@mikeargento/bitgraph-player 0.3.0 → 0.4.0

package/README.md

@@ -25,6 +25,33 @@ folders the BitGraph Folder writes). Exit codes: `0` TRUE, `1` FALSE,
 `2` UNDETERMINED, `3` error. `--out file` writes the verdict to a file;
 `--summary` prints a bundle reconnaissance to stderr.
 
+## Check a bundle
+
+    bitgraph-play check "BitGraph (photo.jpg)/"
+    bitgraph-play check proof.json photo.jpg --json
+
+No rule needed. `check` reads an export (a folder or archive, or a
+proof.json beside the file it records) and says, offline, what the bundle
+establishes about each recording in it: that the file in hand hashes to
+the recorded digest, that the Ed25519 signature and slot binding verify,
+that the AWS Nitro attestation validates to the AWS root and binds this
+exact proof, that the attested PCR0 is a published BitGraph enclave
+measurement, and, from block headers in the bundle, which Ethereum blocks
+the recording sits between. Every line is TRUE, FALSE, or UNDETERMINED:
+FALSE only when evidence in hand contradicts the recording (an edited
+signature, a block header that does not hash to its anchor), UNDETERMINED
+when the evidence does not decide (the file is not in the bundle, a
+witness is missing). Absence is never a verdict. The report ends with what
+no offline check can establish, stated rather than implied. `--json`
+prints the `bitgraph-check/1` report; exit codes match evaluation.
+
+The same check runs in a browser: `verify.html`, built from this package,
+ships inside the BitGraph Folder, beside Recordings. Open it and choose or
+drop a recording folder, offline, and it renders the same report from the
+same code. It is not hosted anywhere: the site's own drop box checks a file
+against the public ledger, and a second box that could only say
+"self-consistent" would be two boxes with different meanings.
+
 ## Start a rule
 
     bitgraph-play init po.pdf delivery.jpg approval.pdf --out rule.json
@@ -123,6 +150,19 @@ const verdict = buildVerdict(rule, ruleSha256Hex, resolutions, evaluation, audit
 process.stdout.write(serializeVerdict(verdict));
 ```
 
+`check` is exported the same way, in two halves that the CLI and the
+browser page share:
+
+```ts
+import { ingestBundle, ingestEntries } from "@mikeargento/bitgraph-audit";
+import { checkIngest, renderCheckText } from "@mikeargento/bitgraph-player";
+
+const report = await checkIngest(await ingestBundle("BitGraph (photo.jpg)/"));
+// or, from bytes already in hand (a browser drop):
+// await checkIngest(await ingestEntries([{ path: "proof.json", open: () => bytes }]));
+process.stdout.write(renderCheckText(report));
+```
+
 ## License
 
 MIT. Verification and evaluation are permissionless by design.

package/SPEC.md

@@ -238,9 +238,12 @@ bundle contents MUST be byte-identical.
 Diagnostics go to stderr. Stdout carries verdict bytes only.
 
 These requirements govern evaluation invocations. A command-line Player
-MAY offer authoring conveniences (such as rule scaffolding) as distinct
+MAY offer authoring conveniences (such as rule scaffolding) and reading
+conveniences (such as a bundle check that reports, in the three values,
+what a bundle establishes about the recordings it holds) as distinct
 subcommands; those are outside this specification and MUST NOT change
-the behavior of evaluation invocations.
+the behavior of evaluation invocations. The reference implementation's
+`check` subcommand uses the same exit-code mapping as evaluation.
 
 ## 9. Format 2: trustedKeys and signedBy
 

package/dist/__tests__/check.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=check.test.d.ts.map

package/dist/__tests__/check.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/check.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/check.test.js

@@ -0,0 +1,358 @@
+// Copyright (c) 2024-2026 Mike Argento. Licensed under the MIT License. See LICENSE.
+/**
+ * `check` tests.
+ *
+ * The real fixture is a genuine export from the production ledger: a
+ * 685-byte random text file, its proof (real Ed25519 signature, real AWS
+ * Nitro attestation, enclave v5 measurement), both bounding anchors, and
+ * both block-header witnesses. Copied verbatim from a BitGraph Folder
+ * export; read-only here, no ledger writes, no network.
+ *
+ * The parity test is the one that matters most: the same bundle ingested
+ * from disk (the CLI's path) and from memory (the browser page's path)
+ * must produce byte-identical reports, or the two fronts have drifted.
