@mikeargento/bitgraph 1.1.0 → 1.2.0

package/dist/__tests__/proof-integrity.test.js

@@ -0,0 +1,426 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+/**
+ * Tests for verifyProofIntegrity, the bytes-free proof integrity API in
+ * @mikeargento/bitgraph-verify.
+ *
+ * Also carries regression coverage asserting that verify() behavior is
+ * unchanged by the shared-pipeline refactor: same checks, same order,
+ * same failure strings.
+ */
+import { describe, test, before, beforeEach } from "node:test";
+import * as assert from "node:assert/strict";
+import { getPublicKeyAsync, signAsync } from "@noble/ed25519";
+import { sha256 } from "@noble/hashes/sha256";
+import { verify, verifyProofIntegrity, resetEpochLinkState, canonicalize, } from "@mikeargento/bitgraph-verify";
+import { Constructor } from "../constructor.js";
+/** Constructor-built fixture, mirroring makeFixture in verifier.test.ts. */
+async function makeFixture(opts) {
+    const privateKey = crypto.getRandomValues(new Uint8Array(32));
+    const publicKeyBytes = await getPublicKeyAsync(privateKey);
+    const publicKeyB64 = Buffer.from(publicKeyBytes).toString("base64");
+    const measurement = "test-measurement-integrity";
+    let counter = 0;
+    const host = opts?.withCounter
+        ? {
+            enforcementTier: "stub",
+            getMeasurement: async () => measurement,
+            getFreshNonce: async () => crypto.getRandomValues(new Uint8Array(16)),
+            sign: async (data) => signAsync(data, privateKey),
+            getPublicKey: async () => publicKeyBytes,
+            nextCounter: async () => String(++counter),
+        }
+        : {
+            enforcementTier: "stub",
+            getMeasurement: async () => measurement,
+            getFreshNonce: async () => crypto.getRandomValues(new Uint8Array(16)),
+            sign: async (data) => signAsync(data, privateKey),
+            getPublicKey: async () => publicKeyBytes,
+        };
+    const ctor = await Constructor.initialize(opts?.epochId !== undefined ? { host, epochId: opts.epochId } : { host });
+    const bytes = new TextEncoder().encode("bitgraph-integrity-test-payload");
+    const proof = await ctor.commit({ bytes });
+    return { proof, bytes, publicKeyB64, measurement };
+}
+/** Deep-clone a proof so mutations don't affect the original. */
+function clone(proof) {
+    return JSON.parse(JSON.stringify(proof));
+}
+function b64(bytes) {
+    return Buffer.from(bytes).toString("base64");
+}
+async function makeKey() {
+    const privateKey = crypto.getRandomValues(new Uint8Array(32));
+    const publicKeyB64 = b64(await getPublicKeyAsync(privateKey));
+    return { privateKey, publicKeyB64 };
+}
+/**
+ * Manually build and sign a proof over the exact canonical SignedBody
+ * layout the verifier reconstructs. Used for slot-carrying and
+ * epochLink-carrying proofs, which the root Constructor does not produce.
+ */
+async function signBody(key, artifact, commit, measurement) {
+    const signedBody = {
+        version: "bitgraph/1",
+        artifact,
+        commit,
+        publicKeyB64: key.publicKeyB64,
+        enforcement: "stub",
+        measurement,
+    };
+    const signatureB64 = b64(await signAsync(canonicalize(signedBody), key.privateKey));
+    return {
+        version: "bitgraph/1",
+        artifact,
+        commit,
+        signer: { publicKeyB64: key.publicKeyB64, signatureB64 },
+        environment: { enforcement: "stub", measurement },
+    };
+}
+/**
+ * Build a slot-carrying proof: slot allocated at counter 1, commit at
+ * counter 2, slotHashB64 binding the signed commit to the exact slot body.
