@mikeargento/bitgraph 1.1.1 → 1.2.0

package/dist/__tests__/fuse-verify.test.js

@@ -0,0 +1,250 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+/**
+ * BitGraph Fuse: verifier paths (spec 15.4, 15.5, 15.8) on real fixture
+ * proofs minted through the unmodified enclave. Every negative case runs.
+ */
+import { describe, test } from "node:test";
+import * as assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { sha256 } from "@noble/hashes/sha256";
+import { verifyFuse, assembledAfterCommit, verifyProofIntegrity, bytesToBase64, resetEpochLinkState } from "@mikeargento/bitgraph-verify";
+const FIX = fileURLToPath(new URL("../../src/__tests__/fuse-fixtures/", import.meta.url));
+const bytes = (name) => new Uint8Array(readFileSync(FIX + name));
+const proofOf = (name) => JSON.parse(readFileSync(FIX + name, "utf8"));
+const text = (name) => readFileSync(FIX + name, "utf8");
+const original = bytes("original.txt");
+const png = bytes("image.png");
+const unrelated = new TextEncoder().encode("a file nobody recorded\n");
+async function run(proofName, file, extra = {}) {
+    resetEpochLinkState();
+    return verifyFuse({ proof: proofOf(proofName), bytes: file, ...extra });
+}
+describe("path 3: the file is the committed bytes", () => {
+    test("an ordinary proof with its file is RECORDED, with the recorded statement", async () => {
+        const r = await run("recorded.proof.json", original);
+        assert.equal(r.category, "RECORDED");
+        assert.equal(r.proof.valid, true);
+        assert.equal(r.marker, null);
+        assert.match(r.statements[0], /existed no later than commit position/);
+    });
+    for (const [proofName, fusedName, placement] of [
+        ["trailer.proof.json", "fused-trailer.bin", "trailer/1"],
+        ["container.proof.json", "fused-container.tar", "container/1"],
+        ["produced-origin.proof.json", "produced-origin.json", "produced/1"],
+        ["produced-bare.proof.json", "produced-bare.json", "produced/1"],
+    ]) {
+        test(`${placement}: fused bytes verify FUSED_DIRECT`, async () => {
+            const r = await run(proofName, bytes(fusedName));
+            assert.equal(r.category, "FUSED_DIRECT", r.reason ?? "");
+            assert.equal(r.placement, placement);
+            assert.equal(r.marker?.source, "attribution");
+            assert.ok(r.span);
+            assert.ok(BigInt(r.span.positions) >= 1n);
+            assert.equal(r.span.chainId, "bitgraph:main");
+            assert.match(r.statements.at(-1), /could not feasibly have been finalized before their signed slot allocation at position/);
+            assert.equal(r.policy.spanExceeded, false);
+        });
+    }
+    test("the origin statement names what was checked: consistency on the direct path, reconstruction on the origin path", async () => {
+        const direct = await run("trailer.proof.json", bytes("fused-trailer.bin"));
+        assert.equal(direct.category, "FUSED_DIRECT");
+        assert.equal(direct.statements.length, 2);
+        assert.match(direct.statements[0], /origin digest that matches the signed marker/);
+        assert.match(direct.statements[0], /was not supplied and was not checked/);
+        assert.doesNotMatch(direct.statements[0], /supplied original/, "no original was supplied on the direct path");
+        const fromOrigin = await run("trailer.proof.json", original);
+        assert.equal(fromOrigin.category, "FUSED_FROM_ORIGIN");
+        assert.equal(fromOrigin.statements.length, 2);
+        assert.match(fromOrigin.statements[0], /supplied original rebuilds the committed fused artifact byte for byte/);
+        const bare = await run("produced-bare.proof.json", bytes("produced-bare.json"));
+        assert.equal(bare.statements.length, 1);
+        assert.equal(bare.originDigestB64, null);
+    });
+    test("a fused file committed under a different slot is INVALID_SLOT_COMMITMENT, never RECORDED", async () => {
+        const r = await run("wrong-slot.proof.json", bytes("fused-wrong-slot.bin"));
+        assert.equal(r.category, "INVALID_SLOT_COMMITMENT");
+        assert.equal(r.proof.valid, true, "the underlying proof is sound; only the commitment is wrong");
+        assert.match(r.reason, /does not match the proof's slot record/);
+    });
+    test("an unregistered placement id is UNDETERMINED_PLACEMENT", async () => {
+        const r = await run("unregistered.proof.json", bytes("fused-unregistered.bin"));
+        assert.equal(r.category, "UNDETERMINED_PLACEMENT");
+        assert.match(r.reason, /xmp\/9/);
+    });
+    test("a manifest origin hint that contradicts the origin inside the bytes is INVALID_ORIGIN_ATTRIBUTION", async () => {
+        // The signed attribution of the undeclared fixture names no origin, so the
+        // Frame's manifest supplies the hint. Trailer bytes carry the original as
+        // their prefix, and the hint (the PNG) contradicts what the bytes say.