+ */
+import { describe, it, before, after } from "node:test";
+import * as assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { cp, mkdtemp, readFile, rm, writeFile, readdir } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, relative } from "node:path";
+import { fileURLToPath } from "node:url";
+import { ingestBundle, ingestEntries } from "@mikeargento/bitgraph-audit";
+import { buildCheckReport, checkIngest, renderCheckText, serializeCheckReport, KNOWN_ENCLAVE_MEASUREMENTS } from "../check.js";
+import { PLAYER_VERSION } from "../verdict.js";
+import { digestFor, makeAudit } from "./fixtures.js";
+const FIXTURE = fileURLToPath(new URL("../../src/__tests__/fixtures/export-random-043", import.meta.url));
+const CLI_PATH = fileURLToPath(new URL("../cli.js", import.meta.url));
+async function walk(root, rel = "") {
+    const out = [];
+    const dir = rel === "" ? root : join(root, rel);
+    for (const entry of await readdir(dir, { withFileTypes: true })) {
+        const r = rel === "" ? entry.name : `${rel}/${entry.name}`;
+        if (entry.isDirectory())
+            out.push(...(await walk(root, r)));
+        else if (entry.isFile())
+            out.push(r);
+    }
+    return out;
+}
+async function memoryEntriesOf(root) {
+    const paths = await walk(root);
+    return paths.map((p) => ({
+        path: p,
+        open: () => readFile(join(root, ...p.split("/"))).then((b) => new Uint8Array(b)),
+    }));
+}
+/** Fill the audit sections makeAudit leaves empty so buildCheckReport can run over synthetic input. */
+function complete(audit, overrides = {}) {
+    const a = audit;
+    return {
+        ...audit,
+        anomalies: { anomalies: [], divergences: [], boundaryEntryPoints: [] },
+        authorities: { groups: [], anomalies: [], sharedSignersAcrossEpochs: [] },
+        anchors: { anchors: [], metadataOnlyProofHashes: [], findings: [] },
+        witnesses: { outcomes: [], findings: [] },
+        attestations: {
+            records: [],
+            findings: [],
+            counts: {
+                proofsWithDeclaredMeasurement: 0,
+                proofsWithDocument: 0,
+                documentsValidated: 0,
+                documentsFailed: 0,
+                pcr0Matches: 0,
+                pcr0Mismatches: 0,
+                userDataBound: 0,
+                userDataUnbound: 0,
+            },
+        },
+        ...(a["temporal"] !== undefined ? {} : {}),
+        ...overrides,
+    };
+}
+describe("check: real export fixture (disk)", () => {
+    let report;
+    before(async () => {
+        report = await checkIngest(await ingestBundle(FIXTURE));
+    });
+    it("is TRUE end to end: file, signature, attestation, enclave, both anchors, both witnesses", () => {
+        assert.equal(report.check, "bitgraph-check/1");
+        assert.equal(report.result, "TRUE");
+        assert.equal(report.recordings.length, 1);
+        assert.equal(report.anchors.length, 2);
+        const rec = report.recordings[0];
+        assert.equal(rec.result, "TRUE");
+        assert.equal(rec.filePath, "random-043.txt");
+        assert.deepEqual(rec.lines.map((l) => [l.name, l.result]), [
+            ["file", "TRUE"],
+            ["signature", "TRUE"],
+            ["attestation", "TRUE"],
+            ["enclave", "TRUE"],
+        ]);
+        for (const anchor of report.anchors) {
+            assert.equal(anchor.result, "TRUE");
+            assert.deepEqual(anchor.lines.map((l) => [l.name, l.result]), [
+                ["signature", "TRUE"],
+                ["witness", "TRUE"],
+            ]);
+        }
+        assert.equal(report.contradictions.length, 0);
+    });
+    it("brackets the recording between the two verified block headers", () => {
+        const b = report.recordings[0].bounds;
+        assert.equal(b.status, "bracketed");
+        assert.equal(b.notBefore?.blockNumber, "25735831");
+        assert.equal(b.notAfter?.blockNumber, "25735832");
+        assert.match(b.detail, /after Ethereum block 25735831 and before block 25735832/);
+    });
+    it("orders anchors by causal position, not file name", () => {
+        assert.deepEqual(report.anchors.map((a) => a.blockNumber), ["25735831", "25735832"]);
+        assert.equal(report.anchors[0].witnessPath, "ethereum-anchors/anchor-before-witness.json");
+    });
+    it("names the excerpt gaps as notes, never as verdicts", () => {