+ */
+async function makeSlotFixture(opts) {
+    const key = await makeKey();
+    const measurement = "test-measurement-slot";
+    const epochId = "epoch-slot-test";
+    const nonceB64 = b64(crypto.getRandomValues(new Uint8Array(16)));
+    const slotBody = {
+        version: "bitgraph/slot/1",
+        nonceB64,
+        counter: "1",
+        time: 1_700_000_000_000,
+        epochId,
+        publicKeyB64: key.publicKeyB64,
+    };
+    const slotCanonical = canonicalize(slotBody);
+    const slotSignatureB64 = b64(await signAsync(slotCanonical, key.privateKey));
+    const slotHashB64 = b64(sha256(slotCanonical));
+    const bytes = new TextEncoder().encode("bitgraph-integrity-slot-payload");
+    const artifact = {
+        hashAlg: "sha256",
+        digestB64: b64(sha256(bytes)),
+    };
+    const commit = {
+        nonceB64,
+        counter: opts?.commitCounter ?? "2",
+        epochId,
+        slotCounter: "1",
+        slotHashB64,
+    };
+    const proof = await signBody(key, artifact, commit, measurement);
+    proof.slotAllocation = { ...slotBody, signatureB64: slotSignatureB64 };
+    return { proof, bytes, measurement };
+}
+/**
+ * Build an epoch-genesis proof carrying an epochLink. The link is inside
+ * the signed commit, so the Ed25519 signature covers it.
+ */
+async function makeEpochLinkFixture(opts) {
+    const key = await makeKey();
+    const prevKey = await makeKey();
+    const toEpochId = opts?.toEpochId ?? "epoch-successor-a";
+    const epochLink = {
+        prevEpochId: "epoch-predecessor-a",
+        prevPublicKeyB64: opts?.samePrevKey === true ? key.publicKeyB64 : prevKey.publicKeyB64,
+        prevCounter: "42",
+        prevProofHashB64: b64(sha256(new TextEncoder().encode("predecessor-terminal-proof"))),
+        toEpochId,
+        toPublicKeyB64: key.publicKeyB64,
+    };
+    const bytes = new TextEncoder().encode("bitgraph-integrity-epochlink-payload");
+    const artifact = {
+        hashAlg: "sha256",
+        digestB64: b64(sha256(bytes)),
+    };
+    const commit = {
+        nonceB64: b64(crypto.getRandomValues(new Uint8Array(16))),
+        counter: "1",
+        epochId: toEpochId,
+        epochLink,
+    };
+    const proof = await signBody(key, artifact, commit, "test-measurement-epochlink");
+    return { proof, bytes };
+}
+// ---------------------------------------------------------------------------
+// Module-level fixtures
+// ---------------------------------------------------------------------------
+let fx;
+before(async () => {
+    fx = await makeFixture();
+});
+// ---------------------------------------------------------------------------
+// Happy path: integrity without bytes
+// ---------------------------------------------------------------------------
+describe("verifyProofIntegrity: valid proof, no bytes", () => {
+    test("passes for a freshly created proof and reports binding not checked", async () => {
+        const result = await verifyProofIntegrity({ proof: fx.proof });
+        assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
+    });
+    test("passes for a proof with counter and epochId", async () => {
+        const chained = await makeFixture({ withCounter: true, epochId: "epoch-integrity-xyz" });
+        const result = await verifyProofIntegrity({ proof: chained.proof });
+        assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
+    });
+    test("passes even when verify() with wrong bytes fails: binding is genuinely not checked", async () => {
+        const wrongBytes = new Uint8Array([1, 2, 3]);
+        const full = await verify({ proof: fx.proof, bytes: wrongBytes });
+        assert.equal(full.valid, false);
+        assert.match(full.reason ?? "", /digest mismatch/);
+        const integrity = await verifyProofIntegrity({ proof: fx.proof });
+        assert.deepEqual(integrity, { valid: true, artifactBinding: "not-checked" });
+    });
+});
+// ---------------------------------------------------------------------------
+// Result shape
+// ---------------------------------------------------------------------------
+describe("verifyProofIntegrity: result shape", () => {
+    test("failure result also carries artifactBinding 'not-checked' plus a reason", async () => {
+        const tampered = clone(fx.proof);
+        tampered.signer.signatureB64 = Buffer.alloc(64).toString("base64");
