@mikeargento/bitgraph 1.1.0

package/dist/__tests__/constructor.test.js

@@ -0,0 +1,267 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+import { describe, test } from "node:test";
+import * as assert from "node:assert/strict";
+import { getPublicKeyAsync, signAsync } from "@noble/ed25519";
+import { Constructor } from "../constructor.js";
+async function makeKeys() {
+    const privateKey = crypto.getRandomValues(new Uint8Array(32));
+    const publicKeyBytes = await getPublicKeyAsync(privateKey);
+    const publicKeyB64 = Buffer.from(publicKeyBytes).toString("base64");
+    return { privateKey, publicKeyBytes, publicKeyB64 };
+}
+/** Minimal stub host — all required capabilities, no optional ones. */
+function baseHost(km) {
+    return {
+        enforcementTier: "stub",
+        getMeasurement: async () => "test-measurement-cafebabe",
+        getFreshNonce: async () => crypto.getRandomValues(new Uint8Array(16)),
+        sign: async (data) => signAsync(data, km.privateKey),
+        getPublicKey: async () => km.publicKeyBytes,
+    };
+}
+/** Stub host that also exposes a monotonic counter. */
+function hostWithCounter(km) {
+    let c = 0;
+    return {
+        enforcementTier: "stub",
+        getMeasurement: async () => "test-measurement-cafebabe",
+        getFreshNonce: async () => crypto.getRandomValues(new Uint8Array(16)),
+        sign: async (data) => signAsync(data, km.privateKey),
+        getPublicKey: async () => km.publicKeyBytes,
+        nextCounter: async () => String(++c),
+    };
+}
+/** Stub host that also exposes a secure clock. */
+function hostWithTime(km, timeMs) {
+    return {
+        enforcementTier: "stub",
+        getMeasurement: async () => "test-measurement-cafebabe",
+        getFreshNonce: async () => crypto.getRandomValues(new Uint8Array(16)),
+        sign: async (data) => signAsync(data, km.privateKey),
+        getPublicKey: async () => km.publicKeyBytes,
+        secureTime: async () => timeMs,
+    };
+}
+// ---------------------------------------------------------------------------
+// Constructor.initialize
+// ---------------------------------------------------------------------------
+describe("Constructor.initialize", () => {
+    test("succeeds with a minimal host", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        assert.ok(ctor instanceof Constructor);
+    });
+    test("fails when getMeasurement() rejects", async () => {
+        const km = await makeKeys();
+        const host = {
+            ...baseHost(km),
+            getMeasurement: async () => { throw new Error("measurement unavailable"); },
+        };
+        await assert.rejects(Constructor.initialize({ host }), /preflight failed/);
+    });
+    test("fails when getPublicKey() rejects", async () => {
+        const km = await makeKeys();
+        const host = {
+            ...baseHost(km),
+            getPublicKey: async () => { throw new Error("key unavailable"); },
+        };
+        await assert.rejects(Constructor.initialize({ host }), /preflight failed/);
+    });
+    test("rejects requireCounter policy when host has no nextCounter", async () => {
+        const km = await makeKeys();
+        await assert.rejects(Constructor.initialize({ host: baseHost(km), policy: { requireCounter: true } }), /nextCounter/);
+    });
+    test("rejects requireTime policy when host has no secureTime", async () => {
+        const km = await makeKeys();
+        await assert.rejects(Constructor.initialize({ host: baseHost(km), policy: { requireTime: true } }), /secureTime/);
+    });
+    test("accepts requireCounter policy when host has nextCounter", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({
+            host: hostWithCounter(km),
+            policy: { requireCounter: true },
+        });
+        assert.ok(ctor instanceof Constructor);
+    });
+    test("accepts requireTime policy when host has secureTime", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({
+            host: hostWithTime(km, Date.now()),
+            policy: { requireTime: true },
+        });
+        assert.ok(ctor instanceof Constructor);
+    });
+});
+// ---------------------------------------------------------------------------
+// Constructor.commit
+// ---------------------------------------------------------------------------
+describe("Constructor.commit", () => {
+    test("returns a structurally valid BitGraphProof", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        const bytes = new TextEncoder().encode("hello bitgraph");
+        const proof = await ctor.commit({ bytes });
+        assert.equal(proof.version, "bitgraph/1");
+        assert.equal(proof.artifact.hashAlg, "sha256");
+        assert.ok(typeof proof.artifact.digestB64 === "string" && proof.artifact.digestB64.length > 0);
+        assert.ok(typeof proof.commit.nonceB64 === "string" && proof.commit.nonceB64.length > 0);
+        assert.equal(proof.signer.publicKeyB64, km.publicKeyB64);
+        assert.ok(typeof proof.signer.signatureB64 === "string" && proof.signer.signatureB64.length > 0);
+        assert.equal(proof.environment.enforcement, "stub");
+        assert.equal(proof.environment.measurement, "test-measurement-cafebabe");
+    });
+    test("works with empty bytes", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        const proof = await ctor.commit({ bytes: new Uint8Array(0) });