+        assert.ok(report.notes.some((n) => /causal positions? between the earliest and latest recording/.test(n)));
+        assert.ok(report.notes.some((n) => /link(s)? to a predecessor that is not in this bundle/.test(n)));
+        assert.equal(report.contradictions.length, 0);
+    });
+    it("states what it cannot check", () => {
+        assert.ok(report.notChecked.some((n) => /canonical/.test(n)));
+        assert.ok(report.notChecked.some((n) => /ledger/.test(n)));
+        assert.equal(report.network, "none");
+        assert.equal(report.evaluator.version, PLAYER_VERSION);
+    });
+    it("recognizes the enclave v5 measurement from PINS.md", () => {
+        const enclave = report.recordings[0].lines.find((l) => l.name === "enclave");
+        assert.match(enclave.detail, /enclave v5/);
+        assert.equal(KNOWN_ENCLAVE_MEASUREMENTS.length, 4);
+    });
+    it("serializes deterministically: no timestamps, no machine paths", async () => {
+        const again = await checkIngest(await ingestBundle(FIXTURE));
+        assert.equal(serializeCheckReport(again), serializeCheckReport(report));
+        const bytes = serializeCheckReport(report);
+        assert.ok(!bytes.includes(FIXTURE), "report must not contain the machine path");
+        assert.ok(!bytes.includes("startedAt"));
+        assert.ok(renderCheckText(report).startsWith("TRUE: this file was recorded at position 1576"));
+    });
+});
+describe("check: disk and memory ingest produce byte-identical reports (the no-drift guarantee)", () => {
+    it("ingestEntries over the same files equals ingestBundle over the directory", async () => {
+        const fromDisk = await checkIngest(await ingestBundle(FIXTURE));
+        const fromMemory = await checkIngest(await ingestEntries(await memoryEntriesOf(FIXTURE)));
+        assert.equal(serializeCheckReport(fromMemory), serializeCheckReport(fromDisk));
+        assert.equal(fromMemory.result, "TRUE");
+    });
+    it("memory ingest tolerates any supply order (entries are sorted by path)", async () => {
+        const entries = await memoryEntriesOf(FIXTURE);
+        const reversed = [...entries].reverse();
+        const a = await checkIngest(await ingestEntries(entries));
+        const b = await checkIngest(await ingestEntries(reversed));
+        assert.equal(serializeCheckReport(a), serializeCheckReport(b));
+    });
+    it("memory ingest accepts whole bytes, promises, and chunk streams alike", async () => {
+        const paths = await walk(FIXTURE);
+        const entries = [];
+        for (const [i, p] of paths.entries()) {
+            const bytes = new Uint8Array(await readFile(join(FIXTURE, ...p.split("/"))));
+            const open = i % 3 === 0
+                ? () => bytes
+                : i % 3 === 1
+                    ? () => Promise.resolve(bytes)
+                    : () => (async function* () {
+                        const half = Math.floor(bytes.length / 2);
+                        yield bytes.subarray(0, half);
+                        yield bytes.subarray(half);
+                    })();
+            entries.push({ path: p, open });
+        }
+        const report = await checkIngest(await ingestEntries(entries));
+        assert.equal(report.result, "TRUE");
+    });
+});
+describe("check: what evidence in hand contradicts, and what it merely leaves open", () => {
+    let dir;
+    before(async () => {
+        dir = await mkdtemp(join(tmpdir(), "bitgraph-check-"));
+    });
+    after(async () => {
+        await rm(dir, { recursive: true, force: true });
+    });
+    async function copyFixture(name) {
+        const dest = join(dir, name);
+        await cp(FIXTURE, dest, { recursive: true });
+        return dest;
+    }
+    it("an edited file is UNDETERMINED (not FALSE) with a note naming it: absence is not a verdict", async () => {
+        const d = await copyFixture("edited");
+        const p = join(d, "random-043.txt");
+        await writeFile(p, Buffer.concat([await readFile(p), Buffer.from("x")]));
+        const report = await checkIngest(await ingestBundle(d));
+        assert.equal(report.result, "UNDETERMINED");
+        const file = report.recordings[0].lines.find((l) => l.name === "file");
+        assert.equal(file.result, "UNDETERMINED");
+        assert.ok(report.notes.some((n) => /random-043\.txt/.test(n) && /bytes differ/.test(n)));
+        // Everything else about the recording still holds.
