@mikeargento/bitgraph-player 0.2.1 → 0.4.0

package/dist/__tests__/sig-v2.test.js

@@ -0,0 +1,266 @@
+// Copyright (c) 2024-2026 Mike Argento. Licensed under the MIT License. See LICENSE.
+/**
+ * Format 2: trustedKeys + signedBy.
+ *
+ * The invariants under test:
+ *   - signedBy is TRUE or UNDETERMINED, never FALSE, so not(signedBy)
+ *     is permanently UNDETERMINED: no open-world negative escapes.
+ *   - Signature math is derived; the name-to-key binding is declared.
+ *   - A /1 rule parses and evaluates exactly as before (verdict/1), and
+ *     /2-only syntax in a /1 rule is a parse error.
+ *   - Broken signature files are noise, never evidence and never errors.
+ *
+ * All evidence is synthetic and in-memory. No ledger writes, ever.
+ */
+import { strict as assert } from "node:assert";
+import { createHash, generateKeyPairSync, sign as cryptoSign } from "node:crypto";
+import { test } from "node:test";
+import { evaluate } from "../evaluate.js";
+import { playAudit, claimUsesSignatures } from "../play.js";
+import { parseRule, RuleError } from "../rule.js";
+import { parseSigFile, sigMessage } from "../sig.js";
+import { resolveCast } from "../cast.js";
+import { digestFor, makeAudit } from "./fixtures.js";
+// ---------------------------------------------------------------------------
+// Key + signature helpers (in-memory, per-run keys; verification is the
+// deterministic part under test, not key generation)
+// ---------------------------------------------------------------------------
+function ed25519Pair() {
+    const { publicKey, privateKey } = generateKeyPairSync("ed25519");
+    const spki = publicKey.export({ format: "der", type: "spki" });
+    // Raw key = last 32 bytes of the SPKI encoding.
+    return { publicKeyB64: spki.subarray(spki.length - 32).toString("base64"), privateKey };
+}
+function es256Pair() {
+    const { publicKey, privateKey } = generateKeyPairSync("ec", { namedCurve: "P-256" });
+    const spki = publicKey.export({ format: "der", type: "spki" });
+    return { publicKeyB64: spki.toString("base64"), privateKey };
+}
+function hexOfB64(digestB64) {
+    return Buffer.from(digestB64, "base64").toString("hex");
+}
+function makeSigBytes(alg, publicKeyB64, privateKey, overHex) {
+    const message = sigMessage(overHex);
+    const signature = alg === "ed25519"
+        ? cryptoSign(null, message, privateKey)
+        : cryptoSign("sha256", message, privateKey);
+    return Buffer.from(JSON.stringify({
+        sig: "bitgraph-sig/1",
+        over: `sha256:${overHex}`,
+        alg,
+        publicKey: publicKeyB64,
+        signature: signature.toString("base64"),
+    }));
+}
+function evidenceOf(...items) {
+    const map = new Map();
+    for (const bytes of items) {
+        map.set(createHash("sha256").update(bytes).digest("hex"), bytes);
+    }
+    return map;
+}
+const WORK = digestFor("work");
+function v2Rule(publicKeyB64, alg, claim) {
+    return JSON.stringify({
+        rule: "bitgraph-player/2",
+        id: "test-v2",
+        cast: { work: { digest: WORK } },
+        world: "closed",
+        requires: { ordering: "assumption-dependent" },
+        trustedKeys: { mike: { alg, publicKey: publicKeyB64 } },
+        claim,
+    });
+}
+function auditWithWork() {
+    return makeAudit({
+        proofs: [{ name: "w", digestB64: WORK, epochId: "e1", counter: "1" }],
+        partitions: [{ epochId: "e1", members: ["w"] }],
+    });
+}
+// ---------------------------------------------------------------------------
+// Parsing
+// ---------------------------------------------------------------------------
+test("signedBy in a /1 rule is a parse error", () => {
+    const text = JSON.stringify({
+        rule: "bitgraph-player/1",
+        id: "r",
+        cast: { work: { digest: WORK } },
+        world: "closed",
+        requires: { ordering: "hash-linked" },
+        claim: { signedBy: ["work", "mike"] },
+    });