+        assert.equal(proof.version, "bitgraph/1");
+        assert.ok(proof.artifact.digestB64.length > 0);
+    });
+    test("works with large bytes (100 KB)", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        // crypto.getRandomValues is limited to 65536 bytes; use fill instead
+        const bytes = new Uint8Array(100_000).fill(0xab);
+        const proof = await ctor.commit({ bytes });
+        assert.equal(proof.version, "bitgraph/1");
+    });
+    test("includes metadata when provided (outside signature)", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        const proof = await ctor.commit({
+            bytes: new Uint8Array([1, 2, 3]),
+            metadata: { source: "test-suite" },
+        });
+        assert.deepEqual(proof.metadata, { source: "test-suite" });
+    });
+    test("omits metadata field when not provided", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        const proof = await ctor.commit({ bytes: new Uint8Array([1]) });
+        assert.equal(proof.metadata, undefined);
+    });
+    test("includes counter when host provides nextCounter", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: hostWithCounter(km) });
+        const proof = await ctor.commit({ bytes: new Uint8Array([1]) });
+        assert.ok(typeof proof.commit.counter === "string");
+        assert.equal(proof.commit.counter, "1");
+    });
+    test("counter increments across commits", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: hostWithCounter(km) });
+        const p1 = await ctor.commit({ bytes: new Uint8Array([1]) });
+        const p2 = await ctor.commit({ bytes: new Uint8Array([2]) });
+        assert.equal(p1.commit.counter, "1");
+        assert.equal(p2.commit.counter, "2");
+    });
+    test("includes time when host provides secureTime", async () => {
+        const km = await makeKeys();
+        const fixedTime = 1_700_000_000_000;
+        const ctor = await Constructor.initialize({ host: hostWithTime(km, fixedTime) });
+        const proof = await ctor.commit({ bytes: new Uint8Array([1]) });
+        assert.equal(proof.commit.time, fixedTime);
+    });
+    test("includes prevB64 when provided", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        const prevHash = Buffer.alloc(32).toString("base64");
+        const proof = await ctor.commit({
+            bytes: new Uint8Array([1]),
+            prevProofHashB64: prevHash,
+        });
+        assert.equal(proof.commit.prevB64, prevHash);
+    });
+    test("includes epochId when Constructor was initialized with one", async () => {
+        const km = await makeKeys();
+        const epochId = "epoch-abc-123";
+        const ctor = await Constructor.initialize({ host: baseHost(km), epochId });
+        const proof = await ctor.commit({ bytes: new Uint8Array([1]) });
+        assert.equal(proof.commit.epochId, epochId);
+    });
+    test("omits epochId when not provided at initialization", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        const proof = await ctor.commit({ bytes: new Uint8Array([1]) });
+        assert.equal(proof.commit.epochId, undefined);
+    });
+    test("each commit has a unique nonce", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        const p1 = await ctor.commit({ bytes: new Uint8Array([1]) });
+        const p2 = await ctor.commit({ bytes: new Uint8Array([1]) });
+        assert.notEqual(p1.commit.nonceB64, p2.commit.nonceB64);
+    });
+    test("fail-closed: throws when sign() rejects (no partial proof)", async () => {
+        const km = await makeKeys();
+        const badSignHost = {
+            enforcementTier: "stub",
+            getMeasurement: async () => "meas",
+            getFreshNonce: async () => crypto.getRandomValues(new Uint8Array(16)),
+            sign: async () => { throw new Error("HSM offline"); },
+            getPublicKey: async () => km.publicKeyBytes,
+        };
+        const ctor = await Constructor.initialize({ host: badSignHost });
+        await assert.rejects(ctor.commit({ bytes: new Uint8Array([1]) }), /host\.sign\(\) rejected/);
+    });
+    test("throws when nonce is too short", async () => {
+        const km = await makeKeys();
+        const shortNonceHost = {
+            ...baseHost(km),
+            getFreshNonce: async () => new Uint8Array(8), // < 16 bytes required
+        };
+        const ctor = await Constructor.initialize({ host: shortNonceHost });
+        await assert.rejects(ctor.commit({ bytes: new Uint8Array([1]) }), /insufficient length/);
+    });
+    test("two commits to same bytes produce different proofs (nonce)", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        const bytes = new Uint8Array([42, 43, 44]);
+        const p1 = await ctor.commit({ bytes });
+        const p2 = await ctor.commit({ bytes });
+        assert.equal(p1.artifact.digestB64, p2.artifact.digestB64); // same digest
+        assert.notEqual(p1.signer.signatureB64, p2.signer.signatureB64); // different signature
+    });
+});
+// ---------------------------------------------------------------------------
+// Constructor.commitDigest
+// ---------------------------------------------------------------------------
+describe("Constructor.commitDigest", () => {