+        assert.equal(report.recordings[0].lines.find((l) => l.name === "signature").result, "TRUE");
+        assert.equal(report.recordings[0].lines.find((l) => l.name === "attestation").result, "TRUE");
+    });
+    it("a tampered signature is FALSE", async () => {
+        const d = await copyFixture("badsig");
+        const p = join(d, "proof.json");
+        const proof = JSON.parse(await readFile(p, "utf8"));
+        const sig = Buffer.from(proof.signer.signatureB64, "base64");
+        sig[0] = sig[0] ^ 1;
+        proof.signer.signatureB64 = sig.toString("base64");
+        await writeFile(p, JSON.stringify(proof));
+        const report = await checkIngest(await ingestBundle(d));
+        assert.equal(report.result, "FALSE");
+        assert.equal(report.recordings[0].lines.find((l) => l.name === "signature").result, "FALSE");
+        assert.match(report.summary, /^FALSE/);
+    });
+    it("a tampered block header is FALSE on that anchor, and the bound it gave is withdrawn", async () => {
+        const d = await copyFixture("badwitness");
+        const p = join(d, "ethereum-anchors", "anchor-after-witness.json");
+        const w = JSON.parse(await readFile(p, "utf8"));
+        const h = w.headerRlpHex;
+        w.headerRlpHex = h.slice(0, -2) + (h.slice(-2) === "00" ? "11" : "00");
+        await writeFile(p, JSON.stringify(w));
+        const report = await checkIngest(await ingestBundle(d));
+        assert.equal(report.result, "FALSE");
+        const after = report.anchors.find((a) => a.blockNumber === "25735832");
+        assert.equal(after.lines.find((l) => l.name === "witness").result, "FALSE");
+        assert.equal(report.recordings[0].result, "TRUE", "the recording itself is still sound");
+        assert.equal(report.recordings[0].bounds.status, "lower-bounded");
+    });
+    it("proof plus file with no anchors is TRUE and unanchored", async () => {
+        const entries = ["proof.json", "random-043.txt"].map((name) => ({
+            path: name,
+            open: () => readFile(join(FIXTURE, name)).then((b) => new Uint8Array(b)),
+        }));
+        const report = await checkIngest(await ingestEntries(entries));
+        assert.equal(report.result, "TRUE");
+        assert.equal(report.recordings[0].bounds.status, "unanchored");
+        assert.equal(report.anchors.length, 0);
+        assert.match(report.summary, /with no Ethereum bound in this bundle/);
+    });
+    it("proof alone (no file) is UNDETERMINED: signature and attestation hold, binding to bytes does not", async () => {
+        const entries = [
+            { path: "proof.json", open: () => readFile(join(FIXTURE, "proof.json")).then((b) => new Uint8Array(b)) },
+        ];
+        const report = await checkIngest(await ingestEntries(entries));
+        assert.equal(report.result, "UNDETERMINED");
+        const rec = report.recordings[0];
+        assert.equal(rec.lines.find((l) => l.name === "file").result, "UNDETERMINED");
+        assert.equal(rec.lines.find((l) => l.name === "signature").result, "TRUE");
+        assert.equal(rec.filePath, undefined);
+    });
+    it("without WebCrypto the attestation is UNDETERMINED with the reason, never FALSE", async () => {
+        const report = await checkIngest(await ingestBundle(FIXTURE), { webCryptoAvailable: false });
+        const rec = report.recordings[0];
+        assert.equal(rec.lines.find((l) => l.name === "attestation").result, "UNDETERMINED");
+        assert.match(rec.lines.find((l) => l.name === "attestation").detail, /WebCrypto/);
+        assert.equal(rec.lines.find((l) => l.name === "enclave").result, "UNDETERMINED");
+        assert.equal(report.result, "UNDETERMINED");
+    });
+    it("an empty bundle is UNDETERMINED and says so", async () => {
+        const report = await checkIngest(await ingestEntries([]));
+        assert.equal(report.result, "UNDETERMINED");
+        assert.match(report.summary, /no BitGraph proofs were found/);
+    });
+});
+describe("check: synthetic audit shapes", () => {
+    it("an unknown PCR0 is UNDETERMINED (outside this verifier's knowledge), never FALSE", () => {
+        const audit = complete(makeAudit({
+            proofs: [{ name: "a", digestB64: digestFor("a"), epochId: "E", counter: "5", slotCounter: "4" }],
+            partitions: [{ epochId: "E", members: ["a"] }],
+        }));
+        audit.attestations.records.push({
+            proofHash: "proofhash-a",
+            declaredMeasurementPresent: true,
+            declaredMeasurement: "ff".repeat(48),
+            documentPresent: true,
+            attestationFormat: "aws-nitro",
+            documentValidated: true,
+            checks: [],
