@mikeargento/bitgraph-verify 1.0.0 → 1.1.1

package/dist/index.d.ts

@@ -6,8 +6,8 @@
  * can verify a proof without asking permission.
  */
 export type { BitGraphProof, BitGraphPolicy, VerificationPolicy, SignedBody, EnforcementTier, Attribution, PolicyBinding, SlotAllocation, ActorIdentity, AuthorizationPayload, WebAuthnAuthorization, AgencyEnvelope, } from "./types.js";
-export { verify, resetEpochLinkState } from "./verifier.js";
-export type { VerifyResult } from "./verifier.js";
-export { computeProofHash } from "./proof-hash.js";
+export { verify, verifyProofIntegrity, resetEpochLinkState } from "./verifier.js";
+export type { VerifyResult, ProofIntegrityResult } from "./verifier.js";
+export { computeProofHash, computeChainHash } from "./proof-hash.js";
 export { canonicalize, canonicalizeToString, constantTimeEqual } from "./canonical.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,eAAe,EACf,WAAW,EACX,aAAa,EACb,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,eAAe,EACf,WAAW,EACX,aAAa,EACb,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAClF,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -1,5 +1,5 @@
 // Copyright (c) 2024-2026 Mike Argento. Licensed under the MIT License. See LICENSE.
-export { verify, resetEpochLinkState } from "./verifier.js";
-export { computeProofHash } from "./proof-hash.js";
+export { verify, verifyProofIntegrity, resetEpochLinkState } from "./verifier.js";
+export { computeProofHash, computeChainHash } from "./proof-hash.js";
 export { canonicalize, canonicalizeToString, constantTimeEqual } from "./canonical.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAyBrF,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAG5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAyBrF,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGlF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/proof-hash.d.ts

@@ -6,4 +6,24 @@ import type { BitGraphProof } from "./types.js";
  * @returns Base64-standard encoded SHA-256 hash
  */
 export declare function computeProofHash(proof: BitGraphProof | Record<string, unknown>): string;
+/**
+ * Compute the CHAIN hash of a BitGraph proof: SHA-256 over the canonicalized
+ * whole proof object, with the ledger-added `proofHash` field removed.
+ *
+ * This is the value the enclave writes into the NEXT proof's
+ * `commit.prevB64` (and into `epochLink.prevProofHashB64` at an epoch
+ * boundary): the enclave hashes the entire assembled proof, before the ledger
+ * appends its convenience `proofHash` field. To link a chain, match a proof's
+ * `commit.prevB64` against `computeChainHash(predecessor)`.
+ *
+ * This differs from computeProofHash, which hashes only the signed-body
+ * subset. The chain hash covers every field (signer signature, attestation
+ * report, slot allocation, attribution, and so on), so any change anywhere in
+ * a proof breaks the link from its successor.
+ *
+ * @param proof - The full BitGraphProof object (or equivalent Record). A
+ *   top-level `proofHash` field, if present, is excluded before hashing.
+ * @returns Base64-standard encoded SHA-256 hash
+ */
+export declare function computeChainHash(proof: BitGraphProof | Record<string, unknown>): string;
 //# sourceMappingURL=proof-hash.d.ts.map

package/dist/proof-hash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof-hash.d.ts","sourceRoot":"","sources":["../src/proof-hash.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAqCvF"}
+{"version":3,"file":"proof-hash.d.ts","sourceRoot":"","sources":["../src/proof-hash.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CA2BvF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAavF"}

package/dist/proof-hash.js

@@ -15,11 +15,17 @@
  *   - attribution (if present)
  *   - attestationFormat (if attestation present)
  *
- * This hash is used for:
- *   - prevB64 chain linking
+ * This hash (the signed-body hash) is used for:
  *   - S3 ledger key generation
  *   - Ethereum anchor binding
- *   - Proof deduplication and verification
+ *   - Proof deduplication and canonical identity
+ *
+ * It is NOT the value referenced by commit.prevB64 or by
+ * epochLink.prevProofHashB64. Those reference the CHAIN hash: SHA-256 over
+ * the canonicalized WHOLE proof (every field, minus the ledger-added
+ * proofHash), computed by computeChainHash below. Matching prevB64 against
+ * computeProofHash instead of computeChainHash silently fails to link real
+ * chains.
  *
  * Algorithm:
  *   1. Extract signed body fields
@@ -61,11 +67,47 @@ export function computeProofHash(proof) {
     }
     const bytes = canonicalize(signedBody);
     const hash = sha256(bytes);
-    // Base64 encode (works in both Node.js and browser)
+    return base64(hash);
+}
+/**
+ * Compute the CHAIN hash of a BitGraph proof: SHA-256 over the canonicalized
+ * whole proof object, with the ledger-added `proofHash` field removed.
+ *
+ * This is the value the enclave writes into the NEXT proof's
+ * `commit.prevB64` (and into `epochLink.prevProofHashB64` at an epoch
+ * boundary): the enclave hashes the entire assembled proof, before the ledger
+ * appends its convenience `proofHash` field. To link a chain, match a proof's
+ * `commit.prevB64` against `computeChainHash(predecessor)`.
+ *
+ * This differs from computeProofHash, which hashes only the signed-body
+ * subset. The chain hash covers every field (signer signature, attestation
+ * report, slot allocation, attribution, and so on), so any change anywhere in
+ * a proof breaks the link from its successor.
+ *
+ * @param proof - The full BitGraphProof object (or equivalent Record). A
+ *   top-level `proofHash` field, if present, is excluded before hashing.
+ * @returns Base64-standard encoded SHA-256 hash
+ */
+export function computeChainHash(proof) {
+    const p = proof;
+    let hashable = p;
+    if (Object.prototype.hasOwnProperty.call(p, "proofHash")) {
+        // Shallow copy without the ledger-added field; the enclave hashed the
+        // proof before this field existed.
+        hashable = {};
+        for (const key of Object.keys(p)) {
+            if (key !== "proofHash")
+                hashable[key] = p[key];
+        }
+    }
+    const bytes = canonicalize(hashable);
+    return base64(sha256(bytes));
+}
+// Base64-standard encode (works in both Node.js and browser).
+function base64(hash) {
     if (typeof Buffer !== "undefined") {
         return Buffer.from(hash).toString("base64");
     }
-    // Browser fallback
     let binary = "";
     for (let i = 0; i < hash.length; i++) {
         binary += String.fromCharCode(hash[i]);

package/dist/proof-hash.js.map

@@ -1 +1 @@
-{"version":3,"file":"proof-hash.js","sourceRoot":"","sources":["../src/proof-hash.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA8C;IAC7E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,MAA8C,CAAC;IAChE,MAAM,GAAG,GAAG,CAAC,CAAC,WAAyG,CAAC;IAExH,MAAM,UAAU,GAA4B;QAC1C,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,YAAY,EAAE,MAAM,EAAE,YAAY;QAClC,WAAW,EAAE,GAAG,EAAE,WAAW;QAC7B,WAAW,EAAE,GAAG,EAAE,WAAW;KAC9B,CAAC;IAEF,iCAAiC;IACjC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClB,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IACzC,CAAC;IAED,wCAAwC;IACxC,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC;QACrB,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,UAAsC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE3B,oDAAoD;IACpD,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,mBAAmB;IACnB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC"}
+{"version":3,"file":"proof-hash.js","sourceRoot":"","sources":["../src/proof-hash.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA8C;IAC7E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,MAA8C,CAAC;IAChE,MAAM,GAAG,GAAG,CAAC,CAAC,WAAyG,CAAC;IAExH,MAAM,UAAU,GAA4B;QAC1C,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,YAAY,EAAE,MAAM,EAAE,YAAY;QAClC,WAAW,EAAE,GAAG,EAAE,WAAW;QAC7B,WAAW,EAAE,GAAG,EAAE,WAAW;KAC9B,CAAC;IAEF,iCAAiC;IACjC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClB,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IACzC,CAAC;IAED,wCAAwC;IACxC,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC;QACrB,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,UAAsC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA8C;IAC7E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,QAAQ,GAA4B,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QACzD,sEAAsE;QACtE,mCAAmC;QACnC,QAAQ,GAAG,EAAE,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,IAAI,GAAG,KAAK,WAAW;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAoC,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,8DAA8D;AAC9D,SAAS,MAAM,CAAC,IAAgB;IAC9B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC"}

