? completedContributions + 1
-                        : completedContributions,
-                    failedContributions: isContributionValid ? failedContributions : failedContributions + 1
-                },
-                lastUpdated: getCurrentServerTimestampInMillis()
-            });
-        }
-        // Step (2).
-        await batch.commit();
-        printLog(`The contribution #${isFinalizing ? actions.finalContributionIndex : lastZkeyIndex} of circuit ${circuitId} (ceremony ${ceremonyId}) has been verified as ${isContributionValid ? "valid" : "invalid"} for the participant ${participantDoc.id}`, LogLevel.DEBUG);
-    };
-    // Step (1).
-    if (isContributing || isFinalizing) {
-        // Prepare timer.
-        verificationTaskTimer.start();
-        // Step (1.A.3.0).
-        if (isUsingVM) {
-            printLog(`Starting the VM mechanism`, LogLevel.DEBUG);
-            // Prepare for VM execution.
-            let isVMRunning = false; // true when the VM is up, otherwise false.
-            // Step (1.A.3.1).
-            await actions.startEC2Instance(ec2, vmInstanceId);
-            await sleep(60000); // nb. wait for VM startup (1 mins + retry).
-            // Check if the startup is running.
-            isVMRunning = await checkIfVMRunning(ec2, vmInstanceId);
-            printLog(`VM running: ${isVMRunning}`, LogLevel.DEBUG);
-            // Step (1.A.3.2).
-            // Prepare.
-            const verificationCommand = actions.vmContributionVerificationCommand(bucketName, lastZkeyStoragePath, verificationTranscriptStoragePathAndFilename);
-            // Run.
-            commandId = await actions.runCommandUsingSSM(ssm, vmInstanceId, verificationCommand);
-            printLog(`Starting the execution of command ${commandId}`, LogLevel.DEBUG);
-            // Step (1.A.3.3).
-            return new Promise((resolve, reject) => waitForVMCommandExecution(resolve, reject, ssm, vmInstanceId, commandId))
-                .then(async () => {
-                // Command execution successfully completed.
-                printLog(`Command ${commandId} execution has been successfully completed`, LogLevel.DEBUG);
-                await completeVerification();
-            })
-                .catch((error) => {
-                // Command execution aborted.
-                printLog(`Command ${commandId} execution has been aborted - Error ${error}`, LogLevel.DEBUG);
-                logAndThrowError(COMMON_ERRORS.CM_INVALID_COMMAND_EXECUTION);
-            });
-        }
-        else {
             // CF approach.
             printLog(`CF mechanism`, LogLevel.DEBUG);
             const potStoragePath = actions.getPotStorageFilePath(files.potFilename);
             const firstZkeyStoragePath = actions.getZkeyStorageFilePath(prefix, `${prefix}_${actions.genesisZkeyIndex}.zkey`);
+            printLog(`pot file: ${potStoragePath}`, LogLevel.DEBUG);
+            printLog(`zkey file: ${firstZkeyStoragePath}`, LogLevel.DEBUG);
             // Prepare temporary file paths.
             // (nb. these are needed to download the necessary artifacts for verification from AWS S3).
             verificationTranscriptTemporaryLocalPath = createTemporaryLocalPath(verificationTranscriptCompleteFilename);
             const potTempFilePath = createTemporaryLocalPath(`${circuitId}_${participantDoc.id}.pot`);
             const firstZkeyTempFilePath = createTemporaryLocalPath(`${circuitId}_${participantDoc.id}_genesis.zkey`);
             const lastZkeyTempFilePath = createTemporaryLocalPath(`${circuitId}_${participantDoc.id}_last.zkey`);
+            printLog(`pot file: ${potTempFilePath}`, LogLevel.DEBUG);
+            printLog(`firstZkey file: ${firstZkeyTempFilePath}`, LogLevel.DEBUG);
+            printLog(`last zkey file: ${lastZkeyTempFilePath}`, LogLevel.DEBUG);
             // Create and populate transcript.
             const transcriptLogger = actions.createCustomLoggerForFile(verificationTranscriptTemporaryLocalPath);
             transcriptLogger.info(`${isFinalizing ? `Final verification` : `Verification`} transcript for ${prefix} circuit Phase 2 contribution.\n${isFinalizing ? `Coordinator ` : `Contributor # ${Number(lastZkeyIndex)}`} (${contributorOrCoordinatorIdentifier})\n`);
@@ -1807,6 +1899,7 @@ const verifycontribution = functionsV2__namespace.https.onCall({ memory: "16GiB"
             await downloadArtifactFromS3Bucket(bucketName, lastZkeyStoragePath, lastZkeyTempFilePath);
             // Step (1.A.4).
             isContributionValid = await snarkjs.zKey.verifyFromInit(firstZkeyTempFilePath, potTempFilePath, lastZkeyTempFilePath, transcriptLogger);
+            await dumpLog(verificationTranscriptTemporaryLocalPath);
             // Compute contribution hash.
             lastZkeyBlake2bHash = await actions.blake512FromPath(lastZkeyTempFilePath);
             // Free resources by unlinking temporary folders.