+            attestedPcr0: "ff".repeat(48),
+            pcr0MatchesDeclared: true,
+            userDataBoundToProof: true,
+        });
+        const report = buildCheckReport(audit);
+        const rec = report.recordings[0];
+        assert.equal(rec.lines.find((l) => l.name === "attestation").result, "TRUE");
+        const enclave = rec.lines.find((l) => l.name === "enclave");
+        assert.equal(enclave.result, "UNDETERMINED");
+        assert.match(enclave.detail, /not among the BitGraph enclave measurements this verifier knows/);
+        assert.equal(report.result, "UNDETERMINED");
+    });
+    it("an attestation bound to some other proof is FALSE", () => {
+        const audit = complete(makeAudit({
+            proofs: [{ name: "a", digestB64: digestFor("a"), epochId: "E", counter: "5" }],
+            partitions: [{ epochId: "E", members: ["a"] }],
+        }));
+        audit.attestations.records.push({
+            proofHash: "proofhash-a",
+            declaredMeasurementPresent: true,
+            documentPresent: true,
+            documentValidated: true,
+            checks: [],
+            attestedPcr0: KNOWN_ENCLAVE_MEASUREMENTS[3].pcr0,
+            pcr0MatchesDeclared: true,
+            userDataBoundToProof: false,
+        });
+        const report = buildCheckReport(audit);
+        assert.equal(report.recordings[0].lines.find((l) => l.name === "attestation").result, "FALSE");
+        assert.equal(report.result, "FALSE");
+    });
+    it("structural contradictions surface as FALSE while excerpt gaps stay notes", () => {
+        const audit = complete(makeAudit({
+            proofs: [
+                { name: "a", digestB64: digestFor("a"), epochId: "E", counter: "5" },
+                { name: "b", digestB64: digestFor("b"), epochId: "E", counter: "5" },
+            ],
+            partitions: [{ epochId: "E", members: ["a", "b"] }],
+        }));
+        audit.anomalies.anomalies.push({ code: "unexplained-counter-positions", proofHashes: [], message: "gap", details: { count: "3", ranges: [], positions: [], truncated: false } }, { code: "chain-break-missing", proofHashes: ["proofhash-a"], message: "missing pred", details: {} }, { code: "counter-collision", proofHashes: ["proofhash-a", "proofhash-b"], message: "two commits at position 5" });
+        const report = buildCheckReport(audit);
+        assert.equal(report.contradictions.length, 1);
+        assert.match(report.contradictions[0].detail, /^counter-collision/);
+        assert.ok(report.notes.some((n) => /3 causal positions/.test(n)));
+        assert.equal(report.result, "FALSE");
+    });
+});
+describe("check: CLI", () => {
+    it("prints the human report and exits 0 on the real fixture", () => {
+        const r = spawnSync(process.execPath, [CLI_PATH, "check", FIXTURE], { encoding: "utf8" });
+        assert.equal(r.status, 0, r.stderr);
+        assert.match(r.stdout, /^TRUE: this file was recorded at position 1576/);
+        assert.match(r.stdout, /Result: TRUE/);
+    });
+    it("--json prints the bitgraph-check/1 report", () => {
+        const r = spawnSync(process.execPath, [CLI_PATH, "check", FIXTURE, "--json"], { encoding: "utf8" });
+        assert.equal(r.status, 0, r.stderr);
+        const parsed = JSON.parse(r.stdout);
+        assert.equal(parsed.check, "bitgraph-check/1");
+        assert.equal(parsed.result, "TRUE");
+    });
+    it("accepts a list of files and ingests them in memory", () => {
+        const r = spawnSync(process.execPath, [CLI_PATH, "check", join(FIXTURE, "proof.json"), join(FIXTURE, "random-043.txt")], { encoding: "utf8" });
+        assert.equal(r.status, 0, r.stderr);
+        assert.match(r.stdout, /no Ethereum bound in this bundle/);
+    });
+    it("exits 2 for UNDETERMINED (proof alone) and 3 for a missing path", () => {
+        const u = spawnSync(process.execPath, [CLI_PATH, "check", join(FIXTURE, "proof.json")], { encoding: "utf8" });
+        assert.equal(u.status, 2, u.stderr);
+        const e = spawnSync(process.execPath, [CLI_PATH, "check", join(FIXTURE, "does-not-exist")], { encoding: "utf8" });
+        assert.equal(e.status, 3);
+        assert.match(e.stderr, /cannot read bundle/);
+    });
+    it("evaluate and init reject --json (it belongs to check only)", () => {
+        const r = spawnSync(process.execPath, [CLI_PATH, "init", join(FIXTURE, "random-043.txt"), "--json"], { encoding: "utf8" });
+        assert.equal(r.status, 3);
+        assert.match(r.stderr, /usage:/);
+    });
+    it("the relative path helper is unused by the report (paths are bundle-relative only)", () => {
+        // Guard against a future report field leaking absolute paths.