+        const frameText = JSON.stringify({
+            type: "bitgraph-fuse/1",
+            manifest: { placement: "trailer/1", origin: { algorithm: "sha256", digest: Buffer.from(sha256(png)).toString("hex") }, artifact: { algorithm: "sha256", digest: Buffer.from(sha256(bytes("fused-trailer-undeclared.bin"))).toString("hex") }, fusedFile: null },
+            proof: proofOf("trailer-undeclared.proof.json"),
+        });
+        const r = await run("trailer-undeclared.proof.json", bytes("fused-trailer-undeclared.bin"), { frame: frameText });
+        assert.equal(r.category, "INVALID_ORIGIN_ATTRIBUTION");
+        assert.equal(r.marker?.source, "attribution", "the proof itself is signed fused");
+        assert.equal(r.marker?.originSource, "manifest", "the contradicted origin came from the manifest");
+        assert.match(r.reason, /manifest/);
+    });
+    test("a manifest marker that agrees with the bytes verifies FUSED_DIRECT", async () => {
+        const r = await run("trailer-undeclared.proof.json", bytes("fused-trailer-undeclared.bin"), {
+            frame: { type: "bitgraph-fuse/1", manifest: { placement: "trailer/1", origin: { algorithm: "sha256", digest: Buffer.from(sha256(original)).toString("hex") }, artifact: { algorithm: "sha256", digest: "00".repeat(32) }, fusedFile: null }, proof: proofOf("trailer-undeclared.proof.json") },
+        });
+        assert.equal(r.category, "FUSED_DIRECT");
+        assert.equal(r.statements.length, 2);
+    });
+});
+describe("path 4: the file is the original", () => {
+    test("trailer/1: the original alone rebuilds and verifies FUSED_FROM_ORIGIN", async () => {
+        const r = await run("trailer.proof.json", original);
+        assert.equal(r.category, "FUSED_FROM_ORIGIN", r.reason ?? "");
+        assert.equal(r.placement, "trailer/1");
+        assert.equal(r.originDigestB64, bytesToBase64(sha256(original)));
+        assert.equal(r.statements.length, 2);
+    });
+    test("container/1: the PNG alone rebuilds the archive", async () => {
+        const r = await run("container.proof.json", png);
+        assert.equal(r.category, "FUSED_FROM_ORIGIN", r.reason ?? "");
+        assert.equal(r.placement, "container/1");
+    });
+    test("produced/1 names a source but is not rebuildable from it: RECONSTRUCTION_MISMATCH", async () => {
+        const r = await run("produced-origin.proof.json", original);
+        assert.equal(r.category, "RECONSTRUCTION_MISMATCH");
+        assert.equal(r.placement, "produced/1");
+    });
+    test("a manifest origin hint on a signed fused proof lets the original rebuild", async () => {
+        const r = await run("trailer-undeclared.proof.json", original, {
+            frame: { type: "bitgraph-fuse/1", manifest: { placement: "trailer/1", origin: { algorithm: "sha256", digest: Buffer.from(sha256(original)).toString("hex") }, artifact: { algorithm: "sha256", digest: "00".repeat(32) }, fusedFile: null }, proof: proofOf("trailer-undeclared.proof.json") },
+        });
+        assert.equal(r.category, "FUSED_FROM_ORIGIN");
+        assert.equal(r.placement, "trailer/1");
+        assert.equal(r.marker?.originSource, "manifest");
+    });
+    test("an undeclared placement resolves through the registry in fixed order and reports the match", async () => {
+        // A proof whose signed attribution has no title cannot be minted through the
+        // parent (it requires one), so undeclared placement arrives only through a
+        // Frame: strip the title here to exercise the registry scan on both paths.