package/dist/types.d.ts

@@ -406,7 +406,7 @@ export interface VerificationPolicy {
      * Required for production deployments using the epoch model.
      * Verifiers should track epochId to detect epoch boundaries
      * (enclave restarts) and cross-reference with an external
-     * monotonic anchor (e.g., DynamoDB) for cross-epoch continuity.
+     * monotonic anchor for cross-epoch continuity.
      */
     requireEpochId?: boolean;
     /**

package/dist/verifier.d.ts

@@ -4,6 +4,29 @@ export interface VerifyResult {
     /** Human-readable failure reason. Present only when `valid` is false. */
     reason?: string;
 }
+/**
+ * Result of a bytes-free proof integrity check.
+ *
+ * The `artifactBinding` field is the literal string "not-checked" on every
+ * result, success or failure. It exists so that no caller can mistake a
+ * passing integrity check for full verification: the artifact digest was
+ * never compared against any bytes, so nothing here says that a given file
+ * is the committed artifact.
+ */
+export interface ProofIntegrityResult {
+    valid: boolean;
+    /**
+     * Always the literal "not-checked". verifyProofIntegrity() never sees
+     * artifact bytes and never compares them against artifact.digestB64.
+     * A valid result means the proof object is internally consistent and
+     * correctly signed. It does NOT mean any particular file matches the
+     * committed digest. Use verify() with the original bytes to establish
+     * artifact binding.
+     */
+    artifactBinding: "not-checked";
+    /** Human-readable failure reason. Present only when `valid` is false. */
+    reason?: string;
+}
 /**
  * Verify a BitGraphProof against the original input bytes.
  *
@@ -19,6 +42,47 @@ export declare function verify(opts: {
     bytes: Uint8Array;
     trustAnchors?: VerificationPolicy;
 }): Promise<VerifyResult>;
+/**
+ * Check a BitGraphProof's cryptographic integrity WITHOUT the artifact bytes.
+ *
+ * Runs every check that verify() runs, in the same order, with the single
+ * exception of the artifact digest comparison (verify() step 2). Checks
+ * performed:
+ *
+ *   - Structural validation, including strict version === "bitgraph/1"
+ *   - artifact.digestB64 base64 well-formedness (the digest string itself,
+ *     never compared against bytes)
+ *   - Canonical SignedBody reconstruction
+ *   - Ed25519 signature over the canonical bytes
+ *   - Agency envelope (P-256 device signature) when present
+ *   - Slot allocation (slot signature, slotHash binding, nonce binding,
+ *     slot counter ordering, key and epoch match) when present
+ *   - Epoch link (structure, successor binding, single-successor invariant)
+ *     when present
+ *   - Policy constraints when trustAnchors is provided
+ *
+ * NOT performed: the artifact-digest-versus-bytes comparison. A valid
+ * result proves the proof object is internally consistent and correctly
+ * signed. It does NOT prove that any particular file is the committed
+ * artifact. When the original bytes are available, use verify() instead;
+ * the result type here carries the literal artifactBinding: "not-checked"
+ * so this limitation is visible at every call site.
+ *
+ * Intended for auditors and indexers that hold proofs without the original
+ * artifacts (bytes-free ingest, chain reconstruction, ledger sweeps).
+ *
+ * @param opts.proof        - The proof to check
+ * @param opts.trustAnchors - Optional policy constraints
+ *
+ * @throws {TypeError}  if `proof` is not the expected type
+ * @returns             `{ valid: true, artifactBinding: "not-checked" }` on
+ *                      success, `{ valid: false, artifactBinding:
+ *                      "not-checked", reason }` on failure
+ */
+export declare function verifyProofIntegrity(opts: {
+    proof: BitGraphProof;
+    trustAnchors?: VerificationPolicy;
+}): Promise<ProofIntegrityResult>;
 /**
  * Reset the in-memory single-successor tracking state.
  * Use this when starting a fresh verification context.

package/dist/verifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AA2EA,OAAO,KAAK,EAAmB,aAAa,EAA8B,kBAAkB,EAA+D,MAAM,YAAY,CAAC;AAM9K,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC,GAAG,OAAO,CAAC,YAAY,CAAC,CAqJxB;AA+qBD;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C"}
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAqFA,OAAO,KAAK,EAAmB,aAAa,EAA8B,kBAAkB,EAA+D,MAAM,YAAY,CAAC;AAM9K,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf;;;;;;;OAOG;IACH,eAAe,EAAE,aAAa,CAAC;IAC/B,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC,GAAG,OAAO,CAAC,YAAY,CAAC,CAIxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,aAAa,CAAC;IACrB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAMhC;AAw1BD;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C"}

