@mikeargento/bitgraph-verify 1.1.1 → 1.1.2

package/dist/proof-hash.d.ts

@@ -8,21 +8,22 @@ import type { BitGraphProof } from "./types.js";
 export declare function computeProofHash(proof: BitGraphProof | Record<string, unknown>): string;
 /**
  * Compute the CHAIN hash of a BitGraph proof: SHA-256 over the canonicalized
- * whole proof object, with the ledger-added `proofHash` field removed.
+ * whole proof object, with the ledger/service-added fields removed.
  *
  * This is the value the enclave writes into the NEXT proof's
  * `commit.prevB64` (and into `epochLink.prevProofHashB64` at an epoch
  * boundary): the enclave hashes the entire assembled proof, before the ledger
- * appends its convenience `proofHash` field. To link a chain, match a proof's
- * `commit.prevB64` against `computeChainHash(predecessor)`.
+ * or anchor service appends its convenience fields. To link a chain, match a
+ * proof's `commit.prevB64` against `computeChainHash(predecessor)`.
  *
  * This differs from computeProofHash, which hashes only the signed-body
- * subset. The chain hash covers every field (signer signature, attestation
- * report, slot allocation, attribution, and so on), so any change anywhere in
- * a proof breaks the link from its successor.
+ * subset. The chain hash covers every enclave-produced field (signer
+ * signature, attestation report, slot allocation, attribution, and so on), so
+ * any change anywhere in a proof breaks the link from its successor.
  *
- * @param proof - The full BitGraphProof object (or equivalent Record). A
- *   top-level `proofHash` field, if present, is excluded before hashing.
+ * @param proof - The full BitGraphProof object (or equivalent Record). Any
+ *   ledger/service-added field (see LEDGER_ADDED_FIELDS) is excluded before
+ *   hashing.
  * @returns Base64-standard encoded SHA-256 hash
  */
 export declare function computeChainHash(proof: BitGraphProof | Record<string, unknown>): string;

package/dist/proof-hash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof-hash.d.ts","sourceRoot":"","sources":["../src/proof-hash.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CA2BvF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAavF"}
+{"version":3,"file":"proof-hash.d.ts","sourceRoot":"","sources":["../src/proof-hash.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CA2BvF;AAsBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAavF"}