+        const p = structuredClone(proofOf("trailer-undeclared.proof.json"));
+        // The title is signed; removing it breaks the signature, so instead present a
+        // Frame with no placement and rely on the signed marker having one. To reach
+        // the scan we need BOTH undeclared, which only a hypothetical name-only
+        // attribution gives; construct that case by verifying against a Frame whose
+        // proof is name-only and whose signature we re-establish is impossible here,
+        // so exercise the scan through the registry helper directly instead.
+        const frame = { type: "bitgraph-fuse/1", manifest: { origin: { algorithm: "sha256", digest: Buffer.from(sha256(original)).toString("hex") }, artifact: { algorithm: "sha256", digest: "00".repeat(32) }, fusedFile: null }, proof: p };
+        const r = await run("trailer-undeclared.proof.json", original, { frame });
+        // The signed title (trailer/1) still declares the placement; the scan is not reached.
+        assert.equal(r.category, "FUSED_FROM_ORIGIN");
+        assert.equal(r.placement, "trailer/1");
+    });
+    test("an unsigned manifest with a FALSE origin is RECONSTRUCTION_MISMATCH: reconstruction makes the hint self-proving", async () => {
+        // The manifest claims the PNG is the origin of the undeclared trailer fixture. The
+        // PNG's hash matches the hint, so path 4 runs, and rebuilding from the PNG cannot
+        // reproduce the signed artifact digest.
+        const r = await run("trailer-undeclared.proof.json", png, {
+            frame: { type: "bitgraph-fuse/1", manifest: { placement: "trailer/1", origin: { algorithm: "sha256", digest: Buffer.from(sha256(png)).toString("hex") }, artifact: { algorithm: "sha256", digest: "00".repeat(32) }, fusedFile: null }, proof: proofOf("trailer-undeclared.proof.json") },
+        });
+        assert.equal(r.category, "RECONSTRUCTION_MISMATCH");
+        assert.equal(r.marker?.source, "attribution", "the proof is signed fused");
+        assert.equal(r.marker?.originSource, "manifest", "the false origin was the manifest's hint");
+    });
+    test("an unregistered declared placement cannot rebuild: UNDETERMINED_PLACEMENT", async () => {
+        const r = await run("unregistered.proof.json", original);
+        assert.equal(r.category, "UNDETERMINED_PLACEMENT");
+    });
+    test("the wrong-slot fixture from its original: rebuilt bytes carry the proof's own commitment, so the hash differs", async () => {
+        const r = await run("wrong-slot.proof.json", original);
+        assert.equal(r.category, "RECONSTRUCTION_MISMATCH");
+    });
+});
+describe("path 5 and the underlying proof", () => {
+    test("a file matching neither digest is NO_MATCH", async () => {
+        for (const name of ["recorded.proof.json", "trailer.proof.json", "produced-bare.proof.json"]) {
+            const r = await run(name, unrelated);
+            assert.equal(r.category, "NO_MATCH", name);
+        }
+        // The fused bytes of one fixture against another fixture's proof: also NO_MATCH.