+        assert.equal(relative(FIXTURE, join(FIXTURE, "proof.json")), "proof.json");
+    });
+});
+//# sourceMappingURL=check.test.js.map

package/dist/__tests__/check.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.test.js","sourceRoot":"","sources":["../../src/__tests__/check.test.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE1E,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,eAAe,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAE/H,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gDAAgD,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1G,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEtE,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,GAAG,GAAG,EAAE;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;aACvD,IAAI,KAAK,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvB,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;KACjF,CAAC,CAAC,CAAC;AACN,CAAC;AAED,uGAAuG;AACvG,SAAS,QAAQ,CAAC,KAAkB,EAAE,YAAkC,EAAE;IACxE,MAAM,CAAC,GAAG,KAA2C,CAAC;IACtD,OAAO;QACL,GAAG,KAAK;QACR,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE;QACtE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,yBAAyB,EAAE,EAAE,EAAE;QACzE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,uBAAuB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACzC,YAAY,EAAE;YACZ,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE;gBACN,6BAA6B,EAAE,CAAC;gBAChC,kBAAkB,EAAE,CAAC;gBACrB,kBAAkB,EAAE,CAAC;gBACrB,eAAe,EAAE,CAAC;gBAClB,WAAW,EAAE,CAAC;gBACd,cAAc,EAAE,CAAC;gBACjB,aAAa,EAAE,CAAC;gBAChB,eAAe,EAAE,CAAC;aACnB;SACF;QACD,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,SAAS;KACE,CAAC;AACnB,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,IAAI,MAAmB,CAAC;IACxB,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAC,SAAS,CACd,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EACxC;YACE,CAAC,MAAM,EAAE,MAAM,CAAC;YAChB,CAAC,WAAW,EAAE,MAAM,CAAC;YACrB,CAAC,aAAa,EAAE,MAAM,CAAC;YACvB,CAAC,SAAS,EAAE,MAAM,CAAC;SACpB,CACF,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACpC,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAC3C;gBACE,CAAC,WAAW,EAAE,MAAM,CAAC;gBACrB,CAAC,SAAS,EAAE,MAAM,CAAC;aACpB,CACF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,yDAAyD,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EACxC,CAAC,UAAU,EAAE,UAAU,CAAC,CACzB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,6CAA6C,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6DAA6D,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3G,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sDAAsD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAE,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,0CAA0C,CAAC,CAAC;QAChF,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,+CAA+C,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uFAAuF,EAAE,GAAG,EAAE;IACrG,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,MAAM,IAAI,GACR,CAAC,GAAG,CAAC,KAAK,CAAC;gBACT,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK;gBACb,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;oBACX,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;oBAC9B,CAAC,CAAC,GAAG,EAAE,CACH,CAAC,KAAK,SAAS,CAAC;wBACd,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;wBAC1C,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;wBAC9B,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC,CAAC,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACxF,IAAI,GAAW,CAAC;IAChB,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,WAAW,CAAC,IAAY;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAE,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,mDAAmD;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAyC,CAAC;QAC5F,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC7D,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC;QACrB,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,kBAAkB,EAAE,2BAA2B,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAA6B,CAAC;QAC5E,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;QACzB,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,UAAU,CAAE,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,MAAM,EAAE,qCAAqC,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,OAAO,GAAwB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnF,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;SACzE,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,uCAAuC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,KAAK,IAAI,EAAE;QAChH,MAAM,OAAO,GAAwB;YACnC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;SACzG,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,KAAK,GAAG,QAAQ,CACpB,SAAS,CAAC;YACR,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;YAChG,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;SAC/C,CAAC,CACH,CAAC;QACF,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC;YAC9B,SAAS,EAAE,aAAa;YACxB,0BAA0B,EAAE,IAAI;YAChC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,eAAe,EAAE,IAAI;YACrB,iBAAiB,EAAE,WAAW;YAC9B,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