package/dist/verifier.js

@@ -20,6 +20,16 @@
  *   - attestation.reportB64 is stored in the proof but not interpreted here;
  *     platform-specific attestation verification belongs in adapter packages.
  *
+ * Two entry points share one implementation of every check:
+ *   - verify()               requires the original artifact bytes and runs
+ *                            every check, including the artifact digest
+ *                            comparison (step 2).
+ *   - verifyProofIntegrity() runs every check EXCEPT the artifact digest
+ *                            comparison. It never sees artifact bytes, and
+ *                            its result type states artifactBinding:
+ *                            "not-checked" so the distinction cannot be
+ *                            missed by callers.
+ *
  * Trust model:
  *   - environment.enforcement is tamper-evident (signed) but self-reported.
  *   - Verifiers requiring measured-tee guarantees MUST combine
@@ -83,26 +93,91 @@ import { canonicalize, constantTimeEqual } from "./canonical.js";
  */
 export async function verify(opts) {
     const { proof, bytes, trustAnchors } = opts;
+    const reason = await runChecks(proof, bytes, trustAnchors);
+    return reason === null ? { valid: true } : fail(reason);
+}
+/**
+ * Check a BitGraphProof's cryptographic integrity WITHOUT the artifact bytes.
+ *
+ * Runs every check that verify() runs, in the same order, with the single
+ * exception of the artifact digest comparison (verify() step 2). Checks
+ * performed:
+ *
+ *   - Structural validation, including strict version === "bitgraph/1"
+ *   - artifact.digestB64 base64 well-formedness (the digest string itself,
+ *     never compared against bytes)
+ *   - Canonical SignedBody reconstruction
+ *   - Ed25519 signature over the canonical bytes
+ *   - Agency envelope (P-256 device signature) when present
+ *   - Slot allocation (slot signature, slotHash binding, nonce binding,
+ *     slot counter ordering, key and epoch match) when present
+ *   - Epoch link (structure, successor binding, single-successor invariant)
+ *     when present
+ *   - Policy constraints when trustAnchors is provided
+ *
+ * NOT performed: the artifact-digest-versus-bytes comparison. A valid
+ * result proves the proof object is internally consistent and correctly
+ * signed. It does NOT prove that any particular file is the committed
+ * artifact. When the original bytes are available, use verify() instead;
+ * the result type here carries the literal artifactBinding: "not-checked"
+ * so this limitation is visible at every call site.
+ *
+ * Intended for auditors and indexers that hold proofs without the original
+ * artifacts (bytes-free ingest, chain reconstruction, ledger sweeps).
+ *
+ * @param opts.proof        - The proof to check
+ * @param opts.trustAnchors - Optional policy constraints
+ *
+ * @throws {TypeError}  if `proof` is not the expected type
+ * @returns             `{ valid: true, artifactBinding: "not-checked" }` on
+ *                      success, `{ valid: false, artifactBinding:
+ *                      "not-checked", reason }` on failure
+ */
+export async function verifyProofIntegrity(opts) {
+    const { proof, trustAnchors } = opts;
+    const reason = await runChecks(proof, undefined, trustAnchors);
+    return reason === null
+        ? { valid: true, artifactBinding: "not-checked" }
+        : { valid: false, artifactBinding: "not-checked", reason };
+}
+// ---------------------------------------------------------------------------
+// Shared check pipeline
+// ---------------------------------------------------------------------------
+/**
+ * Single implementation of every verification check, shared by verify()
+ * and verifyProofIntegrity().
+ *
+ * When `bytes` is a Uint8Array, the artifact digest comparison runs
+ * (verify() semantics). When `bytes` is undefined, that comparison is
+ * skipped and everything else runs unchanged (verifyProofIntegrity()
+ * semantics). Check order and failure strings are identical in both modes.
+ *
+ * @returns null on success, or the failure reason string.
+ */
+async function runChecks(proof, bytes, trustAnchors) {
     // ------------------------------------------------------------------
     // 1. Structural validation
     // ------------------------------------------------------------------
     const structureError = validateStructure(proof);
     if (structureError !== null) {
-        return fail(structureError);
+        return structureError;
     }
     // ------------------------------------------------------------------
     // 2. Artifact check: SHA-256 of provided bytes must match proof digest
+    //    (bytes mode only). The committed digest string must decode as
+    //    valid base64 in both modes; in bytes-free mode the comparison is
+    //    skipped, so artifact binding is NOT established.
     // ------------------------------------------------------------------
-    const computedDigest = sha256(bytes);
+    const computedDigest = bytes === undefined ? undefined : sha256(bytes);
     let proofDigest;
     try {
         proofDigest = fromBase64(proof.artifact.digestB64);
     }
     catch {
-        return fail("artifact.digestB64 is not valid base64");
+        return "artifact.digestB64 is not valid base64";
     }
-    if (!constantTimeEqual(computedDigest, proofDigest)) {
-        return fail("artifact digest mismatch: the provided bytes do not match the committed digest");
+    if (computedDigest !== undefined && !constantTimeEqual(computedDigest, proofDigest)) {
+        return "artifact digest mismatch: the provided bytes do not match the committed digest";
     }
     // ------------------------------------------------------------------
     // 3. Reconstruct canonical signed body
@@ -112,10 +187,10 @@ export async function verify(opts) {
         publicKeyBytes = fromBase64(proof.signer.publicKeyB64);
     }
     catch {
-        return fail("signer.publicKeyB64 is not valid base64");
+        return "signer.publicKeyB64 is not valid base64";
     }
     if (publicKeyBytes.length !== 32) {
-        return fail(`signer.publicKeyB64 decodes to ${publicKeyBytes.length} bytes; expected 32 (Ed25519)`);
+        return `signer.publicKeyB64 decodes to ${publicKeyBytes.length} bytes; expected 32 (Ed25519)`;
     }
     const signedBody = {
         version: proof.version,
@@ -150,20 +225,20 @@ export async function verify(opts) {
         signatureBytes = fromBase64(proof.signer.signatureB64);
     }
     catch {
-        return fail("signer.signatureB64 is not valid base64");
+        return "signer.signatureB64 is not valid base64";
     }
     if (signatureBytes.length !== 64) {
-        return fail(`signer.signatureB64 decodes to ${signatureBytes.length} bytes; expected 64 (Ed25519)`);
+        return `signer.signatureB64 decodes to ${signatureBytes.length} bytes; expected 64 (Ed25519)`;
     }
     let signatureValid;
     try {
         signatureValid = await ed25519VerifyAsync(signatureBytes, canonicalBytes, publicKeyBytes);
     }
     catch (err) {
-        return fail(`signature verification error: ${err instanceof Error ? err.message : String(err)}`);
+        return `signature verification error: ${err instanceof Error ? err.message : String(err)}`;
     }
     if (!signatureValid) {
-        return fail("signature verification failed: signature does not match");
+        return "signature verification failed: signature does not match";
     }
     // ------------------------------------------------------------------
     // 4b. Agency verification (P-256 device signature)
@@ -171,7 +246,7 @@ export async function verify(opts) {
     if (proof.agency !== undefined) {
         const agencyError = verifyAgency(proof);
         if (agencyError !== null) {
-            return fail(agencyError);
+            return agencyError;
         }
     }
     // ------------------------------------------------------------------
@@ -180,7 +255,7 @@ export async function verify(opts) {
     if (proof.slotAllocation !== undefined) {
         const slotError = await verifySlotAllocation(proof);
         if (slotError !== null) {
-            return fail(slotError);
+            return slotError;
         }
     }
     // ------------------------------------------------------------------
@@ -189,7 +264,7 @@ export async function verify(opts) {
     if (proof.commit.epochLink !== undefined) {
         const epochLinkError = verifyEpochLink(proof);
         if (epochLinkError !== null) {
-            return fail(epochLinkError);
+            return epochLinkError;
         }
     }
     // ------------------------------------------------------------------
@@ -198,10 +273,10 @@ export async function verify(opts) {
     if (trustAnchors !== undefined) {
         const policyError = checkPolicy(proof, trustAnchors);
         if (policyError !== null) {
-            return fail(policyError);
+            return policyError;
         }
     }
-    return { valid: true };
+    return null;
 }
 // ---------------------------------------------------------------------------
 // Structural validation
@@ -605,8 +680,11 @@ async function verifySlotAllocation(proof) {
     if (typeof slot.counter !== "string" || slot.counter.length === 0) {
         return "slotAllocation.counter must be a non-empty string";
     }
-    if (typeof slot.time !== "number" || !Number.isFinite(slot.time) || slot.time < 0) {
-        return "slotAllocation.time must be a non-negative finite number";
+    // time is OPTIONAL: the enclave builds slot bodies deliberately without a
+    // clock ("NO clocks. NO timestamps"), so real slot allocations omit it. Only
+    // validate it when present, mirroring commit.time.
+    if (slot.time !== undefined && (typeof slot.time !== "number" || !Number.isFinite(slot.time) || slot.time < 0)) {
+        return "slotAllocation.time must be a non-negative finite number when present";
     }
     if (typeof slot.epochId !== "string" || slot.epochId.length === 0) {
         return "slotAllocation.epochId must be a non-empty string";
@@ -622,7 +700,10 @@ async function verifySlotAllocation(proof) {
         version: slot.version,
         nonceB64: slot.nonceB64,
         counter: slot.counter,
-        time: slot.time,
+        // time is included only when present, so the reconstructed body matches the
+        // enclave's signed bytes for clockless slots (the real, common case) and
+        // for any slot that did carry a time.
+        ...(slot.time !== undefined ? { time: slot.time } : {}),
         epochId: slot.epochId,
         publicKeyB64: slot.publicKeyB64,
         ...(slot.chainId ? { chainId: slot.chainId } : {}),
@@ -654,8 +735,8 @@ async function verifySlotAllocation(proof) {
         return "slotAllocation signature verification failed";
     }
     // 3. Confirm slot body has no artifact data (causal independence)
-    // The slot body contains: version, nonceB64, counter, time, epochId, publicKeyB64,
-    // and optionally chainId. If any artifact-related field were present, it would
+    // The slot body contains: version, nonceB64, counter, epochId, publicKeyB64,
+    // and optionally time and chainId. If any artifact-related field were present, it would
     // break the causal argument. We reject known artifact fields defensively.
     const forbiddenKeys = new Set(["digestB64", "artifact", "hashAlg", "signatureB64"]);
     const slotBodyKeys = Object.keys(slotBody);