+        assert.equal((await run("container.proof.json", bytes("fused-trailer.bin"))).category, "NO_MATCH");
+    });
+    test("tampering with the nested proof is INVALID_UNDERLYING_PROOF and never downgrades", async () => {
+        const proof = proofOf("trailer.proof.json");
+        const cases = [
+            ["counter", (p) => { p.commit.counter = String(Number(p.commit.counter) + 1); }],
+            ["attribution.message (origin)", (p) => { p.attribution.message = bytesToBase64(sha256(png)); }],
+            ["attribution.title (placement)", (p) => { p.attribution.title = "container/1"; }],
+            ["artifact digest", (p) => { p.artifact.digestB64 = bytesToBase64(sha256(unrelated)); }],
+            ["slot record nonce", (p) => { p.slotAllocation.nonceB64 = bytesToBase64(new Uint8Array(32)); }],
+            ["signature", (p) => { p.signer.signatureB64 = bytesToBase64(new Uint8Array(64)); }],
+        ];
+        for (const [label, mutate] of cases) {
+            const p = structuredClone(proof);
+            mutate(p);
+            resetEpochLinkState();
+            const r = await verifyFuse({ proof: p, bytes: bytes("fused-trailer.bin") });
+            assert.equal(r.category, "INVALID_UNDERLYING_PROOF", label);
+            assert.equal(r.proof.valid, false, label);
+            assert.equal(r.statements.length, 0, label);
+        }
+    });
+    test("tampering with the fused bytes is NO_MATCH (the digest no longer matches)", async () => {
+        const f = bytes("fused-trailer.bin");
+        f[3] = f[3] ^ 1;
+        assert.equal((await run("trailer.proof.json", f)).category, "NO_MATCH");
+        const c = bytes("fused-trailer.bin");
+        c[c.length - 1] = c[c.length - 1] ^ 1; // a commitment byte
+        assert.equal((await run("trailer.proof.json", c)).category, "NO_MATCH");
+    });
+    test("reformatting only the outer Frame changes nothing", async () => {
+        const pretty = text("trailer.bitgraph-fuse.json");
+        const compact = JSON.stringify(JSON.parse(pretty));
+        const a = await run("trailer.proof.json", bytes("fused-trailer.bin"), { frame: pretty });
+        const b = await run("trailer.proof.json", bytes("fused-trailer.bin"), { frame: compact });
+        assert.deepEqual(a, b);
+        assert.equal(a.category, "FUSED_DIRECT");
+    });
+    test("the ordinary verifier still accepts every fixture proof unchanged", async () => {
+        for (const name of ["recorded", "trailer", "container", "produced-origin", "produced-bare", "trailer-undeclared", "wrong-slot", "unregistered"]) {
+            resetEpochLinkState();
+            const v = await verifyProofIntegrity({ proof: proofOf(`${name}.proof.json`) });
+            assert.equal(v.valid, true, `${name}: ${v.reason ?? ""}`);
+        }
+    });
+    test("the span policy reports separately and never changes the category", async () => {
+        const r = await run("trailer.proof.json", bytes("fused-trailer.bin"), { maxPositions: 0 });
+        assert.equal(r.category, "FUSED_DIRECT");
+        assert.equal(r.policy.spanExceeded, true);
+        assert.equal(r.policy.maxPositions, "0");
+        const ok = await run("trailer.proof.json", bytes("fused-trailer.bin"), { maxPositions: 1_000_000 });
+        assert.equal(ok.policy.spanExceeded, false);
+    });
+    test("a trust policy still applies to the underlying proof", async () => {
+        const r = await run("trailer.proof.json", bytes("fused-trailer.bin"), { trustAnchors: { allowedMeasurements: ["00".repeat(48)] } });
+        assert.equal(r.category, "INVALID_UNDERLYING_PROOF");
+        assert.match(r.reason, /measurement/i);
+    });
+});
+describe("strict ordering (spec 12.2)", () => {
+    test("recorded A, then fused B allocated after A committed: B assembled after A", () => {
+        const a = proofOf("recorded.proof.json");
+        const b = proofOf("trailer.proof.json");
+        assert.equal(assembledAfterCommit(a, b), true);
+    });
+    test("slot held across an ordinary commit: the strict rule does not claim B after A", () => {
+        const a = proofOf("order-held.proof.json");
+        const b = proofOf("order-fused-during-hold.proof.json");
+        assert.ok(BigInt(b.commit.slotCounter) < BigInt(a.commit.counter), "fixture: B's slot precedes A's commit");
+        assert.ok(BigInt(a.commit.counter) < BigInt(b.commit.counter), "fixture: A committed before B");