@@ -1821,6 +1914,11 @@ const verifycontribution = functionsV2__namespace.https.onCall({ memory: "16GiB"
             }
             await completeVerification();
         }
+        return null;
+    }
+    catch (error) {
+        logAndThrowError(makeError("unknown", error));
+        return null;
     }
 });
 /**
@@ -1829,9 +1927,9 @@ const verifycontribution = functionsV2__namespace.https.onCall({ memory: "16GiB"
  * this does not happen if the participant is actually the coordinator who is finalizing the ceremony.
  */
 const refreshParticipantAfterContributionVerification = functionsV1__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .firestore.document(`/${actions.commonTerms.collections.ceremonies.name}/{ceremony}/${actions.commonTerms.collections.circuits.name}/{circuit}/${actions.commonTerms.collections.contributions.name}/{contributions}`)
     .onCreate(async (createdContribution) => {
@@ -1882,7 +1980,7 @@ const refreshParticipantAfterContributionVerification = functionsV1__namespace
         lastUpdated: getCurrentServerTimestampInMillis()
     });
     await batch.commit();
-    printLog(`Participant ${participantId} refreshed after contribution ${createdContribution.id} - The participant was finalizing the ceremony ${isFinalizing}`, LogLevel.DEBUG);
+    printLog(`Participant ${participantId} refreshed after contribution ${createdContribution.id} - The participant was finalizing the ceremony? ${isFinalizing}`, LogLevel.INFO);
 });
 /**
  * Finalize the ceremony circuit.
@@ -1890,9 +1988,9 @@ const refreshParticipantAfterContributionVerification = functionsV1__namespace
  * and verification key extracted from the circuit final contribution (as part of the ceremony finalization process).
  */
 const finalizeCircuit = functionsV1__namespace
-    .region('europe-west1')
+    .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || !context.auth.token.coordinator)
@@ -2036,7 +2134,7 @@ const checkIfBucketIsDedicatedToCeremony = async (bucketName) => {
 const createBucket = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     // Check if the user has the coordinator claim.
@@ -2047,6 +2145,7 @@ const createBucket = functions__namespace
     // Connect to S3 client.
     const S3 = await getS3Client();
     try {
+        printLog(`Creating AWS S3 bucket ${data.bucketName} ...`, LogLevel.LOG);
         // Try to get information about the bucket.
         await S3.send(new clientS3.HeadBucketCommand({ Bucket: data.bucketName }));
         // If the command succeeded, the bucket exists, throw an error.
@@ -2087,8 +2186,10 @@ const createBucket = functions__namespace
                     CORSConfiguration: {
                         CORSRules: [
                             {
-                                AllowedMethods: ["GET"],
-                                AllowedOrigins: ["*"]
+                                AllowedMethods: ["GET", "PUT"],
+                                AllowedOrigins: ["*"],
+                                ExposeHeaders: ["ETag", "Content-Length"],
+                                AllowedHeaders: ["*"]
                             }
                         ]
                     }
@@ -2124,7 +2225,7 @@ const createBucket = functions__namespace
 const checkIfObjectExist = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     // Check if the user has the coordinator claim.