+    test("returns a valid proof given a correct 32-byte base64 digest", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        // SHA-256 of empty bytes
+        const digest = Buffer.alloc(32, 0xab).toString("base64");
+        const proof = await ctor.commitDigest({ digestB64: digest });
+        assert.equal(proof.version, "bitgraph/1");
+        assert.equal(proof.artifact.digestB64, digest);
+    });
+    test("throws for invalid base64", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        await assert.rejects(ctor.commitDigest({ digestB64: "not-valid-base64!!!" }), /base64/i);
+    });
+    test("throws when digest decodes to != 32 bytes", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        // 16 bytes, valid base64, but not 32 bytes
+        const shortDigest = Buffer.alloc(16).toString("base64");
+        await assert.rejects(ctor.commitDigest({ digestB64: shortDigest }), /32/);
+    });
+    test("throws for empty string digest", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        await assert.rejects(ctor.commitDigest({ digestB64: "" }), /non-empty|base64/i);
+    });
+    test("includes metadata when provided", async () => {
+        const km = await makeKeys();
+        const ctor = await Constructor.initialize({ host: baseHost(km) });
+        const digest = Buffer.alloc(32, 0x77).toString("base64");
+        const proof = await ctor.commitDigest({
+            digestB64: digest,
+            metadata: { mode: "digest-only" },
+        });
+        assert.deepEqual(proof.metadata, { mode: "digest-only" });
+    });
+});
+//# sourceMappingURL=constructor.test.js.map

package/dist/__tests__/constructor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constructor.test.js","sourceRoot":"","sources":["../../src/__tests__/constructor.test.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAahD,KAAK,UAAU,QAAQ;IACrB,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACtD,CAAC;AAED,uEAAuE;AACvE,SAAS,QAAQ,CAAC,EAAe;IAC/B,OAAO;QACL,eAAe,EAAE,MAAe;QAChC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,2BAA2B;QACvD,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,EAAE,KAAK,EAAE,IAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC;QAChE,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,cAAc;KAC5C,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,SAAS,eAAe,CAAC,EAAe;IACtC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO;QACL,eAAe,EAAE,MAAe;QAChC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,2BAA2B;QACvD,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,EAAE,KAAK,EAAE,IAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC;QAChE,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,cAAc;QAC3C,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,SAAS,YAAY,CAAC,EAAe,EAAE,MAAc;IACnD,OAAO;QACL,eAAe,EAAE,MAAe;QAChC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,2BAA2B;QACvD,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,EAAE,KAAK,EAAE,IAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC;QAChE,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,cAAc;QAC3C,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;KAC/B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAI,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,CAAC,IAAI,YAAY,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAqB;YAC7B,GAAG,QAAQ,CAAC,EAAE,CAAC;YACf,cAAc,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;SAC5E,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAClB,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,EAChC,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAqB;YAC7B,GAAG,QAAQ,CAAC,EAAE,CAAC;YACf,YAAY,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;SAClE,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAClB,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,EAChC,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,CAAC,OAAO,CAClB,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC,EAChF,aAAa,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,CAAC,OAAO,CAClB,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,EAC7E,YAAY,CACb,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC;YACxC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,IAAI,YAAY,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC;YACxC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAClC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,IAAI,YAAY,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAE3C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/F,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,qEAAqE;QACrE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC9B,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAChC,QAAQ,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,iBAAiB,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC9B,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,gBAAgB,EAAE,QAAQ;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,eAAe,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAqB;YACpC,eAAe,EAAE,MAAe;YAChC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;YAClC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YACrE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACrD,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,cAAc;SAC5C,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACjE,MAAM,MAAM,CAAC,OAAO,CAClB,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAC3C,yBAAyB,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAqB;YACvC,GAAG,QAAQ,CAAC,EAAE,CAAC;YACf,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,sBAAsB;SACrE,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CAAC,OAAO,CAClB,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAC3C,qBAAqB,CACtB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc;QAC1E,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,yBAAyB;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,OAAO,CAClB,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,EACvD,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,2CAA2C;QAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,MAAM,CAAC,OAAO,CAClB,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAC7C,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,OAAO,CAClB,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EACpC,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;YACpC,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/hello-world.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hello-world.test.d.ts.map

package/dist/__tests__/hello-world.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hello-world.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/hello-world.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/hello-world.test.js

@@ -0,0 +1,9 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+import { describe, test } from "node:test";
+import * as assert from "node:assert/strict";
+describe("hello world", () => {
+    test("passes", () => {
+        assert.strictEqual("hello world", "hello world");
+    });
+});
+//# sourceMappingURL=hello-world.test.js.map

package/dist/__tests__/hello-world.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hello-world.test.js","sourceRoot":"","sources":["../../src/__tests__/hello-world.test.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAE7C,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClB,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/policy-enforcement.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy-enforcement.test.d.ts.map

package/dist/__tests__/policy-enforcement.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-enforcement.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/policy-enforcement.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/policy-enforcement.test.js

@@ -0,0 +1,188 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+// End-to-end test for the BitGraph policy enforcement pipeline.
+import { test, describe } from "node:test";
+import * as assert from "node:assert/strict";
+import { tmpdir } from "node:os";
+import { mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { Constructor } from "../constructor.js";
+import { canonicalize } from "../index.js";
+import { hashPolicy, createPolicyBinding } from "../policy.js";
+import { sha256 } from "@noble/hashes/sha256";
+// Inline stub host for test isolation — dynamic import avoids tsc dist conflicts
+async function createTestHost(statePath) {
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const mod = await import("bitgraph-stub");
+    const StubHost = mod.StubHost ?? mod.default?.StubHost;
+    return StubHost.createPersistent({
+        statePath,
+        measurement: "test",
+        enableTime: true,
+        enableCounter: true,
+    });
+}
+const TEST_POLICY = `# Policy: Test Policy
+version: 2.0
+
+## Allowed Tools
+- search
+- read_file
+
+## Limits
+- max_actions: 100
+- rate_limit: 10/min
+`;
+const TEST_POLICY_REVOKED = `# Policy: Test Policy Revoked
+version: 3.0
+
+## Allowed Tools
+- search
+
+## Limits
+- max_actions: 50
+`;
+describe("Policy Enforcement Pipeline", () => {
+    test("policy binding is created from markdown", () => {
+        const binding = createPolicyBinding(TEST_POLICY);
+        assert.ok(binding.digestB64, "should have digestB64");
+        assert.equal(binding.name, "Test Policy");
+        assert.equal(binding.version, "2.0");
+    });
+    test("policy committed as slot 0 with binding in proof", async () => {
+        const testDir = join(tmpdir(), `bitgraph-test-${Date.now()}`);
+        mkdirSync(testDir, { recursive: true });
+        const stub = await createTestHost(join(testDir, "state.json"));
+        const constructor = await Constructor.initialize({
+            host: stub.host,
+            policy: { requireCounter: true, requireTime: true },
+        });
+        const binding = createPolicyBinding(TEST_POLICY);
+        const policyDigest = hashPolicy(TEST_POLICY);
+        const policyProof = await constructor.commitDigest({
+            digestB64: policyDigest,
+            metadata: { kind: "policy-commitment", policyName: binding.name },
+            policy: binding,
+        });
+        assert.ok(policyProof, "should return a proof");
+        assert.equal(policyProof.commit.counter, "1");
+        assert.ok(policyProof.policy, "proof should have policy field");
+        assert.equal(policyProof.policy.digestB64, policyDigest);
+        assert.equal(policyProof.policy.name, "Test Policy");
+        const proofHash = Buffer.from(sha256(canonicalize(policyProof))).toString("base64");
+        binding.authorProofDigestB64 = proofHash;