+        assert.equal(assembledAfterCommit(a, b), false);
+    });
+    test("incomparable proofs answer null", () => {
+        const a = proofOf("recorded.proof.json");
+        const b = structuredClone(proofOf("trailer.proof.json"));
+        b.commit.epochId = bytesToBase64(new Uint8Array(32).fill(5));
+        assert.equal(assembledAfterCommit(a, b), null);
+        const c = structuredClone(proofOf("trailer.proof.json"));
+        c.signer.publicKeyB64 = bytesToBase64(new Uint8Array(32).fill(6));
+        assert.equal(assembledAfterCommit(a, c), null);
+    });
+});
+//# sourceMappingURL=fuse-verify.test.js.map

package/dist/__tests__/fuse-verify.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fuse-verify.test.js","sourceRoot":"","sources":["../../src/__tests__/fuse-verify.test.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAG1I,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,oCAAoC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1F,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;AACzE,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,GAAG,IAAI,EAAE,MAAM,CAAC,CAAkB,CAAC;AAChG,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAEhE,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;AACvC,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;AAC/B,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAEvE,KAAK,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAgB,EAAE,QAAmD,EAAE;IAC3G,mBAAmB,EAAE,CAAC;IACtB,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,EAAE,uCAAuC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI;QAC9C,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,WAAW,CAAC;QACxD,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,aAAa,CAAC;QAC9D,CAAC,4BAA4B,EAAE,sBAAsB,EAAE,YAAY,CAAC;QACpE,CAAC,0BAA0B,EAAE,oBAAoB,EAAE,YAAY,CAAC;KACxD,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,SAAS,mCAAmC,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YAC9C,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAK,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,wFAAwF,CAAC,CAAC;YAC7H,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,gHAAgH,EAAE,KAAK,IAAI,EAAE;QAChI,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,EAAE,8CAA8C,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,EAAE,sCAAsC,CAAC,CAAC;QAC5E,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,EAAE,mBAAmB,EAAE,6CAA6C,CAAC,CAAC;QAC/G,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAE,EAAE,uEAAuE,CAAC,CAAC;QACjH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,6DAA6D,CAAC,CAAC;QACjG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAO,EAAE,wCAAwC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,yBAAyB,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAO,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mGAAmG,EAAE,KAAK,IAAI,EAAE;QACnH,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/B,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YAC/P,KAAK,EAAE,OAAO,CAAC,+BAA+B,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,8BAA8B,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAClH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,kCAAkC,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,gDAAgD,CAAC,CAAC;QACnG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAO,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,8BAA8B,CAAC,EAAE;YAC1F,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,+BAA+B,CAAC,EAAE;SAC/R,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,4BAA4B,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,+BAA+B,EAAE,QAAQ,EAAE;YAC7D,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,+BAA+B,CAAC,EAAE;SAC/R,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC5G,6EAA6E;QAC7E,2EAA2E;QAC3E,2EAA2E;QAC3E,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,CAAC;QACpE,8EAA8E;QAC9E,6EAA6E;QAC7E,wEAAwE;QACxE,4EAA4E;QAC5E,6EAA6E;QAC7E,qEAAqE;QACrE,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACvO,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,+BAA+B,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,sFAAsF;QACtF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iHAAiH,EAAE,KAAK,IAAI,EAAE;QACjI,mFAAmF;QACnF,kFAAkF;QAClF,wCAAwC;QACxC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACxD,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,+BAA+B,CAAC,EAAE;SAC1R,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,2BAA2B,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,0CAA0C,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+GAA+G,EAAE,KAAK,IAAI,EAAE;QAC/H,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC5D,KAAK,MAAM,IAAI,IAAI,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,0BAA0B,CAAC,EAAE,CAAC;YAC7F,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;QACD,iFAAiF;QACjF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,KAAK,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAgD;YACzD,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,CAAC,8BAA8B,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,WAAY,CAAC,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjG,CAAC,+BAA+B,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,WAAY,CAAC,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YACnF,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,cAAe,CAAC,QAAQ,GAAG,aAAa,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,aAAa,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACrF,CAAC;QACF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,CAAC,CAAC,CAAC;YACV,mBAAmB,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,oBAAoB;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACnF,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;YAChJ,mBAAmB,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QACpG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,mBAAmB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAO,EAAE,cAAc,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACzF,MAAM,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAY,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAQ,CAAC,EAAE,uCAAuC,CAAC,CAAC;QAC9G,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAQ,CAAC,EAAE,+BAA+B,CAAC,CAAC;QAClG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,aAAa,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/fuse-cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=fuse-cli.d.ts.map

package/dist/fuse-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fuse-cli.d.ts","sourceRoot":"","sources":["../src/fuse-cli.ts"],"names":[],"mappings":""}

package/dist/fuse-cli.js

@@ -0,0 +1,210 @@
+#!/usr/bin/env node
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+/**
+ * bitgraph-fuse: the internal harness (spec 9.2), as a command rather than a
+ * page. Exercises Forms A, B and C end to end through fuse(), writes the
+ * Frame (and the fused bytes when they must be kept), and prints the bounded
+ * copy of spec 9.3. `check` runs verifyFuse over a Frame (or bare proof)
+ * and a file, so both verification paths can be exercised from a shell.
+ *
+ * Not a product surface. The site has no /fuse page: a page would make the
+ * website build depend on packages that are not published, which is a deploy
+ * hazard; this command needs nothing but the repository.
+ *
+ * The raw nonce is never printed. After commit it is public inside the proof.
+ */
+import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { basename, extname, join, resolve } from "node:path";
+import { sha256 } from "@noble/hashes/sha256";
+import { parseFrame, verifyFuse } from "@mikeargento/bitgraph-verify";
+import { fuse, builderFor, FuseError } from "./fuse.js";
+const USAGE = `bitgraph-fuse: BitGraph producer harness (profile bitgraph-fuse/1, working name)
+
+  bitgraph-fuse fuse <file> --placement trailer/1|container/1 [options]
+      Form A or B over an existing file. The file is never modified.
+  bitgraph-fuse produce [--origin <file>] [options]
+      Form C: a canonical payload naming an optional source.
+  bitgraph-fuse check <frame-or-proof.json> <file> [--max-positions N]
+      Verify a Frame (or bare proof) against the fused bytes or the original.
+
+Options for fuse and produce:
+  --out <dir>            where to write the Frame and fused bytes (default: .)
+  --keep                 also write the fused bytes for byte-exact placements
+  --base-url <url>       commit surface (default https://bitgraph.ing)
+  --allocate-path <p>    default /api/fuse/allocate (parent-direct: /allocate-slot)
+  --commit-path <p>      default /api/fuse/commit   (parent-direct: /commit)
+  --api-key <key>        Authorization: Bearer <key>
+
+Exit codes: 0 fused/verified, 1 refused or contradicted, 2 undetermined, 64 usage.