+        const result = await verifyProofIntegrity({ proof: tampered });
+        assert.equal(result.valid, false);
+        assert.equal(result.artifactBinding, "not-checked");
+        assert.equal(typeof result.reason, "string");
+    });
+});
+// ---------------------------------------------------------------------------
+// Tampering
+// ---------------------------------------------------------------------------
+describe("verifyProofIntegrity: tampering", () => {
+    test("fails when signatureB64 is replaced with all-zeros", async () => {
+        const tampered = clone(fx.proof);
+        tampered.signer.signatureB64 = Buffer.alloc(64).toString("base64");
+        const result = await verifyProofIntegrity({ proof: tampered });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /signature/);
+    });
+    test("fails when version is tampered, with a version reason", async () => {
+        const tampered = clone(fx.proof);
+        tampered["version"] = "bitgraph/2";
+        const result = await verifyProofIntegrity({ proof: tampered });
+        assert.equal(result.valid, false);
+        assert.equal(result.reason, "unsupported proof version: bitgraph/2");
+    });
+    test("fails when a signed field (measurement) is tampered", async () => {
+        const tampered = clone(fx.proof);
+        tampered.environment.measurement = "evil-measurement";
+        const result = await verifyProofIntegrity({ proof: tampered });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /signature/);
+    });
+    test("fails when artifact.digestB64 is not valid base64 (well-formedness still checked)", async () => {
+        const tampered = clone(fx.proof);
+        tampered.artifact.digestB64 = "!!!";
+        const result = await verifyProofIntegrity({ proof: tampered });
+        assert.equal(result.valid, false);
+        assert.equal(result.reason, "artifact.digestB64 is not valid base64");
+    });
+    test("fails for non-object proof", async () => {
+        const result = await verifyProofIntegrity({
+            proof: "not-a-proof",
+        });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /object/);
+    });
+});
+// ---------------------------------------------------------------------------
+// Slot allocation (bytes-free)
+// ---------------------------------------------------------------------------
+describe("verifyProofIntegrity: slot allocation", () => {
+    test("passes for a valid slot-carrying proof", async () => {
+        const slotFx = await makeSlotFixture();
+        const result = await verifyProofIntegrity({ proof: slotFx.proof });
+        assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
+    });
+    test("fails when commit.slotHashB64 is tampered (signed field)", async () => {
+        const slotFx = await makeSlotFixture();
+        const tampered = clone(slotFx.proof);
+        tampered.commit.slotHashB64 = Buffer.alloc(32, 0xee).toString("base64");
+        const result = await verifyProofIntegrity({ proof: tampered });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /signature/);
+    });
+    test("fails with a slot binding reason when the embedded slot record is swapped", async () => {
+        const slotA = await makeSlotFixture();
+        const slotB = await makeSlotFixture();
+        const tampered = clone(slotA.proof);
+        // slotB's record is validly signed by its own key, but it is not the
+        // record that slotA's signed commit.slotHashB64 binds to.
+        tampered.slotAllocation = clone(slotB.proof).slotAllocation;
+        const result = await verifyProofIntegrity({ proof: tampered });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /slotHashB64 does not match SHA-256 of canonical slot body/);
+    });
+    test("fails when slotAllocation.counter is tampered (slot signature breaks)", async () => {
+        const slotFx = await makeSlotFixture();
+        const tampered = clone(slotFx.proof);
+        tampered.slotAllocation.counter = "999";
+        const result = await verifyProofIntegrity({ proof: tampered });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /slotAllocation signature verification failed/);
+    });
+    test("fails when slot counter is not less than commit counter", async () => {
+        // Slot at counter 1, commit also at counter 1: ordering violated even
+        // though every signature is genuine.