+        assert.ok(binding.authorProofDigestB64);
+    });
+    test("action proofs carry the policy binding", async () => {
+        const testDir = join(tmpdir(), `bitgraph-test-${Date.now()}`);
+        mkdirSync(testDir, { recursive: true });
+        const stub = await createTestHost(join(testDir, "state.json"));
+        const constructor = await Constructor.initialize({
+            host: stub.host,
+            policy: { requireCounter: true, requireTime: true },
+        });
+        const binding = createPolicyBinding(TEST_POLICY);
+        const policyDigest = hashPolicy(TEST_POLICY);
+        const policyProof = await constructor.commitDigest({
+            digestB64: policyDigest,
+            metadata: { kind: "policy-commitment" },
+            policy: binding,
+        });
+        const proofHash = Buffer.from(sha256(canonicalize(policyProof))).toString("base64");
+        binding.authorProofDigestB64 = proofHash;
+        const actionDigest = Buffer.from(sha256(new TextEncoder().encode("search:query"))).toString("base64");
+        const actionProof = await constructor.commitDigest({
+            digestB64: actionDigest,
+            metadata: { kind: "tool-execution", tool: "search" },
+            prevProofHashB64: proofHash,
+            policy: binding,
+        });
+        assert.ok(actionProof.policy, "action proof should have policy");
+        assert.equal(actionProof.policy.digestB64, policyDigest);
+        assert.equal(actionProof.policy.authorProofDigestB64, proofHash);
+        assert.equal(actionProof.commit.counter, "2");
+    });
+    test("policy revocation updates binding", async () => {
+        const testDir = join(tmpdir(), `bitgraph-test-${Date.now()}`);
+        mkdirSync(testDir, { recursive: true });
+        const stub = await createTestHost(join(testDir, "state.json"));
+        const constructor = await Constructor.initialize({
+            host: stub.host,
+            policy: { requireCounter: true, requireTime: true },
+        });
+        // Slot 0: original policy
+        const originalBinding = createPolicyBinding(TEST_POLICY);
+        const originalDigest = hashPolicy(TEST_POLICY);
+        const slot0Proof = await constructor.commitDigest({
+            digestB64: originalDigest,
+            metadata: { kind: "policy-commitment" },
+            policy: originalBinding,
+        });
+        const slot0Hash = Buffer.from(sha256(canonicalize(slot0Proof))).toString("base64");
+        originalBinding.authorProofDigestB64 = slot0Hash;
+        // Action under original policy
+        const action1 = await constructor.commitDigest({
+            digestB64: Buffer.from(sha256(new TextEncoder().encode("action1"))).toString("base64"),
+            metadata: { kind: "tool-execution", tool: "read_file" },
+            prevProofHashB64: slot0Hash,
+            policy: originalBinding,
+        });
+        assert.equal(action1.policy.digestB64, originalDigest);
+        // Revoke: commit new policy
+        const revokedBinding = createPolicyBinding(TEST_POLICY_REVOKED);
+        const revokedDigest = hashPolicy(TEST_POLICY_REVOKED);
+        const action1Hash = Buffer.from(sha256(canonicalize(action1))).toString("base64");
+        const revokeProof = await constructor.commitDigest({
+            digestB64: revokedDigest,
+            metadata: { kind: "policy-change", removed: ["read_file"] },
+            prevProofHashB64: action1Hash,
+            policy: revokedBinding,
+        });
+        const revokeHash = Buffer.from(sha256(canonicalize(revokeProof))).toString("base64");
+        revokedBinding.authorProofDigestB64 = revokeHash;
+        // Action under new (revoked) policy
+        const action2 = await constructor.commitDigest({
+            digestB64: Buffer.from(sha256(new TextEncoder().encode("action2"))).toString("base64"),
+            metadata: { kind: "tool-execution", tool: "search" },
+            prevProofHashB64: revokeHash,
+            policy: revokedBinding,
+        });
+        assert.equal(action2.policy.digestB64, revokedDigest);
+        assert.equal(action2.policy.authorProofDigestB64, revokeHash);
+        assert.notEqual(action2.policy.digestB64, originalDigest);
+    });
+    test("causal ordering: policy counter < action counter", async () => {
+        const testDir = join(tmpdir(), `bitgraph-test-${Date.now()}`);
+        mkdirSync(testDir, { recursive: true });
+        const stub = await createTestHost(join(testDir, "state.json"));
+        const constructor = await Constructor.initialize({
+            host: stub.host,
+            policy: { requireCounter: true, requireTime: true },
+        });
+        const binding = createPolicyBinding(TEST_POLICY);
+        const policyProof = await constructor.commitDigest({
+            digestB64: hashPolicy(TEST_POLICY),
+            metadata: { kind: "policy-commitment" },
+            policy: binding,
+        });
+        const policyCounter = BigInt(policyProof.commit.counter ?? "0");
+        const proofHash = Buffer.from(sha256(canonicalize(policyProof))).toString("base64");
+        binding.authorProofDigestB64 = proofHash;
+        for (let i = 1; i <= 3; i++) {
+            const actionProof = await constructor.commitDigest({
+                digestB64: Buffer.from(sha256(new TextEncoder().encode(`action-${i}`))).toString("base64"),