+`;
+/** The bounded copy of spec 9.3, verbatim. */
+const COPY_ORIGINAL = "Original recorded\nThese exact original bytes existed no later than the commit.";
+const COPY_FUSED = "Fused artifact created\nThese bytes were assembled after their slot allocation and committed at this position.";
+function parseArgs(argv) {
+    const [command = "", ...rest] = argv;
+    const positional = [];
+    const flags = new Map();
+    for (let i = 0; i < rest.length; i++) {
+        const a = rest[i];
+        if (a.startsWith("--")) {
+            const key = a.slice(2);
+            const next = rest[i + 1];
+            if (next !== undefined && !next.startsWith("--") && key !== "keep") {
+                flags.set(key, next);
+                i++;
+            }
+            else
+                flags.set(key, true);
+        }
+        else
+            positional.push(a);
+    }
+    return { command, positional, flags };
+}
+function sanitize(name) {
+    return name.replace(/[\x00-\x1f\x7f/]/g, " ").trim() || "artifact";
+}
+function transportFrom(flags) {
+    const t = {};
+    const s = (k) => { const v = flags.get(k); return typeof v === "string" ? v : undefined; };
+    const baseUrl = s("base-url");
+    if (baseUrl)
+        t.baseUrl = baseUrl;
+    const allocatePath = s("allocate-path");
+    if (allocatePath)
+        t.allocatePath = allocatePath;
+    const commitPath = s("commit-path");
+    if (commitPath)
+        t.commitPath = commitPath;
+    const apiKey = s("api-key");
+    if (apiKey)
+        t.apiKey = apiKey;
+    return t;
+}
+async function writeOutputs(outDir, label, frame, fusedName, fused) {
+    await mkdir(outDir, { recursive: true });
+    const written = [];
+    const framePath = join(outDir, `${label}.bitgraph-fuse.json`);
+    await writeFile(framePath, JSON.stringify(frame, null, 2) + "\n");
+    written.push(framePath);
+    if (fused !== undefined && fusedName !== null) {
+        const p = join(outDir, fusedName);
+        await writeFile(p, fused);
+        written.push(p);
+    }
+    return written;
+}
+async function runFuse(args) {
+    const file = args.positional[0];
+    const placement = args.flags.get("placement");
+    if (file === undefined || (placement !== "trailer/1" && placement !== "container/1")) {
+        process.stderr.write(USAGE);
+        return 64;
+    }
+    const original = new Uint8Array(await readFile(resolve(file)));
+    const label = sanitize(basename(file));
+    const ext = placement === "trailer/1" ? extname(label) : ".tar";
+    const fusedName = `${label.slice(0, label.length - extname(label).length)}.fused${ext}`;
+    const keep = args.flags.get("keep") === true;
+    const r = await fuse(builderFor(placement, original), { placement: placement, original, fusedFile: fusedName, keepFused: keep, transport: transportFrom(args.flags) });
+    const outDir = resolve(typeof args.flags.get("out") === "string" ? args.flags.get("out") : ".");
+    const written = await writeOutputs(outDir, label, r.frame, keep ? fusedName : null, r.fusedBytes);
+    report(r.proof, r.verification.category, r.recovered, true);
+    process.stdout.write(`\nwrote:\n${written.map((w) => "  " + w).join("\n")}\n`);
+    if (!keep)
+        process.stdout.write(`\nThe fused bytes were not kept (${placement} is byte-exact: any verifier rebuilds them from the original and the proof). Pass --keep to write them.\n`);
+    return 0;
+}
+async function runProduce(args) {
+    const originPath = args.flags.get("origin");
+    const originDigest = typeof originPath === "string" ? sha256(new Uint8Array(await readFile(resolve(originPath)))) : undefined;
+    const r = await fuse(builderFor("produced/1"), { placement: "produced/1", ...(originDigest !== undefined ? { originDigest } : {}), fusedFile: "produced.json", transport: transportFrom(args.flags) });
+    const outDir = resolve(typeof args.flags.get("out") === "string" ? args.flags.get("out") : ".");
+    const written = await writeOutputs(outDir, "produced", r.frame, "produced.json", r.fusedBytes);
+    report(r.proof, r.verification.category, r.recovered, originDigest !== undefined);
+    process.stdout.write(`\nwrote:\n${written.map((w) => "  " + w).join("\n")}\n`);
+    return 0;
+}
+function report(proof, category, recovered, hasOrigin) {