+        const slotFx = await makeSlotFixture({ commitCounter: "1" });
+        const result = await verifyProofIntegrity({ proof: slotFx.proof });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /must be less than commit\.counter/);
+    });
+});
+// ---------------------------------------------------------------------------
+// Epoch link (bytes-free)
+// ---------------------------------------------------------------------------
+describe("verifyProofIntegrity: epochLink", () => {
+    beforeEach(() => {
+        resetEpochLinkState();
+    });
+    test("passes for a valid epoch-genesis proof with epochLink", async () => {
+        const linkFx = await makeEpochLinkFixture();
+        const result = await verifyProofIntegrity({ proof: linkFx.proof });
+        assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
+    });
+    test("is idempotent for the same successor epoch", async () => {
+        const linkFx = await makeEpochLinkFixture();
+        const first = await verifyProofIntegrity({ proof: linkFx.proof });
+        const second = await verifyProofIntegrity({ proof: linkFx.proof });
+        assert.equal(first.valid, true);
+        assert.equal(second.valid, true);
+    });
+    test("fails when predecessor and successor keys are identical", async () => {
+        const linkFx = await makeEpochLinkFixture({ samePrevKey: true });
+        const result = await verifyProofIntegrity({ proof: linkFx.proof });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /different keys/);
+    });
+    test("detects a fork: same predecessor consumed by two successor epochs", async () => {
+        const first = await makeEpochLinkFixture({ toEpochId: "epoch-successor-a" });
+        const second = await makeEpochLinkFixture({ toEpochId: "epoch-successor-b" });
+        const r1 = await verifyProofIntegrity({ proof: first.proof });
+        assert.equal(r1.valid, true);
+        const r2 = await verifyProofIntegrity({ proof: second.proof });
+        assert.equal(r2.valid, false);
+        assert.match(r2.reason ?? "", /FORK DETECTED/);
+    });
+});
+// ---------------------------------------------------------------------------
+// Policy checks (trustAnchors)
+// ---------------------------------------------------------------------------
+describe("verifyProofIntegrity: policy (trustAnchors)", () => {
+    test("passes when measurement is in the allowlist", async () => {
+        const result = await verifyProofIntegrity({
+            proof: fx.proof,
+            trustAnchors: { allowedMeasurements: [fx.measurement] },
+        });
+        assert.deepEqual(result, { valid: true, artifactBinding: "not-checked" });
+    });
+    test("fails when measurement is not in the allowlist", async () => {
+        const result = await verifyProofIntegrity({
+            proof: fx.proof,
+            trustAnchors: { allowedMeasurements: ["expected-meas"] },
+        });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /measurement/);
+    });
+    test("fails when requireEnforcement does not match", async () => {
+        const result = await verifyProofIntegrity({
+            proof: fx.proof,
+            trustAnchors: { requireEnforcement: "measured-tee" },
+        });
+        assert.equal(result.valid, false);
+        assert.match(result.reason ?? "", /enforcement/);
+    });
+    test("requireSlot fails for a slotless proof and passes for a slot-carrying proof", async () => {
+        const slotless = await verifyProofIntegrity({
+            proof: fx.proof,
+            trustAnchors: { requireSlot: true },
+        });
+        assert.equal(slotless.valid, false);
+        assert.match(slotless.reason ?? "", /slotAllocation/);
+        const slotFx = await makeSlotFixture();
+        const slotted = await verifyProofIntegrity({
+            proof: slotFx.proof,
+            trustAnchors: { requireSlot: true },
+        });
+        assert.deepEqual(slotted, { valid: true, artifactBinding: "not-checked" });
+    });
+    test("counter policy applies without bytes", async () => {
+        const slotFx = await makeSlotFixture();
+        const pass = await verifyProofIntegrity({
+            proof: slotFx.proof,
+            trustAnchors: { minCounter: "1" },
+        });
+        assert.equal(pass.valid, true);
+        const failResult = await verifyProofIntegrity({
+            proof: slotFx.proof,
+            trustAnchors: { minCounter: "999" },
+        });
+        assert.equal(failResult.valid, false);
+        assert.match(failResult.reason ?? "", /counter/);
+    });
+});
+// ---------------------------------------------------------------------------
+// Regression: verify() behavior unchanged by the shared-pipeline refactor
+// ---------------------------------------------------------------------------
+describe("regression: verify() unchanged", () => {