@@ -2170,7 +2271,7 @@ const checkIfObjectExist = functions__namespace
 const generateGetObjectPreSignedUrl = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth)
@@ -2210,7 +2311,7 @@ const generateGetObjectPreSignedUrl = functions__namespace
 const startMultiPartUpload = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "2GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -2265,7 +2366,8 @@ const startMultiPartUpload = functions__namespace
 const generatePreSignedUrlsParts = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB",
+    timeoutSeconds: 300
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -2325,7 +2427,7 @@ const generatePreSignedUrlsParts = functions__namespace
 const completeMultiPartUpload = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "2GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -2374,6 +2476,216 @@ const completeMultiPartUpload = functions__namespace
     }
 });
 
+dotenv.config();
+const { BANDADA_API_URL, BANDADA_GROUP_ID } = process.env;
+const bandadaApi = new apiSdk.ApiSdk(BANDADA_API_URL);
+const bandadaValidateProof = functions__namespace
+    .region("europe-west1")
+    .runWith({
+    memory: "1GB"
+})
+    .https.onCall(async (data) => {
+    const VKEY_DATA = {
+        protocol: "groth16",
+        curve: "bn128",
+        nPublic: 3,
+        vk_alpha_1: [
+            "20491192805390485299153009773594534940189261866228447918068658471970481763042",
+            "9383485363053290200918347156157836566562967994039712273449902621266178545958",
+            "1"
+        ],
+        vk_beta_2: [
+            [
+                "6375614351688725206403948262868962793625744043794305715222011528459656738731",
+                "4252822878758300859123897981450591353533073413197771768651442665752259397132"
+            ],
+            [
+                "10505242626370262277552901082094356697409835680220590971873171140371331206856",
+                "21847035105528745403288232691147584728191162732299865338377159692350059136679"
+            ],
+            ["1", "0"]
+        ],
+        vk_gamma_2: [
+            [
+                "10857046999023057135944570762232829481370756359578518086990519993285655852781",
+                "11559732032986387107991004021392285783925812861821192530917403151452391805634"
+            ],
+            [
+                "8495653923123431417604973247489272438418190587263600148770280649306958101930",
+                "4082367875863433681332203403145435568316851327593401208105741076214120093531"
+            ],
+            ["1", "0"]
+        ],
+        vk_delta_2: [
+            [
+                "3697618915467790705869942236922063775466274665053173890632463796679068973252",
+                "14948341351907992175709156460547989243732741534604949238422596319735704165658"
+            ],
+            [
+                "3028459181652799888716942141752307629938889957960373621898607910203491239368",
+                "11380736494786911280692284374675752681598754560757720296073023058533044108340"
+            ],
+            ["1", "0"]
+        ],
+        vk_alphabeta_12: [
+            [
+                [
+                    "2029413683389138792403550203267699914886160938906632433982220835551125967885",
+                    "21072700047562757817161031222997517981543347628379360635925549008442030252106"
+                ],
+                [
+                    "5940354580057074848093997050200682056184807770593307860589430076672439820312",
+                    "12156638873931618554171829126792193045421052652279363021382169897324752428276"
+                ],
+                [
+                    "7898200236362823042373859371574133993780991612861777490112507062703164551277",
+                    "7074218545237549455313236346927434013100842096812539264420499035217050630853"
+                ]
+            ],
+            [
+                [
+                    "7077479683546002997211712695946002074877511277312570035766170199895071832130",
+                    "10093483419865920389913245021038182291233451549023025229112148274109565435465"
+                ],
+                [
+                    "4595479056700221319381530156280926371456704509942304414423590385166031118820",
+                    "19831328484489333784475432780421641293929726139240675179672856274388269393268"
+                ],
+                [
+                    "11934129596455521040620786944827826205713621633706285934057045369193958244500",
+                    "8037395052364110730298837004334506829870972346962140206007064471173334027475"
+                ]
+            ]
+        ],
+        IC: [
+            [
+                "12951059800758687233303204819298121944551181861362200875212570257618182506154",
+                "5751958719396509176593242305268064754837298673622815112953832050159760501392",
+                "1"
+            ],
+            [
+                "9561588427935871983444704959674198910445823619407211599507208879011862515257",
+                "14576201570478094842467636169770180675293504492823217349086195663150934064643",
+                "1"
+            ],
+            [
+                "4811967233483727873912563574622036989372099129165459921963463310078093941559",
+                "1874883809855039536107616044787862082553628089593740724610117059083415551067",
+                "1"
+            ],
+            [
+                "12252730267779308452229639835051322390696643456253768618882001876621526827161",
+                "7899194018737016222260328309937800777948677569409898603827268776967707173231",