,mBAAmB,EAAE,IAAI;YACzB,oBAAoB,EAAE,IAAI;SAC3B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAE,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,iEAAiE,CAAC,CAAC;QAChG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,QAAQ,CACpB,SAAS,CAAC;YACR,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YAC9E,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;SAC/C,CAAC,CACH,CAAC;QACF,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC;YAC9B,SAAS,EAAE,aAAa;YACxB,0BAA0B,EAAE,IAAI;YAChC,eAAe,EAAE,IAAI;YACrB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,0BAA0B,CAAC,CAAC,CAAE,CAAC,IAAI;YACjD,mBAAmB,EAAE,IAAI;YACzB,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,KAAK,GAAG,QAAQ,CACpB,SAAS,CAAC;YACR,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;gBACpE,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;aACrE;YACD,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;SACpD,CAAC,CACH,CAAC;QACF,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAC5B,EAAE,IAAI,EAAE,+BAA+B,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAChJ,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,EACnG,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CACjH,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACpG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAgB,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,SAAS,CACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,EACjF,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAClH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3H,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,8DAA8D;QAC9D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/check.d.ts

@@ -0,0 +1,156 @@
+/**
+ * `check`: what a bundle establishes about the recordings it holds, said
+ * plainly, offline, in the Player's three values.
+ *
+ * This is a SPEC section 8 convenience: a distinct subcommand that never
+ * touches evaluation semantics. It asks no rule-author question ("was A
+ * before B"); it asks the reader's question ("is this recording sound, and
+ * what bounds it"), over the audit pipeline's canonical interpretation of
+ * the bundle, and answers per line with TRUE, FALSE, or UNDETERMINED.
+ *
+ * The vocabulary, and the line it lives or dies on:
+ *
+ *   TRUE          evidence in hand establishes the property.
+ *   FALSE         evidence in hand CONTRADICTS the property: bytes that do
+ *                 not hash to the digest they sit beside, a signature that
+ *                 fails, an attestation whose user_data is not this proof, a
+ *                 block header that does not hash to its anchor's block hash,
+ *                 two recordings that cannot both be right.
+ *   UNDETERMINED  the evidence does not decide. Missing bytes, a missing
+ *                 witness, an environment that cannot run a check, a
+ *                 measurement this verifier does not know. Absence is never
+ *                 a verdict, and this command never degrades a failed or
+ *                 missing check into a FALSE (project rule: a failed read is
+ *                 never a verdict).
+ *
+ * The overall result is the strong-Kleene `all` over every line the report
+ * emits: each recording's lines, each anchor's lines, and each structural
+ * contradiction. Ethereum BOUNDS are reported descriptively per recording
+ * and never enter the conjunction: a bundle without an anchor has an
+ * unbounded recording, not an unsound one. A witness that is PRESENT and
+ * fails is a contradiction and does enter.
+ *
+ * Excerpt honesty. A single export is an excerpt of a chain: its recording
+ * links to a predecessor that is not in the bundle, and the counter
+ * positions between its anchors are absent. The audit reports those as
+ * anomalies because it is built to audit whole epochs; here they are
+ * expected and are reported as notes, never as verdicts. Real
+ * contradictions (collisions, forks, malformed links, signer changes)
+ * still surface as FALSE.
+ *
+ * Enclave identity. An attestation proves that SOME AWS Nitro enclave
+ * running code with the attested PCR0 signed this proof's key. Whether
+ * that PCR0 is a published BitGraph enclave measurement is a fact this
+ * verifier carries as DECLARED knowledge (KNOWN_ENCLAVE_MEASUREMENTS, from
+ * server/commit-service/reproducible-build/PINS.md). A measurement outside
+ * that list is UNDETERMINED, never FALSE: it is beyond what this build of
+ * the verifier knows, which is exactly how an offline verifier should age.
+ *
+ * Determinism. The report contains no wall-clock time, no machine path, and
+ * no run-local value; bundle-relative entry paths are bundle content and
+ * are allowed. Same bundle bytes, same report bytes.
+ */
+import type { AuditResult, IngestResult } from "@mikeargento/bitgraph-audit";
+import type { ThreeValued } from "./types.js";
+/**
+ * Published BitGraph enclave PCR0 measurements, per PINS.md, oldest first.