+    test("valid proof with bytes returns exactly { valid: true }", async () => {
+        const result = await verify({ proof: fx.proof, bytes: fx.bytes });
+        assert.deepEqual(result, { valid: true });
+    });
+    test("wrong bytes fail with the exact digest mismatch reason", async () => {
+        const result = await verify({ proof: fx.proof, bytes: new Uint8Array([9, 9, 9]) });
+        assert.equal(result.valid, false);
+        assert.equal(result.reason, "artifact digest mismatch: the provided bytes do not match the committed digest");
+    });
+    test("tampered signature fails with the exact signature reason", async () => {
+        const tampered = clone(fx.proof);
+        tampered.signer.signatureB64 = Buffer.alloc(64).toString("base64");
+        const result = await verify({ proof: tampered, bytes: fx.bytes });
+        assert.equal(result.valid, false);
+        assert.equal(result.reason, "signature verification failed: signature does not match");
+    });
+    test("tampered version fails with the exact version reason", async () => {
+        const tampered = clone(fx.proof);
+        tampered["version"] = "bitgraph/2";
+        const result = await verify({ proof: tampered, bytes: fx.bytes });
+        assert.equal(result.valid, false);
+        assert.equal(result.reason, "unsupported proof version: bitgraph/2");
+    });
+    test("verify() and verifyProofIntegrity() agree on every non-artifact failure", async () => {
+        const variants = [
+            (p) => {
+                p["version"] = "occ/1";
+            },
+            (p) => {
+                p.signer.signatureB64 = Buffer.alloc(64).toString("base64");
+            },
+            (p) => {
+                p.environment.measurement = "evil-measurement";
+            },
+            (p) => {
+                delete p["signer"];
+            },
+        ];
+        for (const mutate of variants) {
+            const tampered = clone(fx.proof);
+            mutate(tampered);
+            const full = await verify({ proof: tampered, bytes: fx.bytes });
+            const integrity = await verifyProofIntegrity({ proof: tampered });
+            assert.equal(full.valid, integrity.valid);
+            assert.equal(full.reason, integrity.reason);
+        }
+    });
+    test("verify() accepts the slot-carrying fixture with its bytes", async () => {
+        const slotFx = await makeSlotFixture();
+        const result = await verify({ proof: slotFx.proof, bytes: slotFx.bytes });
+        assert.deepEqual(result, { valid: true });
+    });
+    test("verify() accepts the epochLink fixture with its bytes", async () => {
+        resetEpochLinkState();
+        const linkFx = await makeEpochLinkFixture();
+        const result = await verify({ proof: linkFx.proof, bytes: linkFx.bytes });
+        assert.deepEqual(result, { valid: true });
+    });
+});
+//# sourceMappingURL=proof-integrity.test.js.map

package/dist/__tests__/proof-integrity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-integrity.test.js","sourceRoot":"","sources":["../../src/__tests__/proof-integrity.test.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EACL,MAAM,EACN,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,GACb,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAchD,4EAA4E;AAC5E,KAAK,UAAU,WAAW,CAAC,IAG1B;IACC,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,4BAA4B,CAAC;IAEjD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,IAAI,GAAqB,IAAI,EAAE,WAAW;QAC9C,CAAC,CAAC;YACE,eAAe,EAAE,MAAe;YAChC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW;YACvC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YACrE,IAAI,EAAE,KAAK,EAAE,IAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC;YAC7D,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc;YACxC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;SAC3C;QACH,CAAC,CAAC;YACE,eAAe,EAAE,MAAe;YAChC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW;YACvC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YACrE,IAAI,EAAE,KAAK,EAAE,IAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC;YAC7D,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc;SACzC,CAAC;IAEN,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CACvC,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CACzE,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAE3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;AACrD,CAAC;AAED,iEAAiE;AACjE,SAAS,KAAK,CAAC,KAAoB;IACjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAkB,CAAC;AAC5D,CAAC;AAED,SAAS,GAAG,CAAC,KAAiB;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAOD,KAAK,UAAU,OAAO;IACpB,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,QAAQ,CACrB,GAAc,EACd,QAAmC,EACnC,MAA+B,EAC/B,WAAmB;IAEnB,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,YAAqB;QAC9B,QAAQ;QACR,MAAM;QACN,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,WAAW,EAAE,MAAe;QAC5B,WAAW;KACZ,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE;QACxD,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE;KAClD,CAAC;AACJ,CAAC;AAQD;;;GAGG;AACH,KAAK,UAAU,eAAe,CAAC,IAAiC;IAC9D,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,uBAAuB,CAAC;IAC5C,MAAM,OAAO,GAAG,iBAAiB,CAAC;IAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjE,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,iBAA0B;QACnC,QAAQ;QACR,OAAO,EAAE,GAAG;QACZ,IAAI,EAAE,iBAAiB;QACvB,OAAO;QACP,YAAY,EAAE,GAAG,CAAC,YAAY;KAC/B,CAAC;IACF,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IAE/C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAA8B;QAC1C,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KAC9B,CAAC;IACF,MAAM,MAAM,GAA4B;QACtC,QAAQ;QACR,OAAO,EAAE,IAAI,EAAE,aAAa,IAAI,GAAG;QACnC,OAAO;QACP,WAAW,EAAE,GAAG;QAChB,WAAW;KACZ,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACjE,KAAK,CAAC,cAAc,GAAG,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACvE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC;AAOD;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CAAC,IAGnC;IACC,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,mBAAmB,CAAC;IAEzD,MAAM,SAAS,GAAG;QAChB,WAAW,EAAE,qBAAqB;QAClC,gBAAgB,EAAE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;QACtF,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACrF,SAAS;QACT,cAAc,EAAE,GAAG,CAAC,YAAY;KACjC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAA8B;QAC1C,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KAC9B,CAAC;IACF,MAAM,MAAM,GAA4B;QACtC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,SAAS;QAClB,SAAS;KACV,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAClF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,IAAI,EAAY,CAAC;AAEjB,MAAM,CAAC,KAAK,IAAI,EAAE;IAChB,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAEnD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACjC,QAAQ,CAAC,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,MAAM,GAAyB,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACjC,QAAQ,CAAC,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAChC,QAA+C,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACjC,QAAQ,CAAC,WAAW,CAAC,WAAW,GAAG,kBAAkB,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACjC,QAAQ,CAAC,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;YACxC,KAAK,EAAE,aAAyC;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,QAAQ,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,qEAAqE;QACrE,0DAA0D;QAC1D,QAAQ,CAAC,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,cAAe,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,2DAA2D,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,QAAQ,CAAC,cAAe,CAAC,OAAO,GAAG,KAAK,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,8CAA8C,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACzE,sEAAsE;QACtE,qCAAqC;QACrC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,UAAU,CAAC,GAAG,EAAE;QACd,mBAAmB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAE9E,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAE7B,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;YACxC,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,YAAY,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE;SACxD,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;YACxC,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,YAAY,EAAE,EAAE,mBAAmB,EAAE,CAAC,eAAe,CAAC,EAAE;SACzD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;YACxC,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,YAAY,EAAE,EAAE,kBAAkB,EAAE,cAAc,EAAE;SACrD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC;YAC1C,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,YAAY,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;YACzC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;YACtC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAE/B,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC;YAC5C,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,MAAM,EACb,gFAAgF,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACjC,QAAQ,CAAC,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,yDAAyD,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAChC,QAA+C,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,QAAQ,GAAsC;YAClD,CAAC,CAAC,EAAE,EAAE;gBACH,CAAwC,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;YACjE,CAAC;YACD,CAAC,CAAC,EAAE,EAAE;gBACJ,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9D,CAAC;YACD,CAAC,CAAC,EAAE,EAAE;gBACJ,CAAC,CAAC,WAAW,CAAC,WAAW,GAAG,kBAAkB,CAAC;YACjD,CAAC;YACD,CAAC,CAAC,EAAE,EAAE;gBACJ,OAAQ,CAAwC,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC;SACF,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YAChE,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACvE,mBAAmB,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/realistic-proof-fixture.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Shared realistic proof fixture.