package/dist/verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAajE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAI5B;IACC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAE5C,qEAAqE;IACrE,2BAA2B;IAC3B,qEAAqE;IACrE,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9B,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,WAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CACT,gFAAgF,CACjF,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,uCAAuC;IACvC,qEAAqE;IACrE,IAAI,cAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACjC,OAAO,IAAI,CACT,kCAAkC,cAAc,CAAC,MAAM,+BAA+B,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAe;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAuB;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;QACvC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW;QAC1C,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW;KAC3C,CAAC;IAEF,wDAAwD;IACxD,IAAI,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAChD,UAAU,CAAC,iBAAiB,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC;IACtE,CAAC;IAED,sDAAsD;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;IACxC,CAAC;IAED,qDAAqD;IACrD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACnC,CAAC;IAED,kDAAkD;IAClD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAC7C,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAEhD,qEAAqE;IACrE,4BAA4B;IAC5B,qEAAqE;IACrE,IAAI,cAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACjC,OAAO,IAAI,CACT,kCAAkC,cAAc,CAAC,MAAM,+BAA+B,CACvF,CAAC;IACJ,CAAC;IAED,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,kBAAkB,CACvC,cAAc,EACd,cAAc,EACd,cAAc,CACf,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,IAAI,CACT,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IAED,qEAAqE;IACrE,mDAAmD;IACnD,qEAAqE;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,8DAA8D;IAC9D,qEAAqE;IACrE,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,oDAAoD;IACpD,qEAAqE;IACrE,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,mBAAmB;IACnB,qEAAqE;IACrE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACrD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAC3D,MAAM;IACN,QAAQ;IACR,cAAc;CACf,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,YAAY,EAAE,CAAC;QAClC,OAAO,8BAA8B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IAED,WAAW;IACX,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,4CAA4C,CAAC;IAClF,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAA4B,CAAC;IAC1D,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,wBAAwB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IAED,SAAS;IACT,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,0CAA0C,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAA4B,CAAC;IACtD,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACjG,OAAO,qEAAqE,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IAED,SAAS;IACT,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,0CAA0C,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAA4B,CAAC;IACtD,IAAI,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtF,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtF,OAAO,sDAAsD,CAAC;IAChE,CAAC;IAED,cAAc;IACd,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAAE,OAAO,+CAA+C,CAAC;IACxF,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAA4B,CAAC;IACxD,IAAI,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC/F,OAAO,0EAA0E,CAAC;IACpF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,0DAA0D,CAAC;IACpE,CAAC;IAED,qCAAqC;IACrC,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAClC,OAAO,8DAA8D,CAAC;QACxE,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAA4B,CAAC;QAC1D,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,OAAO,iEAAiE,CAAC;QAC3E,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,oEAAoE,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,WAAW,CAAC,KAAoB,EAAE,MAA0B;IACnE,yBAAyB;IACzB,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAChE,OAAO,qBAAqB,KAAK,CAAC,WAAW,CAAC,WAAW,kCAAkC,MAAM,CAAC,kBAAkB,GAAG,CAAC;QAC1H,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IACE,MAAM,CAAC,mBAAmB,KAAK,SAAS;QACxC,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EACrC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YACxE,OAAO,gBAAgB,KAAK,CAAC,WAAW,CAAC,WAAW,6BAA6B,CAAC;QACpF,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IACE,MAAM,CAAC,iBAAiB,KAAK,SAAS;QACtC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EACnC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,OAAO,4CAA4C,CAAC;QACtD,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,gDAAgD,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IACE,MAAM,CAAC,wBAAwB,KAAK,SAAS;QAC7C,MAAM,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAC1C,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,iEAAiE,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACpF,OAAO,uBAAuB,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,8BAA8B,CAAC;QACnG,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,8CAA8C,CAAC;QACxD,CAAC;QACD,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,gDAAgD,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,UAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,8CAA8C,CAAC;YACxD,CAAC;YACD,IAAI,YAAY,GAAG,UAAU,EAAE,CAAC;gBAC9B,OAAO,WAAW,KAAK,CAAC,MAAM,CAAC,OAAO,qBAAqB,MAAM,CAAC,UAAU,EAAE,CAAC;YACjF,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,UAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,8CAA8C,CAAC;YACxD,CAAC;YACD,IAAI,YAAY,GAAG,UAAU,EAAE,CAAC;gBAC9B,OAAO,WAAW,KAAK,CAAC,MAAM,CAAC,OAAO,qBAAqB,MAAM,CAAC,UAAU,EAAE,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,iDAAiD,CAAC;QAC3D,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACvE,OAAO,eAAe,KAAK,CAAC,MAAM,CAAC,IAAI,sBAAsB,MAAM,CAAC,OAAO,EAAE,CAAC;QAChF,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACvE,OAAO,eAAe,KAAK,CAAC,MAAM,CAAC,IAAI,qBAAqB,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,4CAA4C,CAAC;QACtD,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,mDAAmD,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IACE,MAAM,CAAC,kBAAkB,KAAK,SAAS;QACvC,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EACpC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,8DAA8D,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,wCAAwC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IACE,MAAM,CAAC,qBAAqB,KAAK,SAAS;QAC1C,MAAM,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,gEAAgE,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,OAAO,mBAAmB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,6BAA6B,CAAC;QACrF,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,0EAA0E,CAAC;QACpF,CAAC;QACD,yEAAyE;QACzE,mEAAmE;IACrE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAO,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,UAAU,CAAC;IAEpF,2BAA2B;IAC3B,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,+CAA+C,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,gDAAgD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC;IACpF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,aAAa,CAAC,OAAO,KAAK,8BAA8B,EAAE,CAAC;QAC7D,OAAO,6EAA6E,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;IACvH,CAAC;IACD,IAAI,OAAO,aAAa,CAAC,YAAY,KAAK,QAAQ,IAAI,aAAa,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9F,OAAO,8DAA8D,CAAC;IACxE,CAAC;IAED,qCAAqC;IACrC,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,+CAA+C,CAAC;IACzD,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,aAAa,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QAClC,OAAO,0DAA0D,CAAC;IACpE,CAAC;IAED,2CAA2C;IAC3C,IAAI,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7C,OAAO,6DAA6D,CAAC;IACvE,CAAC;IAED,0DAA0D;IAC1D,4EAA4E;IAC5E,0EAA0E;IAC1E,iEAAiE;IACjE,IAAI,aAAa,CAAC,YAAY,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC;QAC/B,IACE,CAAC,EAAE;YACH,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC;YAC/B,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YACnD,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,YAAY,EACjD,CAAC;YACD,OAAO,4EAA4E,CAAC;QACtF,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uDAAuD,CAAC;IACjE,CAAC;IAED,IAAI,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACf,wCAAwC;YACxC,MAAM,QAAQ,GAAG,aAAsC,CAAC;YAExD,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC5E,OAAO,uDAAuD,CAAC;YACjE,CAAC;YACD,IAAI,OAAO,QAAQ,CAAC,oBAAoB,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;gBACxF,OAAO,6DAA6D,CAAC;YACvE,CAAC;YAED,uBAAuB;YACvB,IAAI,UAAkE,CAAC;YACvE,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,0CAA0C,CAAC;YACpD,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACvC,OAAO,4DAA4D,UAAU,CAAC,IAAI,GAAG,CAAC;YACxF,CAAC;YAED,0DAA0D;YAC1D,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC1B,OAAO,gDAAgD,CAAC;YAC1D,CAAC;YACD,IAAI,eAAe,GAAG,UAAU,CAAC,SAAS;iBACvC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;iBAClB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtB,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC;gBAAE,eAAe,IAAI,GAAG,CAAC;YAC1D,IAAI,eAAe,KAAK,aAAa,CAAC,SAAS,EAAE,CAAC;gBAChD,OAAO,yEAAyE,CAAC;YACnF,CAAC;YAED,gCAAgC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YACtE,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACzB,OAAO,qCAAqC,CAAC;YAC/C,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;gBAAE,OAAO,2CAA2C,CAAC;YACxE,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;gBAAE,OAAO,2CAA2C,CAAC;YAExE,kEAAkE;YAClE,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;iBACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;iBACpD,MAAM,EAAE,CAAC;YACZ,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;YAE7D,yDAAyD;YACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACxC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAC/C,QAAQ,CACT,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,sDAAsD,CAAC;YAChE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,4CAA4C;YAC5C,MAAM,gBAAgB,GAA4B;gBAChD,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,UAAU,EAAE,aAAa,CAAC,UAAU;gBACpC,YAAY,EAAE,aAAa,CAAC,YAAY;gBACxC,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,SAAS,EAAE,aAAa,CAAC,SAAS;aACnC,CAAC;YACF,6DAA6D;YAC7D,IAAI,iBAAiB,IAAI,aAAa,IAAI,aAAa,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACtF,gBAAgB,CAAC,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;YACnE,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAC9B,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,EACtE,MAAM,CACP,CAAC;YAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACxC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAC/C,QAAQ,CACT,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,6CAA6C,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3G,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,oBAAoB,CAAC,KAAoB;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,cAAe,CAAC;IAEnC,6BAA6B;IAC7B,IAAI,IAAI,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACvC,OAAO,0DAA0D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAC3F,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,mDAAmD,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAClF,OAAO,0DAA0D,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,mDAAmD,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,wDAAwD,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,wDAAwD,CAAC;IAClE,CAAC;IAED,8DAA8D;IAC9D,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,MAAM,kBAAkB,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,YAAwB,CAAC;IAC7B,IAAI,eAA2B,CAAC;IAChC,IAAI,CAAC;QACH,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,wCAAwC,CAAC;IAClD,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/B,OAAO,0CAA0C,YAAY,CAAC,MAAM,+BAA+B,CAAC;IACtG,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClC,OAAO,0CAA0C,eAAe,CAAC,MAAM,+BAA+B,CAAC;IACzG,CAAC;IAED,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,kBAAkB,CAAC,YAAY,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,gDAAgD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,8CAA8C,CAAC;IACxD,CAAC;IAED,kEAAkE;IAClE,mFAAmF;IACnF,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,iDAAiD,GAAG,kCAAkC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,yEAAyE;IACzE,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,mEAAmE,CAAC;IAC7E,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,aAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,aAAa,CAAC,EAAE,CAAC;QACxD,OAAO,wFAAwF,CAAC;IAClG,CAAC;IAED,uDAAuD;IACvD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,wDAAwD,CAAC;IAClE,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,mEAAmE,CAAC;IAC7E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,0DAA0D,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,+DAA+D,CAAC;IACzE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;YACjC,OAAO,2BAA2B,IAAI,CAAC,OAAO,uCAAuC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC;QAC/G,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mDAAmD,CAAC;IAC7D,CAAC;IAED,0CAA0C;IAC1C,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACpD,OAAO,oFAAoF,CAAC;IAC9F,CAAC;IAED,yCAAyC;IACzC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAChF,OAAO,4EAA4E,CAAC;IACtF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,2BAA2B;AAEnF;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAAuD;IAClF,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,eAAe,CAAC,KAAoB;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,SAAU,CAAC;IAErC,2BAA2B;IAC3B,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,gDAAgD,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IAED,iDAAiD;IACjD,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IAED,oEAAoE;IACpE,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClF,OAAO,wBAAwB,IAAI,CAAC,SAAS,0CAA0C,KAAK,CAAC,MAAM,CAAC,OAAO,8BAA8B,CAAC;IAC5I,CAAC;IAED,iEAAiE;IACjE,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACtD,OAAO,8FAA8F,CAAC;IACxG,CAAC;IAED,iFAAiF;IACjF,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,+EAA+E,CAAC;IACzF,CAAC;IAED,0DAA0D;IAC1D,0DAA0D;IAC1D,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAClD,OAAO,oFAAoF,CAAC;IAC9F,CAAC;IAED,8CAA8C;IAC9C,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAEjE,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,iBAAiB,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,OAAO,CACL,qCAAqC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,IAAI,CAAC,WAAW,IAAI;gBACtG,6BAA6B,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO;gBAClE,8CAA8C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ;gBACjF,qCAAqC,CACtC,CAAC;QACJ,CAAC;QACD,wDAAwD;IAC1D,CAAC;SAAM,CAAC;QACN,0BAA0B;QAC1B,oBAAoB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,oBAAoB,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,IAAI,CAAC,MAAc;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAqCjE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAI5B;IACC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC3D,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAG1C;IACC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC/D,OAAO,MAAM,KAAK,IAAI;QACpB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE;QACjD,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,KAAK,UAAU,SAAS,CACtB,KAAoB,EACpB,KAA6B,EAC7B,YAA4C;IAE5C,qEAAqE;IACrE,2BAA2B;IAC3B,qEAAqE;IACrE,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,mEAAmE;IACnE,sEAAsE;IACtE,sDAAsD;IACtD,qEAAqE;IACrE,MAAM,cAAc,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,WAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,wCAAwC,CAAC;IAClD,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;QACpF,OAAO,gFAAgF,CAAC;IAC1F,CAAC;IAED,qEAAqE;IACrE,uCAAuC;IACvC,qEAAqE;IACrE,IAAI,cAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yCAAyC,CAAC;IACnD,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACjC,OAAO,kCAAkC,cAAc,CAAC,MAAM,+BAA+B,CAAC;IAChG,CAAC;IAED,MAAM,UAAU,GAAe;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAuB;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;QACvC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW;QAC1C,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW;KAC3C,CAAC;IAEF,wDAAwD;IACxD,IAAI,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAChD,UAAU,CAAC,iBAAiB,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC;IACtE,CAAC;IAED,sDAAsD;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;IACxC,CAAC;IAED,qDAAqD;IACrD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACnC,CAAC;IAED,kDAAkD;IAClD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAC7C,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAEhD,qEAAqE;IACrE,4BAA4B;IAC5B,qEAAqE;IACrE,IAAI,cAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yCAAyC,CAAC;IACnD,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACjC,OAAO,kCAAkC,cAAc,CAAC,MAAM,+BAA+B,CAAC;IAChG,CAAC;IAED,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,kBAAkB,CACvC,cAAc,EACd,cAAc,EACd,cAAc,CACf,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,yDAAyD,CAAC;IACnE,CAAC;IAED,qEAAqE;IACrE,mDAAmD;IACnD,qEAAqE;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,8DAA8D;IAC9D,qEAAqE;IACrE,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,oDAAoD;IACpD,qEAAqE;IACrE,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,mBAAmB;IACnB,qEAAqE;IACrE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACrD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAC3D,MAAM;IACN,QAAQ;IACR,cAAc;CACf,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,YAAY,EAAE,CAAC;QAClC,OAAO,8BAA8B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IAED,WAAW;IACX,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,4CAA4C,CAAC;IAClF,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAA4B,CAAC;IAC1D,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,wBAAwB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IAED,SAAS;IACT,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,0CAA0C,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAA4B,CAAC;IACtD,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACjG,OAAO,qEAAqE,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IAED,SAAS;IACT,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,0CAA0C,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAA4B,CAAC;IACtD,IAAI,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtF,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtF,OAAO,sDAAsD,CAAC;IAChE,CAAC;IAED,cAAc;IACd,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAAE,OAAO,+CAA+C,CAAC;IACxF,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAA4B,CAAC;IACxD,IAAI,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC/F,OAAO,0EAA0E,CAAC;IACpF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,0DAA0D,CAAC;IACpE,CAAC;IAED,qCAAqC;IACrC,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAClC,OAAO,8DAA8D,CAAC;QACxE,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAA4B,CAAC;QAC1D,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,OAAO,iEAAiE,CAAC;QAC3E,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,oEAAoE,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,WAAW,CAAC,KAAoB,EAAE,MAA0B;IACnE,yBAAyB;IACzB,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAChE,OAAO,qBAAqB,KAAK,CAAC,WAAW,CAAC,WAAW,kCAAkC,MAAM,CAAC,kBAAkB,GAAG,CAAC;QAC1H,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IACE,MAAM,CAAC,mBAAmB,KAAK,SAAS;QACxC,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EACrC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YACxE,OAAO,gBAAgB,KAAK,CAAC,WAAW,CAAC,WAAW,6BAA6B,CAAC;QACpF,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IACE,MAAM,CAAC,iBAAiB,KAAK,SAAS;QACtC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EACnC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,OAAO,4CAA4C,CAAC;QACtD,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,gDAAgD,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IACE,MAAM,CAAC,wBAAwB,KAAK,SAAS;QAC7C,MAAM,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAC1C,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,iEAAiE,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACpF,OAAO,uBAAuB,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,8BAA8B,CAAC;QACnG,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,8CAA8C,CAAC;QACxD,CAAC;QACD,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,gDAAgD,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,UAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,8CAA8C,CAAC;YACxD,CAAC;YACD,IAAI,YAAY,GAAG,UAAU,EAAE,CAAC;gBAC9B,OAAO,WAAW,KAAK,CAAC,MAAM,CAAC,OAAO,qBAAqB,MAAM,CAAC,UAAU,EAAE,CAAC;YACjF,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,UAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,8CAA8C,CAAC;YACxD,CAAC;YACD,IAAI,YAAY,GAAG,UAAU,EAAE,CAAC;gBAC9B,OAAO,WAAW,KAAK,CAAC,MAAM,CAAC,OAAO,qBAAqB,MAAM,CAAC,UAAU,EAAE,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,iDAAiD,CAAC;QAC3D,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACvE,OAAO,eAAe,KAAK,CAAC,MAAM,CAAC,IAAI,sBAAsB,MAAM,CAAC,OAAO,EAAE,CAAC;QAChF,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACvE,OAAO,eAAe,KAAK,CAAC,MAAM,CAAC,IAAI,qBAAqB,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,4CAA4C,CAAC;QACtD,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,mDAAmD,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IACE,MAAM,CAAC,kBAAkB,KAAK,SAAS;QACvC,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EACpC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,8DAA8D,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,wCAAwC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IACE,MAAM,CAAC,qBAAqB,KAAK,SAAS;QAC1C,MAAM,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EACvC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,gEAAgE,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,OAAO,mBAAmB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,6BAA6B,CAAC;QACrF,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,0EAA0E,CAAC;QACpF,CAAC;QACD,yEAAyE;QACzE,mEAAmE;IACrE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAO,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,UAAU,CAAC;IAEpF,2BAA2B;IAC3B,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,+CAA+C,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,gDAAgD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC;IACpF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,aAAa,CAAC,OAAO,KAAK,8BAA8B,EAAE,CAAC;QAC7D,OAAO,6EAA6E,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;IACvH,CAAC;IACD,IAAI,OAAO,aAAa,CAAC,YAAY,KAAK,QAAQ,IAAI,aAAa,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9F,OAAO,8DAA8D,CAAC;IACxE,CAAC;IAED,qCAAqC;IACrC,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,+CAA+C,CAAC;IACzD,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,aAAa,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QAClC,OAAO,0DAA0D,CAAC;IACpE,CAAC;IAED,2CAA2C;IAC3C,IAAI,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7C,OAAO,6DAA6D,CAAC;IACvE,CAAC;IAED,0DAA0D;IAC1D,4EAA4E;IAC5E,0EAA0E;IAC1E,iEAAiE;IACjE,IAAI,aAAa,CAAC,YAAY,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC;QAC/B,IACE,CAAC,EAAE;YACH,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC;YAC/B,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YACnD,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,YAAY,EACjD,CAAC;YACD,OAAO,4EAA4E,CAAC;QACtF,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uDAAuD,CAAC;IACjE,CAAC;IAED,IAAI,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACf,wCAAwC;YACxC,MAAM,QAAQ,GAAG,aAAsC,CAAC;YAExD,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC5E,OAAO,uDAAuD,CAAC;YACjE,CAAC;YACD,IAAI,OAAO,QAAQ,CAAC,oBAAoB,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;gBACxF,OAAO,6DAA6D,CAAC;YACvE,CAAC;YAED,uBAAuB;YACvB,IAAI,UAAkE,CAAC;YACvE,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,0CAA0C,CAAC;YACpD,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACvC,OAAO,4DAA4D,UAAU,CAAC,IAAI,GAAG,CAAC;YACxF,CAAC;YAED,0DAA0D;YAC1D,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC1B,OAAO,gDAAgD,CAAC;YAC1D,CAAC;YACD,IAAI,eAAe,GAAG,UAAU,CAAC,SAAS;iBACvC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;iBAClB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtB,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC;gBAAE,eAAe,IAAI,GAAG,CAAC;YAC1D,IAAI,eAAe,KAAK,aAAa,CAAC,SAAS,EAAE,CAAC;gBAChD,OAAO,yEAAyE,CAAC;YACnF,CAAC;YAED,gCAAgC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YACtE,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACzB,OAAO,qCAAqC,CAAC;YAC/C,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;gBAAE,OAAO,2CAA2C,CAAC;YACxE,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;gBAAE,OAAO,2CAA2C,CAAC;YAExE,kEAAkE;YAClE,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;iBACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;iBACpD,MAAM,EAAE,CAAC;YACZ,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;YAE7D,yDAAyD;YACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACxC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAC/C,QAAQ,CACT,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,sDAAsD,CAAC;YAChE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,4CAA4C;YAC5C,MAAM,gBAAgB,GAA4B;gBAChD,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,UAAU,EAAE,aAAa,CAAC,UAAU;gBACpC,YAAY,EAAE,aAAa,CAAC,YAAY;gBACxC,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,SAAS,EAAE,aAAa,CAAC,SAAS;aACnC,CAAC;YACF,6DAA6D;YAC7D,IAAI,iBAAiB,IAAI,aAAa,IAAI,aAAa,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACtF,gBAAgB,CAAC,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;YACnE,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAC9B,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,EACtE,MAAM,CACP,CAAC;YAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACxC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAC/C,QAAQ,CACT,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,6CAA6C,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3G,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,oBAAoB,CAAC,KAAoB;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,cAAe,CAAC;IAEnC,6BAA6B;IAC7B,IAAI,IAAI,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACvC,OAAO,0DAA0D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAC3F,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,mDAAmD,CAAC;IAC7D,CAAC;IACD,0EAA0E;IAC1E,6EAA6E;IAC7E,mDAAmD;IACnD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/G,OAAO,uEAAuE,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,mDAAmD,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,wDAAwD,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,wDAAwD,CAAC;IAClE,CAAC;IAED,8DAA8D;IAC9D,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,4EAA4E;QAC5E,yEAAyE;QACzE,sCAAsC;QACtC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,MAAM,kBAAkB,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,YAAwB,CAAC;IAC7B,IAAI,eAA2B,CAAC;IAChC,IAAI,CAAC;QACH,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,wCAAwC,CAAC;IAClD,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/B,OAAO,0CAA0C,YAAY,CAAC,MAAM,+BAA+B,CAAC;IACtG,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClC,OAAO,0CAA0C,eAAe,CAAC,MAAM,+BAA+B,CAAC;IACzG,CAAC;IAED,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,kBAAkB,CAAC,YAAY,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,gDAAgD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,8CAA8C,CAAC;IACxD,CAAC;IAED,kEAAkE;IAClE,6EAA6E;IAC7E,wFAAwF;IACxF,0EAA0E;IAC1E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,iDAAiD,GAAG,kCAAkC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,yEAAyE;IACzE,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,mEAAmE,CAAC;IAC7E,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,aAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,aAAa,CAAC,EAAE,CAAC;QACxD,OAAO,wFAAwF,CAAC;IAClG,CAAC;IAED,uDAAuD;IACvD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,wDAAwD,CAAC;IAClE,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,mEAAmE,CAAC;IAC7E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,0DAA0D,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,+DAA+D,CAAC;IACzE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;YACjC,OAAO,2BAA2B,IAAI,CAAC,OAAO,uCAAuC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC;QAC/G,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mDAAmD,CAAC;IAC7D,CAAC;IAED,0CAA0C;IAC1C,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACpD,OAAO,oFAAoF,CAAC;IAC9F,CAAC;IAED,yCAAyC;IACzC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAChF,OAAO,4EAA4E,CAAC;IACtF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,2BAA2B;AAEnF;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAAuD;IAClF,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,eAAe,CAAC,KAAoB;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,SAAU,CAAC;IAErC,2BAA2B;IAC3B,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,gDAAgD,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IAED,iDAAiD;IACjD,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IAED,oEAAoE;IACpE,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClF,OAAO,wBAAwB,IAAI,CAAC,SAAS,0CAA0C,KAAK,CAAC,MAAM,CAAC,OAAO,8BAA8B,CAAC;IAC5I,CAAC;IAED,iEAAiE;IACjE,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACtD,OAAO,8FAA8F,CAAC;IACxG,CAAC;IAED,iFAAiF;IACjF,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,+EAA+E,CAAC;IACzF,CAAC;IAED,0DAA0D;IAC1D,0DAA0D;IAC1D,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAClD,OAAO,oFAAoF,CAAC;IAC9F,CAAC;IAED,8CAA8C;IAC9C,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAEjE,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,iBAAiB,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,OAAO,CACL,qCAAqC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,IAAI,CAAC,WAAW,IAAI;gBACtG,6BAA6B,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO;gBAClE,8CAA8C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ;gBACjF,qCAAqC,CACtC,CAAC;QACJ,CAAC;QACD,wDAAwD;IAC1D,CAAC;SAAM,CAAC;QACN,0BAA0B;QAC1B,oBAAoB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,oBAAoB,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,IAAI,CAAC,MAAc;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mikeargento/bitgraph-verify",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "description": "Offline verification of BitGraph proofs. Permissionless by design.",
   "license": "MIT",
   "type": "module",
@@ -20,8 +20,12 @@
   ],
   "scripts": {
     "build": "tsc",
+    "prepack": "tsc",
     "typecheck": "tsc --noEmit"
   },
+  "engines": {
+    "node": ">=20"
+  },
   "dependencies": {
     "@noble/ed25519": "^2.1.0",
     "@noble/hashes": "^1.4.0"