+    assert.throws(() => parseRule(text), RuleError);
+});
+test("trustedKeys in a /1 rule is a parse error", () => {
+    const text = JSON.stringify({
+        rule: "bitgraph-player/1",
+        id: "r",
+        cast: { work: { digest: WORK } },
+        world: "closed",
+        requires: { ordering: "hash-linked" },
+        trustedKeys: { mike: { alg: "ed25519", publicKey: "A".repeat(43) + "=" } },
+        claim: { exists: "work" },
+    });
+    assert.throws(() => parseRule(text), RuleError);
+});
+test("signedBy referencing an undeclared trusted key is a parse error", () => {
+    const { publicKeyB64 } = ed25519Pair();
+    const text = v2Rule(publicKeyB64, "ed25519", { signedBy: ["work", "ghost"] });
+    assert.throws(() => parseRule(text), /does not declare/);
+});
+test("trustedKeys entries are strictly validated", () => {
+    for (const bad of [
+        { alg: "rsa", publicKey: "x" },
+        { alg: "ed25519" },
+        { publicKey: "x" },
+        { alg: "ed25519", publicKey: "x", extra: 1 },
+    ]) {
+        const text = JSON.stringify({
+            rule: "bitgraph-player/2",
+            id: "r",
+            cast: { work: { digest: WORK } },
+            world: "closed",
+            requires: { ordering: "hash-linked" },
+            trustedKeys: { mike: bad },
+            claim: { exists: "work" },
+        });
+        assert.throws(() => parseRule(text), RuleError, JSON.stringify(bad));
+    }
+});
+test("pure-integer trusted key names are rejected", () => {
+    const text = JSON.stringify({
+        rule: "bitgraph-player/2",
+        id: "r",
+        cast: { work: { digest: WORK } },
+        world: "closed",
+        requires: { ordering: "hash-linked" },
+        trustedKeys: { "42": { alg: "ed25519", publicKey: "A".repeat(43) + "=" } },
+        claim: { exists: "work" },
+    });
+    assert.throws(() => parseRule(text), /non-digit/);
+});
+test("claimUsesSignatures walks the tree", () => {
+    assert.equal(claimUsesSignatures({ exists: "x" }), false);
+    assert.equal(claimUsesSignatures({ all: [{ exists: "x" }, { not: { signedBy: ["x", "k"] } }] }), true);
+});
+// ---------------------------------------------------------------------------
+// Signature file parsing
+// ---------------------------------------------------------------------------
+test("parseSigFile accepts a well-formed file and rejects noise", () => {
+    const { publicKeyB64, privateKey } = ed25519Pair();
+    const good = makeSigBytes("ed25519", publicKeyB64, privateKey, hexOfB64(WORK));
+    assert.notEqual(parseSigFile(good), undefined);
+    assert.equal(parseSigFile(Buffer.from("not json")), undefined);
+    assert.equal(parseSigFile(Buffer.from(JSON.stringify({ sig: "other/1" }))), undefined);
+    assert.equal(parseSigFile(Buffer.from(JSON.stringify({ sig: "bitgraph-sig/1", over: "x", alg: "rsa" }))), undefined);
+});
+// ---------------------------------------------------------------------------
+// Evaluation: ed25519 and es256
+// ---------------------------------------------------------------------------
+for (const alg of ["ed25519", "es256"]) {
+    test(`signedBy(${alg}): valid signature in evidence evaluates TRUE with derived math`, () => {
+        const pair = alg === "ed25519" ? ed25519Pair() : es256Pair();
+        const rule = parseRule(v2Rule(pair.publicKeyB64, alg, { signedBy: ["work", "mike"] }));
+        const audit = auditWithWork();
+        const evidence = evidenceOf(makeSigBytes(alg, pair.publicKeyB64, pair.privateKey, hexOfB64(WORK)));
+        const result = playAudit(rule, "0".repeat(64), audit, evidence);
+        assert.equal(result.verdict.result, "TRUE");
+        assert.equal(result.verdict.verdict, "bitgraph-player-verdict/2");
+        const step = result.verdict.derived.find((s) => s.claim.startsWith("signedBy"));
+        assert.ok(step !== undefined);
+        assert.equal(step.result, "TRUE");
+        // The binding is declared, alongside the math being derived.