+ *
+ * Extracted verbatim from proof-hash-regression.test.ts (values unchanged,
+ * byte for byte) so other suites can import the fixture without importing
+ * a test file (which would re-register its suites under node:test).
+ *
+ * This mirrors what the TEE actually produces: a real-shaped Ethereum
+ * anchor proof with a TRUNCATED attestation blob and placeholder
+ * signatures. It is a canonical-hash and ingest fixture; it fails full
+ * verification by design and its attestation document must honestly
+ * report as present-but-unvalidatable (parse error), never as a pass.
+ */
+export declare const REALISTIC_PROOF: {
+    version: "bitgraph/1";
+    artifact: {
+        hashAlg: "sha256";
+        digestB64: string;
+    };
+    commit: {
+        nonceB64: string;
+        counter: string;
+        slotCounter: string;
+        slotHashB64: string;
+        epochId: string;
+        prevB64: string;
+        chainId: string;
+    };
+    signer: {
+        publicKeyB64: string;
+        signatureB64: string;
+    };
+    environment: {
+        enforcement: string;
+        measurement: string;
+        attestation: {
+            format: string;
+            reportB64: string;
+        };
+    };
+    slotAllocation: {
+        version: "bitgraph/slot/1";
+        nonceB64: string;
+        counter: string;
+        epochId: string;
+        publicKeyB64: string;
+        chainId: string;
+        signatureB64: string;
+    };
+    attribution: {
+        name: string;
+        title: string;
+        message: string;
+    };
+};
+//# sourceMappingURL=realistic-proof-fixture.d.ts.map

package/dist/__tests__/realistic-proof-fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realistic-proof-fixture.d.ts","sourceRoot":"","sources":["../../src/__tests__/realistic-proof-fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyC3B,CAAC"}

package/dist/__tests__/realistic-proof-fixture.js

@@ -0,0 +1,57 @@
+/**
+ * Shared realistic proof fixture.
+ *
+ * Extracted verbatim from proof-hash-regression.test.ts (values unchanged,
+ * byte for byte) so other suites can import the fixture without importing
+ * a test file (which would re-register its suites under node:test).
+ *
+ * This mirrors what the TEE actually produces: a real-shaped Ethereum
+ * anchor proof with a TRUNCATED attestation blob and placeholder
+ * signatures. It is a canonical-hash and ingest fixture; it fails full
+ * verification by design and its attestation document must honestly
+ * report as present-but-unvalidatable (parse error), never as a pass.