package/dist/proof-hash.js

@@ -69,34 +69,54 @@ export function computeProofHash(proof) {
     const hash = sha256(bytes);
     return base64(hash);
 }
+/**
+ * Fields that are NOT produced by the enclave. They are appended to a proof
+ * AFTER it is signed, by the ledger or the anchor service, purely as read-time
+ * convenience. The enclave computed its chain hash before any of these
+ * existed, so they MUST be excluded from computeChainHash — otherwise a
+ * successor's `commit.prevB64` (computed by the enclave over the clean proof)
+ * can never match.
+ *
+ *   proofHash — SHA-256 of the signed-body subset; added by the ledger at
+ *               write time (see computeProofHash above).
+ *   ethereum  — { blockNumber, blockHash }; added by the anchor service to
+ *               anchor records after the transaction is mined. Purely
+ *               redundant: the block hash is already in the signed
+ *               `attribution.message` and the block number in
+ *               `attribution.title`. Present only on Ethereum-anchor proofs.
+ *
+ * Any future ledger/service-added field must be added here as well.
+ */
+const LEDGER_ADDED_FIELDS = ["proofHash", "ethereum"];
 /**
  * Compute the CHAIN hash of a BitGraph proof: SHA-256 over the canonicalized
- * whole proof object, with the ledger-added `proofHash` field removed.
+ * whole proof object, with the ledger/service-added fields removed.
  *
  * This is the value the enclave writes into the NEXT proof's
  * `commit.prevB64` (and into `epochLink.prevProofHashB64` at an epoch
  * boundary): the enclave hashes the entire assembled proof, before the ledger
- * appends its convenience `proofHash` field. To link a chain, match a proof's
- * `commit.prevB64` against `computeChainHash(predecessor)`.
+ * or anchor service appends its convenience fields. To link a chain, match a
+ * proof's `commit.prevB64` against `computeChainHash(predecessor)`.
  *
  * This differs from computeProofHash, which hashes only the signed-body
- * subset. The chain hash covers every field (signer signature, attestation
- * report, slot allocation, attribution, and so on), so any change anywhere in
- * a proof breaks the link from its successor.
+ * subset. The chain hash covers every enclave-produced field (signer
+ * signature, attestation report, slot allocation, attribution, and so on), so
+ * any change anywhere in a proof breaks the link from its successor.
  *
- * @param proof - The full BitGraphProof object (or equivalent Record). A
- *   top-level `proofHash` field, if present, is excluded before hashing.
+ * @param proof - The full BitGraphProof object (or equivalent Record). Any
+ *   ledger/service-added field (see LEDGER_ADDED_FIELDS) is excluded before
+ *   hashing.
  * @returns Base64-standard encoded SHA-256 hash
  */
 export function computeChainHash(proof) {
     const p = proof;
     let hashable = p;
-    if (Object.prototype.hasOwnProperty.call(p, "proofHash")) {
-        // Shallow copy without the ledger-added field; the enclave hashed the
-        // proof before this field existed.
+    if (LEDGER_ADDED_FIELDS.some((k) => Object.prototype.hasOwnProperty.call(p, k))) {
+        // Shallow copy without the ledger/service-added fields; the enclave hashed
+        // the proof before these existed.
         hashable = {};
         for (const key of Object.keys(p)) {
-            if (key !== "proofHash")
+            if (!LEDGER_ADDED_FIELDS.includes(key))
                 hashable[key] = p[key];
         }
     }

package/dist/proof-hash.js.map

@@ -1 +1 @@
-{"version":3,"file":"proof-hash.js","sourceRoot":"","sources":["../src/proof-hash.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA8C;IAC7E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,MAA8C,CAAC;IAChE,MAAM,GAAG,GAAG,CAAC,CAAC,WAAyG,CAAC;IAExH,MAAM,UAAU,GAA4B;QAC1C,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,YAAY,EAAE,MAAM,EAAE,YAAY;QAClC,WAAW,EAAE,GAAG,EAAE,WAAW;QAC7B,WAAW,EAAE,GAAG,EAAE,WAAW;KAC9B,CAAC;IAEF,iCAAiC;IACjC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClB,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IACzC,CAAC;IAED,wCAAwC;IACxC,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC;QACrB,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,UAAsC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA8C;IAC7E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,QAAQ,GAA4B,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QACzD,sEAAsE;QACtE,mCAAmC;QACnC,QAAQ,GAAG,EAAE,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,IAAI,GAAG,KAAK,WAAW;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAoC,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,8DAA8D;AAC9D,SAAS,MAAM,CAAC,IAAgB;IAC9B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC"}
+{"version":3,"file":"proof-hash.js","sourceRoot":"","sources":["../src/proof-hash.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA8C;IAC7E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,MAA8C,CAAC;IAChE,MAAM,GAAG,GAAG,CAAC,CAAC,WAAyG,CAAC;IAExH,MAAM,UAAU,GAA4B;QAC1C,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,YAAY,EAAE,MAAM,EAAE,YAAY;QAClC,WAAW,EAAE,GAAG,EAAE,WAAW;QAC7B,WAAW,EAAE,GAAG,EAAE,WAAW;KAC9B,CAAC;IAEF,iCAAiC;IACjC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClB,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IACzC,CAAC;IAED,wCAAwC;IACxC,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC;QACrB,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,UAAsC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,mBAAmB,GAAsB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA8C;IAC7E,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,QAAQ,GAA4B,CAAC,CAAC;IAC1C,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,2EAA2E;QAC3E,kCAAkC;QAClC,QAAQ,GAAG,EAAE,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAoC,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,8DAA8D;AAC9D,SAAS,MAAM,CAAC,IAAgB;IAC9B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mikeargento/bitgraph-verify",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "Offline verification of BitGraph proofs. Permissionless by design.",
   "license": "MIT",
   "type": "module",

package/src/proof-hash.ts

@@ -78,34 +78,55 @@ export function computeProofHash(proof: BitGraphProof | Record<string, unknown>)
   return base64(hash);
 }
 
+/**
+ * Fields that are NOT produced by the enclave. They are appended to a proof
+ * AFTER it is signed, by the ledger or the anchor service, purely as read-time
+ * convenience. The enclave computed its chain hash before any of these
+ * existed, so they MUST be excluded from computeChainHash — otherwise a
+ * successor's `commit.prevB64` (computed by the enclave over the clean proof)
+ * can never match.
+ *
+ *   proofHash — SHA-256 of the signed-body subset; added by the ledger at
+ *               write time (see computeProofHash above).
+ *   ethereum  — { blockNumber, blockHash }; added by the anchor service to
+ *               anchor records after the transaction is mined. Purely
+ *               redundant: the block hash is already in the signed
+ *               `attribution.message` and the block number in
+ *               `attribution.title`. Present only on Ethereum-anchor proofs.
+ *
+ * Any future ledger/service-added field must be added here as well.
+ */
+const LEDGER_ADDED_FIELDS: readonly string[] = ["proofHash", "ethereum"];
+
 /**
  * Compute the CHAIN hash of a BitGraph proof: SHA-256 over the canonicalized
- * whole proof object, with the ledger-added `proofHash` field removed.
+ * whole proof object, with the ledger/service-added fields removed.
  *
  * This is the value the enclave writes into the NEXT proof's
  * `commit.prevB64` (and into `epochLink.prevProofHashB64` at an epoch
  * boundary): the enclave hashes the entire assembled proof, before the ledger
- * appends its convenience `proofHash` field. To link a chain, match a proof's
- * `commit.prevB64` against `computeChainHash(predecessor)`.
+ * or anchor service appends its convenience fields. To link a chain, match a
+ * proof's `commit.prevB64` against `computeChainHash(predecessor)`.
  *
  * This differs from computeProofHash, which hashes only the signed-body
- * subset. The chain hash covers every field (signer signature, attestation
- * report, slot allocation, attribution, and so on), so any change anywhere in
- * a proof breaks the link from its successor.
+ * subset. The chain hash covers every enclave-produced field (signer
+ * signature, attestation report, slot allocation, attribution, and so on), so
+ * any change anywhere in a proof breaks the link from its successor.
  *
- * @param proof - The full BitGraphProof object (or equivalent Record). A
- *   top-level `proofHash` field, if present, is excluded before hashing.
+ * @param proof - The full BitGraphProof object (or equivalent Record). Any
+ *   ledger/service-added field (see LEDGER_ADDED_FIELDS) is excluded before
+ *   hashing.
  * @returns Base64-standard encoded SHA-256 hash
  */
 export function computeChainHash(proof: BitGraphProof | Record<string, unknown>): string {
   const p = proof as Record<string, unknown>;
   let hashable: Record<string, unknown> = p;
-  if (Object.prototype.hasOwnProperty.call(p, "proofHash")) {
-    // Shallow copy without the ledger-added field; the enclave hashed the
-    // proof before this field existed.
+  if (LEDGER_ADDED_FIELDS.some((k) => Object.prototype.hasOwnProperty.call(p, k))) {
+    // Shallow copy without the ledger/service-added fields; the enclave hashed
+    // the proof before these existed.
     hashable = {};
     for (const key of Object.keys(p)) {
-      if (key !== "proofHash") hashable[key] = p[key];
+      if (!LEDGER_ADDED_FIELDS.includes(key)) hashable[key] = p[key];
     }
   }
   const bytes = canonicalize(hashable as unknown as BitGraphProof);