+                "1"
+            ]
+        ]
+    };
+    if (!BANDADA_GROUP_ID)
+        throw new Error("BANDADA_GROUP_ID is not defined in .env");
+    const { proof, publicSignals } = data;
+    const isCorrect = snarkjs.groth16.verify(VKEY_DATA, publicSignals, proof);
+    if (!isCorrect)
+        return {
+            valid: false,
+            message: "Invalid proof",
+            token: ""
+        };
+    const commitment = data.publicSignals[1];
+    const isMember = await bandadaApi.isGroupMember(BANDADA_GROUP_ID, commitment);
+    if (!isMember)
+        return {
+            valid: false,
+            message: "Not a member of the group",
+            token: ""
+        };
+    const auth$1 = auth.getAuth();
+    try {
+        await admin.auth().createUser({
+            uid: commitment
+        });
+    }
+    catch (error) {
+        // if user already exist then just pass
+        if (error.code !== "auth/uid-already-exists") {
+            throw new Error(error);
+        }
+    }
+    const token = await auth$1.createCustomToken(commitment);
+    return {
+        valid: true,
+        message: "Valid proof and group member",
+        token
+    };
+});
+
+dotenv.config();
+const checkNonceOfSIWEAddress = functions__namespace
+    .region("europe-west1")
+    .runWith({ memory: "1GB" })
+    .https.onCall(async (data) => {
+    try {
+        const { auth0Token } = data;
+        const result = (await fetch(`${process.env.AUTH0_APPLICATION_URL}/userinfo`, {
+            method: "GET",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${auth0Token}`
+            }
+        }).then((_res) => _res.json()));
+        if (!result.sub) {
+            return {
+                valid: false,
+                message: "No user detected. Please check device flow token"
+            };
+        }
+        const auth$1 = auth.getAuth();
+        // check nonce
+        const parts = result.sub.split("|");
+        const address = decodeURIComponent(parts[2]).split(":")[2];
+        const minimumNonce = Number(process.env.ETH_MINIMUM_NONCE);
+        const nonceBlockHeight = "latest"; // process.env.ETH_NONCE_BLOCK_HEIGHT
+        // look up nonce for address @block
+        let nonceOk = true;
+        if (minimumNonce > 0) {
+            const provider = setEthProvider();
+            console.log(`got provider - block # ${await provider.getBlockNumber()}`);
+            const nonce = await provider.getTransactionCount(address, nonceBlockHeight);
+            console.log(`nonce ${nonce}`);
+            nonceOk = nonce >= minimumNonce;
+        }
+        console.log(`checking nonce ${nonceOk}`);
+        if (!nonceOk) {
+            return {
+                valid: false,
+                message: "Eth address does not meet the nonce requirements"
+            };
+        }
+        try {
+            await admin.auth().createUser({
+                displayName: address,
+                uid: address
+            });
+        }
+        catch (error) {
+            // if user already exist then just pass
+            if (error.code !== "auth/uid-already-exists") {
+                throw new Error(error);
+            }
+        }
+        const token = await auth$1.createCustomToken(address);
+        return {
+            valid: true,
+            token
+        };
+    }
+    catch (error) {
+        return {
+            valid: false,
+            message: `Something went wrong ${error}`
+        };
+    }
+});
+
 dotenv.config();
 /**
  * Check and remove the current contributor if it doesn't complete the contribution on the specified amount of time.
@@ -2396,7 +2708,7 @@ dotenv.config();
 const checkAndRemoveBlockingContributor = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .pubsub.schedule("every 1 minutes")
     .onRun(async () => {
@@ -2415,7 +2727,7 @@ const checkAndRemoveBlockingContributor = functions__namespace
             // Get ceremony circuits.
             const circuits = await getCeremonyCircuits(ceremony.id);
             // Extract ceremony data.
-            const { timeoutMechanismType, penalty } = ceremony.data();
+            const { timeoutType: timeoutMechanismType, penalty } = ceremony.data();
             for (const circuit of circuits) {
                 if (!circuit.data())
                     // Do not use `logAndThrowError` method to avoid the function to exit before checking every ceremony.
@@ -2428,7 +2740,7 @@ const checkAndRemoveBlockingContributor = functions__namespace
                     // Case (A).
                     if (!currentContributor)
                         // Do not use `logAndThrowError` method to avoid the function to exit before checking every ceremony.
-                        printLog(`No current contributor for circuit ${circuit.id} - ceremony ${ceremony.id}`, LogLevel.WARN);
+                        printLog(`No current contributor for circuit ${circuit.id} - ceremony ${ceremony.id}`, LogLevel.DEBUG);
                     else if (avgFullContribution === 0 &&
                         avgContributionComputation === 0 &&
                         avgVerifyCloudFunction === 0 &&
@@ -2454,7 +2766,7 @@ const checkAndRemoveBlockingContributor = functions__namespace
                                 ? Number(contributionStartedAt) +
                                     Number(avgFullContribution) +
                                     Number(timeoutDynamicThreshold)
-                                : Number(contributionStartedAt) + Number(fixedTimeWindow) * 60000; // * 60000 = convert minutes to millis.