+ */
+// Realistic proof: mirrors what the TEE actually produces
+export const REALISTIC_PROOF = {
+    version: "bitgraph/1",
+    artifact: {
+        hashAlg: "sha256",
+        digestB64: "NkYJQ1Gi0hE0SIhv6c46MlqJdurmKHtbScOprDfoL6A=",
+    },
+    commit: {
+        nonceB64: "z1272XEvkMtibuBP0qG3oY37cewo6cJ/o1AuigOSVOk=",
+        counter: "1370",
+        slotCounter: "1369",
+        slotHashB64: "8IyrBOGB64ppP/RETEZTYyYesF5bfcwJ5dI9+u7r2yY=",
+        epochId: "7jU4N9703cm6A2t8YNoGsyOvbdePDpoaD8AKCFs7wko=",
+        prevB64: "KsJfA3MinpSwF+t4GuxU9vLmmaqAK8FhzhaepEnJBDc=",
+        chainId: "bitgraph:main",
+    },
+    signer: {
+        publicKeyB64: "9XjqKDS+e8NhhNoBqbisCKHpaR/HK6hH0x5AKdwc56w=",
+        signatureB64: "wbhAtN1dcF2nESBDB0sCQ4ebuZCav8ziLivYgofh7cXeupw5H97VyovHN4I/R9uS0vNaoPIP8js8uTkZnn/IBA==",
+    },
+    environment: {
+        enforcement: "measured-tee",
+        measurement: "638d655ad6091bed5c358628b7780de0cdbe138a37fe09d52bf8021a720680a2b3c730fee9f6bef79c1dbe68ef3cdd94",
+        attestation: {
+            format: "aws-nitro",
+            reportB64: "hEShATgioFkR...(truncated for test)",
+        },
+    },
+    slotAllocation: {
+        version: "bitgraph/slot/1",
+        nonceB64: "z1272XEvkMtibuBP0qG3oY37cewo6cJ/o1AuigOSVOk=",
+        counter: "1369",
+        epochId: "7jU4N9703cm6A2t8YNoGsyOvbdePDpoaD8AKCFs7wko=",
+        publicKeyB64: "9XjqKDS+e8NhhNoBqbisCKHpaR/HK6hH0x5AKdwc56w=",
+        chainId: "bitgraph:main",
+        signatureB64: "yO34pHfmkjGY6HgDxcPIaFd/lnt/UFZuHQa10LmUvTHgsQP3S3bIEJX/xcXPRENKZ9duVe7c+81rAWdmhiRMBg==",
+    },
+    attribution: {
+        name: "Ethereum Anchor",
+        title: "https://etherscan.io/block/24800448",
+        message: "0x28ed3639cd705fb8cb2b915c1991e9f808b40e775bc8eb540702942729fec2c0",
+    },
+};
+//# sourceMappingURL=realistic-proof-fixture.js.map

package/dist/__tests__/realistic-proof-fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realistic-proof-fixture.js","sourceRoot":"","sources":["../../src/__tests__/realistic-proof-fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,OAAO,EAAE,YAAqB;IAC9B,QAAQ,EAAE;QACR,OAAO,EAAE,QAAiB;QAC1B,SAAS,EAAE,8CAA8C;KAC1D;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,8CAA8C;QACxD,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,8CAA8C;QACvD,OAAO,EAAE,8CAA8C;QACvD,OAAO,EAAE,eAAe;KACzB;IACD,MAAM,EAAE;QACN,YAAY,EAAE,8CAA8C;QAC5D,YAAY,EAAE,0FAA0F;KACzG;IACD,WAAW,EAAE;QACX,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,kGAAkG;QAC/G,WAAW,EAAE;YACX,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,qCAAqC;SACjD;KACF;IACD,cAAc,EAAE;QACd,OAAO,EAAE,iBAA0B;QACnC,QAAQ,EAAE,8CAA8C;QACxD,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,8CAA8C;QACvD,YAAY,EAAE,8CAA8C;QAC5D,OAAO,EAAE,eAAe;QACxB,YAAY,EAAE,0FAA0F;KACzG;IACD,WAAW,EAAE;QACX,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,qCAAqC;QAC5C,OAAO,EAAE,oEAAoE;KAC9E;CACF,CAAC"}