+        const trusted = result.verdict.declared.find((d) => d.assertion === "trusted-key");
+        assert.ok(trusted !== undefined);
+        assert.equal(trusted["keyName"], "mike");
+        assert.equal(trusted.verifiedHere, false);
+    });
+    test(`signedBy(${alg}): tampered signature is noise, evaluates UNDETERMINED`, () => {
+        const pair = alg === "ed25519" ? ed25519Pair() : es256Pair();
+        const rule = parseRule(v2Rule(pair.publicKeyB64, alg, { signedBy: ["work", "mike"] }));
+        const bytes = makeSigBytes(alg, pair.publicKeyB64, pair.privateKey, hexOfB64(WORK));
+        const parsed = JSON.parse(Buffer.from(bytes).toString("utf8"));
+        const sigBytes = Buffer.from(parsed["signature"], "base64");
+        sigBytes[0] = sigBytes[0] ^ 0xff;
+        parsed["signature"] = sigBytes.toString("base64");
+        const tampered = Buffer.from(JSON.stringify(parsed));
+        const result = playAudit(rule, "0".repeat(64), auditWithWork(), evidenceOf(tampered));
+        assert.equal(result.verdict.result, "UNDETERMINED");
+    });
+}
+test("a non-P-256 key declared as es256 is undecodable key material: UNDETERMINED, never a verify", () => {
+    const { publicKey, privateKey } = generateKeyPairSync("ec", { namedCurve: "secp384r1" });
+    const spki = publicKey.export({ format: "der", type: "spki" }).toString("base64");
+    const rule = parseRule(v2Rule(spki, "es256", { signedBy: ["work", "mike"] }));
+    const evidence = evidenceOf(makeSigBytes("es256", spki, privateKey, hexOfB64(WORK)));
+    const result = playAudit(rule, "0".repeat(64), auditWithWork(), evidence);
+    assert.equal(result.verdict.result, "UNDETERMINED");
+    const step = result.verdict.derived.find((s) => s.claim.startsWith("signedBy"));
+    assert.ok(step !== undefined);
+    assert.match(String(step.because["reason"]), /not decodable/);
+});
+test("signedBy with empty evidence is UNDETERMINED, and not(signedBy) stays UNDETERMINED", () => {
+    const { publicKeyB64 } = ed25519Pair();
+    const rule = parseRule(v2Rule(publicKeyB64, "ed25519", { not: { signedBy: ["work", "mike"] } }));
+    const result = playAudit(rule, "0".repeat(64), auditWithWork());
+    // Never FALSE and never TRUE: the open world stays open.
+    assert.equal(result.verdict.result, "UNDETERMINED");
+});
+test("signedBy by the wrong key is UNDETERMINED, never FALSE", () => {
+    const right = ed25519Pair();
+    const wrong = ed25519Pair();
+    const rule = parseRule(v2Rule(right.publicKeyB64, "ed25519", { signedBy: ["work", "mike"] }));
+    const evidence = evidenceOf(makeSigBytes("ed25519", wrong.publicKeyB64, wrong.privateKey, hexOfB64(WORK)));
+    const result = playAudit(rule, "0".repeat(64), auditWithWork(), evidence);
+    assert.equal(result.verdict.result, "UNDETERMINED");
+});
+test("signedBy over a different digest does not satisfy the role's claim", () => {
+    const pair = ed25519Pair();
+    const rule = parseRule(v2Rule(pair.publicKeyB64, "ed25519", { signedBy: ["work", "mike"] }));
+    const other = digestFor("other");
+    const evidence = evidenceOf(makeSigBytes("ed25519", pair.publicKeyB64, pair.privateKey, hexOfB64(other)));
+    const result = playAudit(rule, "0".repeat(64), auditWithWork(), evidence);
+    assert.equal(result.verdict.result, "UNDETERMINED");
+});
+test("signedBy evaluates against the declared digest even when the role has no recording", () => {
+    const pair = ed25519Pair();
+    const text = JSON.stringify({
+        rule: "bitgraph-player/2",
+        id: "r",
+        cast: { work: { digest: WORK, optional: true } },
+        world: "closed",
+        requires: { ordering: "hash-linked" },
+        trustedKeys: { mike: { alg: "ed25519", publicKey: pair.publicKeyB64 } },
+        claim: { signedBy: ["work", "mike"] },
+    });
+    const rule = parseRule(text);
+    const audit = makeAudit({ proofs: [], partitions: [] });
+    const evidence = evidenceOf(makeSigBytes("ed25519", pair.publicKeyB64, pair.privateKey, hexOfB64(WORK)));
+    const resolutions = resolveCast(rule.cast, audit);
+    const evaluation = evaluate(rule, resolutions, audit, evidence);
+    assert.equal(evaluation.result, "TRUE");
+});
+test("a /1 rule still yields a /1 verdict and ignores supplied evidence", () => {
+    const text = JSON.stringify({
+        rule: "bitgraph-player/1",
+        id: "r",
+        cast: { work: { digest: WORK } },
+        world: "closed",
+        requires: { ordering: "assumption-dependent" },
+        claim: { exists: "work" },
+    });
+    const rule = parseRule(text);
+    const result = playAudit(rule, "0".repeat(64), auditWithWork(), evidenceOf(Buffer.from("junk")));
+    assert.equal(result.verdict.verdict, "bitgraph-player-verdict/1");
+    assert.equal(result.verdict.result, "TRUE");
+});
+test("multiple candidates: the winner is deterministic and reported by content hash", () => {
+    const pair = ed25519Pair();
+    const rule = parseRule(v2Rule(pair.publicKeyB64, "ed25519", { signedBy: ["work", "mike"] }));
+    const sig = makeSigBytes("ed25519", pair.publicKeyB64, pair.privateKey, hexOfB64(WORK));
+    const junk = Buffer.from("{}");
+    const a = playAudit(rule, "0".repeat(64), auditWithWork(), evidenceOf(sig, junk));
+    const b = playAudit(rule, "0".repeat(64), auditWithWork(), evidenceOf(junk, sig));
+    assert.equal(a.bytes, b.bytes);
+});
+//# sourceMappingURL=sig-v2.test.js.map