package/src/index.ts

@@ -23,9 +23,9 @@ export type {
   AgencyEnvelope,
 } from "./types.js";
 
-export { verify, resetEpochLinkState } from "./verifier.js";
-export type { VerifyResult } from "./verifier.js";
+export { verify, verifyProofIntegrity, resetEpochLinkState } from "./verifier.js";
+export type { VerifyResult, ProofIntegrityResult } from "./verifier.js";
 
-export { computeProofHash } from "./proof-hash.js";
+export { computeProofHash, computeChainHash } from "./proof-hash.js";
 
 export { canonicalize, canonicalizeToString, constantTimeEqual } from "./canonical.js";

package/src/proof-hash.ts

@@ -16,11 +16,17 @@
  *   - attribution (if present)
  *   - attestationFormat (if attestation present)
  *
- * This hash is used for:
- *   - prevB64 chain linking
+ * This hash (the signed-body hash) is used for:
  *   - S3 ledger key generation
  *   - Ethereum anchor binding
- *   - Proof deduplication and verification
+ *   - Proof deduplication and canonical identity
+ *
+ * It is NOT the value referenced by commit.prevB64 or by
+ * epochLink.prevProofHashB64. Those reference the CHAIN hash: SHA-256 over
+ * the canonicalized WHOLE proof (every field, minus the ledger-added
+ * proofHash), computed by computeChainHash below. Matching prevB64 against
+ * computeProofHash instead of computeChainHash silently fails to link real
+ * chains.
  *
  * Algorithm:
  *   1. Extract signed body fields
@@ -69,12 +75,48 @@ export function computeProofHash(proof: BitGraphProof | Record<string, unknown>)
 
   const bytes = canonicalize(signedBody as unknown as BitGraphProof);
   const hash = sha256(bytes);
+  return base64(hash);
+}
+
+/**
+ * Compute the CHAIN hash of a BitGraph proof: SHA-256 over the canonicalized
+ * whole proof object, with the ledger-added `proofHash` field removed.
+ *
+ * This is the value the enclave writes into the NEXT proof's
+ * `commit.prevB64` (and into `epochLink.prevProofHashB64` at an epoch
+ * boundary): the enclave hashes the entire assembled proof, before the ledger
+ * appends its convenience `proofHash` field. To link a chain, match a proof's
+ * `commit.prevB64` against `computeChainHash(predecessor)`.
+ *
+ * This differs from computeProofHash, which hashes only the signed-body
+ * subset. The chain hash covers every field (signer signature, attestation
+ * report, slot allocation, attribution, and so on), so any change anywhere in
+ * a proof breaks the link from its successor.
+ *
+ * @param proof - The full BitGraphProof object (or equivalent Record). A
+ *   top-level `proofHash` field, if present, is excluded before hashing.
+ * @returns Base64-standard encoded SHA-256 hash
+ */
+export function computeChainHash(proof: BitGraphProof | Record<string, unknown>): string {
+  const p = proof as Record<string, unknown>;
+  let hashable: Record<string, unknown> = p;
+  if (Object.prototype.hasOwnProperty.call(p, "proofHash")) {
+    // Shallow copy without the ledger-added field; the enclave hashed the
+    // proof before this field existed.
+    hashable = {};
+    for (const key of Object.keys(p)) {
+      if (key !== "proofHash") hashable[key] = p[key];
+    }
+  }
+  const bytes = canonicalize(hashable as unknown as BitGraphProof);
+  return base64(sha256(bytes));
+}
 
-  // Base64 encode (works in both Node.js and browser)
+// Base64-standard encode (works in both Node.js and browser).
+function base64(hash: Uint8Array): string {
   if (typeof Buffer !== "undefined") {
     return Buffer.from(hash).toString("base64");
   }
-  // Browser fallback
   let binary = "";
   for (let i = 0; i < hash.length; i++) {
     binary += String.fromCharCode(hash[i]!);

package/src/types.ts

@@ -445,7 +445,7 @@ export interface VerificationPolicy {
    * Required for production deployments using the epoch model.
    * Verifiers should track epochId to detect epoch boundaries
    * (enclave restarts) and cross-reference with an external
-   * monotonic anchor (e.g., DynamoDB) for cross-epoch continuity.
+   * monotonic anchor for cross-epoch continuity.
    */
   requireEpochId?: boolean;
 

package/src/verifier.ts

@@ -21,6 +21,16 @@
  *   - attestation.reportB64 is stored in the proof but not interpreted here;
  *     platform-specific attestation verification belongs in adapter packages.
  *
+ * Two entry points share one implementation of every check:
+ *   - verify()               requires the original artifact bytes and runs
+ *                            every check, including the artifact digest
+ *                            comparison (step 2).
+ *   - verifyProofIntegrity() runs every check EXCEPT the artifact digest
+ *                            comparison. It never sees artifact bytes, and
+ *                            its result type states artifactBinding:
+ *                            "not-checked" so the distinction cannot be
+ *                            missed by callers.
+ *
  * Trust model:
  *   - environment.enforcement is tamper-evident (signed) but self-reported.
  *   - Verifiers requiring measured-tee guarantees MUST combine
@@ -85,6 +95,30 @@ export interface VerifyResult {
   reason?: string;
 }
 
+/**
+ * Result of a bytes-free proof integrity check.
+ *
+ * The `artifactBinding` field is the literal string "not-checked" on every
+ * result, success or failure. It exists so that no caller can mistake a
+ * passing integrity check for full verification: the artifact digest was
+ * never compared against any bytes, so nothing here says that a given file
+ * is the committed artifact.
+ */
+export interface ProofIntegrityResult {
+  valid: boolean;
+  /**
+   * Always the literal "not-checked". verifyProofIntegrity() never sees
+   * artifact bytes and never compares them against artifact.digestB64.
+   * A valid result means the proof object is internally consistent and
+   * correctly signed. It does NOT mean any particular file matches the
+   * committed digest. Use verify() with the original bytes to establish
+   * artifact binding.
+   */
+  artifactBinding: "not-checked";
+  /** Human-readable failure reason. Present only when `valid` is false. */
+  reason?: string;
+}
+
 /**
  * Verify a BitGraphProof against the original input bytes.
  *
@@ -101,30 +135,102 @@ export async function verify(opts: {
   trustAnchors?: VerificationPolicy;
 }): Promise<VerifyResult> {
   const { proof, bytes, trustAnchors } = opts;
+  const reason = await runChecks(proof, bytes, trustAnchors);
+  return reason === null ? { valid: true } : fail(reason);
+}
 