+                                : (Number(contributionStartedAt) + Number(fixedTimeWindow)) * 60000; // * 60000 = convert minutes to millis.
                             // Case (D).
                             const timeoutExpirationDateInMsForVerificationCloudFunction = contributionStep === "VERIFYING" /* ParticipantContributionStep.VERIFYING */ &&
                                 !!verificationStartedAt
@@ -2465,17 +2777,18 @@ const checkAndRemoveBlockingContributor = functions__namespace
                             if (timeoutExpirationDateInMsForBlockingContributor < currentServerTimestamp &&
                                 (contributionStep === "DOWNLOADING" /* ParticipantContributionStep.DOWNLOADING */ ||
                                     contributionStep === "COMPUTING" /* ParticipantContributionStep.COMPUTING */ ||
-                                    contributionStep === "UPLOADING" /* ParticipantContributionStep.UPLOADING */))
+                                    contributionStep === "UPLOADING" /* ParticipantContributionStep.UPLOADING */ ||
+                                    contributionStep === "COMPLETED" /* ParticipantContributionStep.COMPLETED */))
                                 timeoutType = "BLOCKING_CONTRIBUTION" /* TimeoutType.BLOCKING_CONTRIBUTION */;
                             if (timeoutExpirationDateInMsForVerificationCloudFunction > 0 &&
                                 timeoutExpirationDateInMsForVerificationCloudFunction < currentServerTimestamp &&
                                 contributionStep === "VERIFYING" /* ParticipantContributionStep.VERIFYING */)
                                 timeoutType = "BLOCKING_CLOUD_FUNCTION" /* TimeoutType.BLOCKING_CLOUD_FUNCTION */;
-                            printLog(`${timeoutType} detected for circuit ${circuit.id} - ceremony ${ceremony.id}`, LogLevel.DEBUG);
                             if (!timeoutType)
                                 // Do not use `logAndThrowError` method to avoid the function to exit before checking every ceremony.
-                                printLog(`No timeout for circuit ${circuit.id} - ceremony ${ceremony.id}`, LogLevel.WARN);
+                                printLog(`No timeout for circuit ${circuit.id} - ceremony ${ceremony.id}`, LogLevel.DEBUG);
                             else {
+                                printLog(`${timeoutType} detected for circuit ${circuit.id} - ceremony ${ceremony.id}`, LogLevel.WARN);
                                 // Case (E).
                                 let nextCurrentContributorId = "";
                                 // Prepare Firestore batch of txs.
@@ -2526,7 +2839,7 @@ const checkAndRemoveBlockingContributor = functions__namespace
                                 });
                                 // Send atomic update for Firestore.
                                 await batch.commit();
-                                printLog(`The contributor ${participant.id} has been identified as potential blocking contributor. A timeout of type ${timeoutType} has been triggered w/ a penalty of ${timeoutPenaltyInMs} ms`, LogLevel.DEBUG);
+                                printLog(`The contributor ${participant.id} has been identified as potential blocking contributor. A timeout of type ${timeoutType} has been triggered w/ a penalty of ${timeoutPenaltyInMs} ms`, LogLevel.WARN);
                             }
                         }
                     }
@@ -2542,7 +2855,7 @@ const checkAndRemoveBlockingContributor = functions__namespace
 const resumeContributionAfterTimeoutExpiration = functions__namespace
     .region("europe-west1")
     .runWith({
-    memory: "512MB"
+    memory: "1GB"
 })
     .https.onCall(async (data, context) => {
     if (!context.auth || (!context.auth.token.participant && !context.auth.token.coordinator))
@@ -2575,9 +2888,11 @@ const resumeContributionAfterTimeoutExpiration = functions__namespace
 
 admin.initializeApp();
 
+exports.bandadaValidateProof = bandadaValidateProof;
 exports.checkAndPrepareCoordinatorForFinalization = checkAndPrepareCoordinatorForFinalization;
 exports.checkAndRemoveBlockingContributor = checkAndRemoveBlockingContributor;
 exports.checkIfObjectExist = checkIfObjectExist;
+exports.checkNonceOfSIWEAddress = checkNonceOfSIWEAddress;
 exports.checkParticipantForCeremony = checkParticipantForCeremony;
 exports.completeMultiPartUpload = completeMultiPartUpload;
 exports.coordinateCeremonyParticipant = coordinateCeremonyParticipant;