package/dist/__tests__/sig-v2.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sig-v2.test.js","sourceRoot":"","sources":["../../src/__tests__/sig-v2.test.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAErD,8EAA8E;AAC9E,wEAAwE;AACxE,qDAAqD;AACrD,8EAA8E;AAE9E,SAAS,WAAW;IAClB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAW,CAAC;IACzE,gDAAgD;IAChD,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAW,CAAC;IACzE,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CACnB,GAAwB,EACxB,YAAoB,EACpB,UAA2C,EAC3C,OAAe;IAEf,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,SAAS,GACb,GAAG,KAAK,SAAS;QACf,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC;QACvC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,CAAC,SAAS,CAAC;QACb,GAAG,EAAE,gBAAgB;QACrB,IAAI,EAAE,UAAU,OAAO,EAAE;QACzB,GAAG;QACH,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACxC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAG,KAAmB;IACxC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAE/B,SAAS,MAAM,CAAC,YAAoB,EAAE,GAAwB,EAAE,KAAc;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,mBAAmB;QACzB,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAChC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE;QAC9C,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE;QACvD,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,SAAS,CAAC;QACf,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACrE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,mBAAmB;QACzB,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAChC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;QACrC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;KACtC,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,mBAAmB;QACzB,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAChC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;QACrC,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,EAAE;QAC1E,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;KAC1B,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,EAAE,YAAY,EAAE,GAAG,WAAW,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACtD,KAAK,MAAM,GAAG,IAAI;QAChB,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE;QAC9B,EAAE,GAAG,EAAE,SAAS,EAAE;QAClB,EAAE,SAAS,EAAE,GAAG,EAAE;QAClB,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE;KAC7C,EAAE,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAChC,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;YACrC,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;YAC1B,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,mBAAmB;QACzB,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAChC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;QACrC,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,EAAE;QAC1E,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;KAC1B,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAC9C,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,CACV,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAClF,IAAI,CACL,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CACV,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAC3F,SAAS,CACV,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAU,EAAE,CAAC;IAChD,IAAI,CAAC,YAAY,GAAG,iEAAiE,EAAE,GAAG,EAAE;QAC1F,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAE,IAAiC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChE,6DAA6D;QAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC;QACnF,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAE,OAAuC,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAE,OAAuC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,GAAG,wDAAwD,EAAE,GAAG,EAAE;QACjF,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA2B,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAW,EAAE,QAAQ,CAAC,CAAC;QACtE,QAAQ,CAAC,CAAC,CAAC,GAAI,QAAQ,CAAC,CAAC,CAAY,GAAG,IAAI,CAAC;QAC7C,MAAM,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,6FAA6F,EAAE,GAAG,EAAE;IACvG,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAI,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAE,IAAiC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,GAAG,EAAE;IAC9F,MAAM,EAAE,YAAY,EAAE,GAAG,WAAW,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IAChE,yDAAyD;IACzD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,UAAU,CACzB,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9E,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,UAAU,CACzB,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,GAAG,EAAE;IAC9F,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,mBAAmB;QACzB,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QAChD,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;QACrC,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE;QACvE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;KACtC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,UAAU,CACzB,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC5E,CAAC;IACF,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,mBAAmB;QACzB,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAChC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE;QAC9C,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;KAC1B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,GAAG,EAAE;IACzF,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC"}

package/dist/check.d.ts

@@ -0,0 +1,156 @@
+/**
+ * `check`: what a bundle establishes about the recordings it holds, said
+ * plainly, offline, in the Player's three values.