+ * Each remains correct for proofs minted during its own period; a proof
+ * carries its own measurement, so nothing here needs to be "current" for
+ * an old proof to check. Lowercase hex, exactly as attestations report.
+ */
+export declare const KNOWN_ENCLAVE_MEASUREMENTS: ReadonlyArray<{
+    pcr0: string;
+    label: string;
+    period: string;
+}>;
+/** One checked property, three-valued, with a plain-language reason. */
+export interface CheckLine {
+    name: "file" | "signature" | "attestation" | "enclave" | "witness" | "contradiction";
+    result: ThreeValued;
+    detail: string;
+}
+/** A verified Ethereum bound on a recording, from a witness in the bundle. */
+export interface CheckBound {
+    blockNumber?: string;
+    blockHash: string;
+    /** Unix seconds from the verified block header. */
+    timestamp: number;
+    anchorProofHash: string;
+    evidence: "chain-link" | "counter-order";
+    weaker: boolean;
+}
+export interface CheckBounds {
+    status: "bracketed" | "lower-bounded" | "upper-bounded" | "unanchored";
+    notBefore?: CheckBound;
+    notAfter?: CheckBound;
+    detail: string;
+}
+/** A non-anchor recording in the bundle. */
+export interface CheckRecording {
+    proofHash: string;
+    digestB64: string;
+    epochId?: string;
+    chainId: string;
+    counter?: string;
+    slotCounter?: string;
+    publicKeyB64?: string;
+    /** Bundle-relative path of the matched artifact, when its bytes were present. */
+    filePath?: string;
+    lines: CheckLine[];
+    /** Kleene all over `lines`. */
+    result: ThreeValued;
+    bounds: CheckBounds;
+}
+/** An Ethereum anchor recording in the bundle. */
+export interface CheckAnchor {
+    proofHash: string;
+    epochId?: string;
+    chainId: string;
+    counter?: string;
+    blockNumber?: string;
+    blockHash?: string;
+    /** Bundle-relative path of the witness file, when one matched this anchor. */
+    witnessPath?: string;
+    lines: CheckLine[];
+    result: ThreeValued;
+}
+export interface CheckReport {
+    check: "bitgraph-check/1";
+    result: ThreeValued;
+    /** One-sentence plain-language conclusion, deterministic. */
+    summary: string;
+    recordings: CheckRecording[];
+    anchors: CheckAnchor[];
+    /** Structural findings the bundle contradicts itself on. Every entry is FALSE. */
+    contradictions: CheckLine[];
+    /** Informational: excerpt gaps, unmatched files, duplicates. Never verdicts. */
+    notes: string[];
+    /** What no offline check can establish, stated rather than implied. */
+    notChecked: string[];
+    evaluator: {
+        name: "bitgraph-player";
+        version: string;
+        audit: string;
+    };
+    network: "none";
+}
+export interface CheckOptions {
+    /**
+     * False when the environment cannot run the attestation's ECDSA P-384
+     * verification (no WebCrypto). Attestation lines are then UNDETERMINED
+     * with that reason instead of a false FALSE. Defaults to true.
+     */
+    webCryptoAvailable?: boolean;
+}
+/**
+ * Check an already-ingested bundle: runs the audit's pure tail (no
+ * filesystem, no network) and builds the report. Both the CLI and the
+ * browser page call this, so they cannot drift.
+ */
+export declare function checkIngest(ingest: IngestResult, options?: CheckOptions): Promise<CheckReport>;
+/** The pure report builder over an AuditResult. */
+export declare function buildCheckReport(audit: AuditResult, options?: CheckOptions): CheckReport;
+export declare function renderCheckText(report: CheckReport): string;
+/** Deterministic JSON bytes for the report: two-space indent, one trailing newline. */
+export declare function serializeCheckReport(report: CheckReport): string;
+//# sourceMappingURL=check.d.ts.map

package/dist/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,KAAK,EAEV,WAAW,EAEX,YAAY,EAKb,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ9C;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqBrG,CAAC;AAMF,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,eAAe,CAAC;IACrF,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,YAAY,GAAG,eAAe,CAAC;IACzC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;IACvE,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,+BAA+B;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,kFAAkF;IAClF,cAAc,EAAE,SAAS,EAAE,CAAC;IAC5B,gFAAgF;IAChF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,uEAAuE;IACvE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAwBD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAGpG;AAED,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAuExF;AAqgBD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAuC3D;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAEhE"}