+/**
+ * Check a BitGraphProof's cryptographic integrity WITHOUT the artifact bytes.
+ *
+ * Runs every check that verify() runs, in the same order, with the single
+ * exception of the artifact digest comparison (verify() step 2). Checks
+ * performed:
+ *
+ *   - Structural validation, including strict version === "bitgraph/1"
+ *   - artifact.digestB64 base64 well-formedness (the digest string itself,
+ *     never compared against bytes)
+ *   - Canonical SignedBody reconstruction
+ *   - Ed25519 signature over the canonical bytes
+ *   - Agency envelope (P-256 device signature) when present
+ *   - Slot allocation (slot signature, slotHash binding, nonce binding,
+ *     slot counter ordering, key and epoch match) when present
+ *   - Epoch link (structure, successor binding, single-successor invariant)
+ *     when present
+ *   - Policy constraints when trustAnchors is provided
+ *
+ * NOT performed: the artifact-digest-versus-bytes comparison. A valid
+ * result proves the proof object is internally consistent and correctly
+ * signed. It does NOT prove that any particular file is the committed
+ * artifact. When the original bytes are available, use verify() instead;
+ * the result type here carries the literal artifactBinding: "not-checked"
+ * so this limitation is visible at every call site.
+ *
+ * Intended for auditors and indexers that hold proofs without the original
+ * artifacts (bytes-free ingest, chain reconstruction, ledger sweeps).
+ *
+ * @param opts.proof        - The proof to check
+ * @param opts.trustAnchors - Optional policy constraints
+ *
+ * @throws {TypeError}  if `proof` is not the expected type
+ * @returns             `{ valid: true, artifactBinding: "not-checked" }` on
+ *                      success, `{ valid: false, artifactBinding:
+ *                      "not-checked", reason }` on failure
+ */
+export async function verifyProofIntegrity(opts: {
+  proof: BitGraphProof;
+  trustAnchors?: VerificationPolicy;
+}): Promise<ProofIntegrityResult> {
+  const { proof, trustAnchors } = opts;
+  const reason = await runChecks(proof, undefined, trustAnchors);
+  return reason === null
+    ? { valid: true, artifactBinding: "not-checked" }
+    : { valid: false, artifactBinding: "not-checked", reason };
+}
+
+// ---------------------------------------------------------------------------
+// Shared check pipeline
+// ---------------------------------------------------------------------------
+
+/**
+ * Single implementation of every verification check, shared by verify()
+ * and verifyProofIntegrity().
+ *
+ * When `bytes` is a Uint8Array, the artifact digest comparison runs
+ * (verify() semantics). When `bytes` is undefined, that comparison is
+ * skipped and everything else runs unchanged (verifyProofIntegrity()
+ * semantics). Check order and failure strings are identical in both modes.
+ *
+ * @returns null on success, or the failure reason string.
+ */
+async function runChecks(
+  proof: BitGraphProof,
+  bytes: Uint8Array | undefined,
+  trustAnchors: VerificationPolicy | undefined
+): Promise<string | null> {
   // ------------------------------------------------------------------
   // 1. Structural validation
   // ------------------------------------------------------------------
   const structureError = validateStructure(proof);
   if (structureError !== null) {
-    return fail(structureError);
+    return structureError;
   }
 
   // ------------------------------------------------------------------
   // 2. Artifact check: SHA-256 of provided bytes must match proof digest
+  //    (bytes mode only). The committed digest string must decode as
+  //    valid base64 in both modes; in bytes-free mode the comparison is
+  //    skipped, so artifact binding is NOT established.
   // ------------------------------------------------------------------
-  const computedDigest = sha256(bytes);
+  const computedDigest = bytes === undefined ? undefined : sha256(bytes);
   let proofDigest: Uint8Array;
   try {
     proofDigest = fromBase64(proof.artifact.digestB64);
   } catch {
-    return fail("artifact.digestB64 is not valid base64");
+    return "artifact.digestB64 is not valid base64";
   }
 
-  if (!constantTimeEqual(computedDigest, proofDigest)) {
-    return fail(
-      "artifact digest mismatch: the provided bytes do not match the committed digest"
-    );
+  if (computedDigest !== undefined && !constantTimeEqual(computedDigest, proofDigest)) {
+    return "artifact digest mismatch: the provided bytes do not match the committed digest";
   }
 
   // ------------------------------------------------------------------
@@ -134,13 +240,11 @@ export async function verify(opts: {
   try {
     publicKeyBytes = fromBase64(proof.signer.publicKeyB64);
   } catch {
-    return fail("signer.publicKeyB64 is not valid base64");
+    return "signer.publicKeyB64 is not valid base64";
   }
 
   if (publicKeyBytes.length !== 32) {
-    return fail(
-      `signer.publicKeyB64 decodes to ${publicKeyBytes.length} bytes; expected 32 (Ed25519)`
-    );
+    return `signer.publicKeyB64 decodes to ${publicKeyBytes.length} bytes; expected 32 (Ed25519)`;
   }
 
   const signedBody: SignedBody = {
@@ -181,13 +285,11 @@ export async function verify(opts: {
   try {
     signatureBytes = fromBase64(proof.signer.signatureB64);
   } catch {
-    return fail("signer.signatureB64 is not valid base64");
+    return "signer.signatureB64 is not valid base64";
   }
 
   if (signatureBytes.length !== 64) {
-    return fail(
-      `signer.signatureB64 decodes to ${signatureBytes.length} bytes; expected 64 (Ed25519)`
-    );
+    return `signer.signatureB64 decodes to ${signatureBytes.length} bytes; expected 64 (Ed25519)`;
   }
 
   let signatureValid: boolean;
@@ -198,13 +300,11 @@ export async function verify(opts: {
       publicKeyBytes
     );
   } catch (err: unknown) {
-    return fail(
-      `signature verification error: ${err instanceof Error ? err.message : String(err)}`
-    );
+    return `signature verification error: ${err instanceof Error ? err.message : String(err)}`;
   }
 
   if (!signatureValid) {
-    return fail("signature verification failed: signature does not match");
+    return "signature verification failed: signature does not match";
   }
 
   // ------------------------------------------------------------------
@@ -213,7 +313,7 @@ export async function verify(opts: {
   if (proof.agency !== undefined) {
     const agencyError = verifyAgency(proof);
     if (agencyError !== null) {
-      return fail(agencyError);
+      return agencyError;
     }
   }
 
@@ -223,7 +323,7 @@ export async function verify(opts: {
   if (proof.slotAllocation !== undefined) {
     const slotError = await verifySlotAllocation(proof);
     if (slotError !== null) {
-      return fail(slotError);
+      return slotError;
     }
   }
 
@@ -233,7 +333,7 @@ export async function verify(opts: {
   if (proof.commit.epochLink !== undefined) {
     const epochLinkError = verifyEpochLink(proof);
     if (epochLinkError !== null) {
-      return fail(epochLinkError);
+      return epochLinkError;
     }
   }
 
@@ -243,11 +343,11 @@ export async function verify(opts: {
   if (trustAnchors !== undefined) {
     const policyError = checkPolicy(proof, trustAnchors);
     if (policyError !== null) {
-      return fail(policyError);
+      return policyError;
     }
   }
 
-  return { valid: true };
+  return null;
 }
 
 // ---------------------------------------------------------------------------
@@ -701,8 +801,11 @@ async function verifySlotAllocation(proof: BitGraphProof): Promise<string | null
   if (typeof slot.counter !== "string" || slot.counter.length === 0) {
     return "slotAllocation.counter must be a non-empty string";
   }
-  if (typeof slot.time !== "number" || !Number.isFinite(slot.time) || slot.time < 0) {
-    return "slotAllocation.time must be a non-negative finite number";
+  // time is OPTIONAL: the enclave builds slot bodies deliberately without a
+  // clock ("NO clocks. NO timestamps"), so real slot allocations omit it. Only
+  // validate it when present, mirroring commit.time.
+  if (slot.time !== undefined && (typeof slot.time !== "number" || !Number.isFinite(slot.time) || slot.time < 0)) {
+    return "slotAllocation.time must be a non-negative finite number when present";
   }
   if (typeof slot.epochId !== "string" || slot.epochId.length === 0) {
     return "slotAllocation.epochId must be a non-empty string";
@@ -719,7 +822,10 @@ async function verifySlotAllocation(proof: BitGraphProof): Promise<string | null
     version: slot.version,
     nonceB64: slot.nonceB64,
     counter: slot.counter,
-    time: slot.time,
+    // time is included only when present, so the reconstructed body matches the
+    // enclave's signed bytes for clockless slots (the real, common case) and
+    // for any slot that did carry a time.
+    ...(slot.time !== undefined ? { time: slot.time } : {}),
     epochId: slot.epochId,
     publicKeyB64: slot.publicKeyB64,
     ...(slot.chainId ? { chainId: slot.chainId } : {}),
@@ -753,8 +859,8 @@ async function verifySlotAllocation(proof: BitGraphProof): Promise<string | null
   }
 
   // 3. Confirm slot body has no artifact data (causal independence)
-  // The slot body contains: version, nonceB64, counter, time, epochId, publicKeyB64,
-  // and optionally chainId. If any artifact-related field were present, it would
+  // The slot body contains: version, nonceB64, counter, epochId, publicKeyB64,
+  // and optionally time and chainId. If any artifact-related field were present, it would
   // break the causal argument. We reject known artifact fields defensively.
   const forbiddenKeys = new Set(["digestB64", "artifact", "hashAlg", "signatureB64"]);
   const slotBodyKeys = Object.keys(slotBody);