+ *
+ * This is a SPEC section 8 convenience: a distinct subcommand that never
+ * touches evaluation semantics. It asks no rule-author question ("was A
+ * before B"); it asks the reader's question ("is this recording sound, and
+ * what bounds it"), over the audit pipeline's canonical interpretation of
+ * the bundle, and answers per line with TRUE, FALSE, or UNDETERMINED.
+ *
+ * The vocabulary, and the line it lives or dies on:
+ *
+ *   TRUE          evidence in hand establishes the property.
+ *   FALSE         evidence in hand CONTRADICTS the property: bytes that do
+ *                 not hash to the digest they sit beside, a signature that
+ *                 fails, an attestation whose user_data is not this proof, a
+ *                 block header that does not hash to its anchor's block hash,
+ *                 two recordings that cannot both be right.
+ *   UNDETERMINED  the evidence does not decide. Missing bytes, a missing
+ *                 witness, an environment that cannot run a check, a
+ *                 measurement this verifier does not know. Absence is never
+ *                 a verdict, and this command never degrades a failed or
+ *                 missing check into a FALSE (project rule: a failed read is
+ *                 never a verdict).
+ *
+ * The overall result is the strong-Kleene `all` over every line the report
+ * emits: each recording's lines, each anchor's lines, and each structural
+ * contradiction. Ethereum BOUNDS are reported descriptively per recording
+ * and never enter the conjunction: a bundle without an anchor has an
+ * unbounded recording, not an unsound one. A witness that is PRESENT and
+ * fails is a contradiction and does enter.
+ *
+ * Excerpt honesty. A single export is an excerpt of a chain: its recording
+ * links to a predecessor that is not in the bundle, and the counter
+ * positions between its anchors are absent. The audit reports those as
+ * anomalies because it is built to audit whole epochs; here they are
+ * expected and are reported as notes, never as verdicts. Real
+ * contradictions (collisions, forks, malformed links, signer changes)
+ * still surface as FALSE.
+ *
+ * Enclave identity. An attestation proves that SOME AWS Nitro enclave
+ * running code with the attested PCR0 signed this proof's key. Whether
+ * that PCR0 is a published BitGraph enclave measurement is a fact this
+ * verifier carries as DECLARED knowledge (KNOWN_ENCLAVE_MEASUREMENTS, from
+ * server/commit-service/reproducible-build/PINS.md). A measurement outside
+ * that list is UNDETERMINED, never FALSE: it is beyond what this build of
+ * the verifier knows, which is exactly how an offline verifier should age.
+ *
+ * Determinism. The report contains no wall-clock time, no machine path, and
+ * no run-local value; bundle-relative entry paths are bundle content and
+ * are allowed. Same bundle bytes, same report bytes.
+ */
+import type { AuditResult, IngestResult } from "@mikeargento/bitgraph-audit";
+import type { ThreeValued } from "./types.js";
+/**
+ * Published BitGraph enclave PCR0 measurements, per PINS.md, oldest first.
+ * Each remains correct for proofs minted during its own period; a proof
+ * carries its own measurement, so nothing here needs to be "current" for
+ * an old proof to check. Lowercase hex, exactly as attestations report.