+                metadata: { kind: "tool-execution", tool: "search" },
+                policy: binding,
+            });
+            const actionCounter = BigInt(actionProof.commit.counter ?? "0");
+            assert.ok(actionCounter > policyCounter, `action ${i} counter (${actionCounter}) > policy counter (${policyCounter})`);
+        }
+    });
+    test("hashPolicy produces consistent digest", () => {
+        const digest1 = hashPolicy(TEST_POLICY);
+        const digest2 = hashPolicy(TEST_POLICY);
+        assert.equal(digest1, digest2);
+        const digest3 = hashPolicy(TEST_POLICY_REVOKED);
+        assert.notEqual(digest1, digest3);
+    });
+});
+//# sourceMappingURL=policy-enforcement.test.js.map

package/dist/__tests__/policy-enforcement.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-enforcement.test.js","sourceRoot":"","sources":["../../src/__tests__/policy-enforcement.test.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,gEAAgE;AAEhE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,iFAAiF;AACjF,KAAK,UAAU,cAAc,CAAC,SAAiB;IAC7C,iEAAiE;IACjE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,eAAyB,CAAQ,CAAC;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC;IACvD,OAAO,QAAQ,CAAC,gBAAgB,CAAC;QAC/B,SAAS;QACT,WAAW,EAAE,MAAM;QACnB,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,WAAW,GAAG;;;;;;;;;;CAUnB,CAAC;AAEF,MAAM,mBAAmB,GAAG;;;;;;;;CAQ3B,CAAC;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACnD,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9D,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAE/D,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACpD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QAE7C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC;YACjD,SAAS,EAAE,YAAY;YACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;YACjE,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEtD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpF,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9D,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAE/D,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACpD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QAE7C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC;YACjD,SAAS,EAAE,YAAY;YACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;YACvC,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpF,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;QAEzC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtG,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC;YACjD,SAAS,EAAE,YAAY;YACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpD,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9D,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAE/D,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACpD,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QAE/C,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC;YAChD,SAAS,EAAE,cAAc;YACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;YACvC,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnF,eAAe,CAAC,oBAAoB,GAAG,SAAS,CAAC;QAEjD,+BAA+B;QAC/B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC;YAC7C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtF,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE;YACvD,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAExD,4BAA4B;QAC5B,MAAM,cAAc,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAEtD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC;YACjD,SAAS,EAAE,aAAa;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;YAC3D,gBAAgB,EAAE,WAAW;YAC7B,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrF,cAAc,CAAC,oBAAoB,GAAG,UAAU,CAAC;QAEjD,oCAAoC;QACpC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC;YAC7C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtF,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpD,gBAAgB,EAAE,UAAU;YAC5B,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAO,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9D,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAE/D,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;SACpD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAEjD,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC;YACjD,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC;YAClC,QAAQ,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;YACvC,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;QAEhE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpF,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;QAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC;gBACjD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1F,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACpD,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;YAChE,MAAM,CAAC,EAAE,CAAC,aAAa,GAAG,aAAa,EAAE,UAAU,CAAC,aAAa,aAAa,uBAAuB,aAAa,GAAG,CAAC,CAAC;QACzH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACjD,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/proof-hash-regression.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=proof-hash-regression.test.d.ts.map

package/dist/__tests__/proof-hash-regression.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-hash-regression.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/proof-hash-regression.test.ts"],"names":[],"mappings":""}