+ */
+export declare const KNOWN_ENCLAVE_MEASUREMENTS: ReadonlyArray<{
+    pcr0: string;
+    label: string;
+    period: string;
+}>;
+/** One checked property, three-valued, with a plain-language reason. */
+export interface CheckLine {
+    name: "file" | "signature" | "attestation" | "enclave" | "witness" | "contradiction";
+    result: ThreeValued;
+    detail: string;
+}
+/** A verified Ethereum bound on a recording, from a witness in the bundle. */
+export interface CheckBound {
+    blockNumber?: string;
+    blockHash: string;
+    /** Unix seconds from the verified block header. */
+    timestamp: number;
+    anchorProofHash: string;
+    evidence: "chain-link" | "counter-order";
+    weaker: boolean;
+}
+export interface CheckBounds {
+    status: "bracketed" | "lower-bounded" | "upper-bounded" | "unanchored";
+    notBefore?: CheckBound;
+    notAfter?: CheckBound;
+    detail: string;
+}
+/** A non-anchor recording in the bundle. */
+export interface CheckRecording {
+    proofHash: string;
+    digestB64: string;
+    epochId?: string;
+    chainId: string;
+    counter?: string;
+    slotCounter?: string;
+    publicKeyB64?: string;
+    /** Bundle-relative path of the matched artifact, when its bytes were present. */
+    filePath?: string;
+    lines: CheckLine[];
+    /** Kleene all over `lines`. */
+    result: ThreeValued;
+    bounds: CheckBounds;
+}
+/** An Ethereum anchor recording in the bundle. */
+export interface CheckAnchor {
+    proofHash: string;
+    epochId?: string;
+    chainId: string;
+    counter?: string;
+    blockNumber?: string;
+    blockHash?: string;
+    /** Bundle-relative path of the witness file, when one matched this anchor. */
+    witnessPath?: string;
+    lines: CheckLine[];
+    result: ThreeValued;
+}
+export interface CheckReport {
+    check: "bitgraph-check/1";
+    result: ThreeValued;
+    /** One-sentence plain-language conclusion, deterministic. */
+    summary: string;
+    recordings: CheckRecording[];
+    anchors: CheckAnchor[];
+    /** Structural findings the bundle contradicts itself on. Every entry is FALSE. */
+    contradictions: CheckLine[];
+    /** Informational: excerpt gaps, unmatched files, duplicates. Never verdicts. */
+    notes: string[];
+    /** What no offline check can establish, stated rather than implied. */
+    notChecked: string[];
+    evaluator: {
+        name: "bitgraph-player";
+        version: string;
+        audit: string;
+    };
+    network: "none";
+}
+export interface CheckOptions {
+    /**
+     * False when the environment cannot run the attestation's ECDSA P-384
+     * verification (no WebCrypto). Attestation lines are then UNDETERMINED
+     * with that reason instead of a false FALSE. Defaults to true.
+     */
+    webCryptoAvailable?: boolean;
+}
+/**
+ * Check an already-ingested bundle: runs the audit's pure tail (no
+ * filesystem, no network) and builds the report. Both the CLI and the
+ * browser page call this, so they cannot drift.
+ */
+export declare function checkIngest(ingest: IngestResult, options?: CheckOptions): Promise<CheckReport>;
+/** The pure report builder over an AuditResult. */
+export declare function buildCheckReport(audit: AuditResult, options?: CheckOptions): CheckReport;
+export declare function renderCheckText(report: CheckReport): string;
+/** Deterministic JSON bytes for the report: two-space indent, one trailing newline. */
+export declare function serializeCheckReport(report: CheckReport): string;
+//# sourceMappingURL=check.d.ts.map

package/dist/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,KAAK,EAEV,WAAW,EAEX,YAAY,EAKb,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ9C;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqBrG,CAAC;AAMF,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,eAAe,CAAC;IACrF,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,YAAY,GAAG,eAAe,CAAC;IACzC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;IACvE,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,+BAA+B;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,kFAAkF;IAClF,cAAc,EAAE,SAAS,EAAE,CAAC;IAC5B,gFAAgF;IAChF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,uEAAuE;IACvE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAwBD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAGpG;AAED,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAuExF;AAqgBD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAuC3D;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAEhE"}