+    const c = proof.commit;
+    if (hasOrigin)
+        process.stdout.write(COPY_ORIGINAL + "\n\n");
+    process.stdout.write(COPY_FUSED + "\n\n");
+    process.stdout.write(`verification  ${category}\n`);
+    process.stdout.write(`slot          ${c.slotCounter ?? "?"}\n`);
+    process.stdout.write(`commit        ${c.counter ?? "?"}\n`);
+    process.stdout.write(`epoch         ${c.epochId ?? "?"}\n`);
+    process.stdout.write(`artifact      ${proof.artifact.digestB64}\n`);
+    if (proof.attribution?.message)
+        process.stdout.write(`origin        ${proof.attribution.message}\n`);
+    if (recovered)
+        process.stdout.write(`note          the commit response was lost; the proof was read back by digest and matched on the held slot\n`);
+}
+async function runCheck(args) {
+    const [frameArg, fileArg] = args.positional;
+    if (frameArg === undefined || fileArg === undefined) {
+        process.stderr.write(USAGE);
+        return 64;
+    }
+    const text = await readFile(resolve(frameArg), "utf8");
+    const frame = parseFrame(text);
+    let proof;
+    if (frame !== null)
+        proof = frame.proof;
+    else {
+        const parsed = JSON.parse(text);
+        if (parsed?.version !== "bitgraph/1") {
+            process.stderr.write("not a Frame and not a bitgraph/1 proof\n");
+            return 64;
+        }
+        proof = parsed;
+    }
+    const bytes = new Uint8Array(await readFile(resolve(fileArg)));
+    const max = args.flags.get("max-positions");
+    const r = await verifyFuse({ proof, bytes, frame, ...(typeof max === "string" ? { maxPositions: BigInt(max) } : {}) });
+    process.stdout.write(`category      ${r.category}\n`);
+    process.stdout.write(`proof         ${r.proof.valid ? "valid" : `invalid: ${r.proof.reason ?? ""}`}\n`);
+    process.stdout.write(`file digest   ${r.fileDigestB64}\n`);
+    process.stdout.write(`artifact      ${r.artifactDigestB64}\n`);
+    if (r.originDigestB64)
+        process.stdout.write(`origin        ${r.originDigestB64}\n`);
+    if (r.placement)
+        process.stdout.write(`placement     ${r.placement}\n`);
+    if (r.span)
+        process.stdout.write(`span          slot ${r.span.slotCounter} to commit ${r.span.commitCounter} (${r.span.positions} positions)\n`);
+    if (r.policy.maxPositions !== null)
+        process.stdout.write(`span policy   ${r.policy.spanExceeded ? "EXCEEDED" : "within"} ${r.policy.maxPositions} positions\n`);
+    if (r.reason)
+        process.stdout.write(`reason        ${r.reason}\n`);
+    for (const s of r.statements)
+        process.stdout.write(`\n${s}\n`);
+    process.stdout.write(`\nfloor         computed by the Player from anchors in a bundle (bitgraph-play check); not available here\n`);
+    if (r.category === "RECORDED" || r.category === "FUSED_DIRECT" || r.category === "FUSED_FROM_ORIGIN")
+        return r.policy.spanExceeded ? 1 : 0;
+    if (r.category === "UNDETERMINED_PLACEMENT" || r.category === "NO_MATCH")
+        return 2;
+    return 1;
+}
+async function main() {
+    const args = parseArgs(process.argv.slice(2));
+    try {
+        switch (args.command) {
+            case "fuse": return await runFuse(args);
+            case "produce": return await runProduce(args);
+            case "check": return await runCheck(args);
+            default:
+                process.stderr.write(USAGE);
+                return 64;
+        }
+    }
+    catch (err) {
+        if (err instanceof FuseError) {
+            process.stderr.write(`no fused proof was completed (${err.code}${err.status !== null ? `, ${err.status}` : ""}): ${err.message}\n`);
+            return err.code === "tee-restarting" ? 2 : 1;
+        }
+        process.stderr.write(`error: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
+}
+main().then((code) => { process.exitCode = code; });
+//# sourceMappingURL=fuse-cli.js.map

package/dist/fuse-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fuse-cli.js","sourceRoot":"","sources":["../src/fuse-cli.ts"],"names":[],"mappings":";AACA,gEAAgE;AAEhE;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,8BAA8B,CAAC;AAErF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGxD,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;CAkBb,CAAC;AAEF,8CAA8C;AAC9C,MAAM,aAAa,GAAG,iFAAiF,CAAC;AACxG,MAAM,UAAU,GAAG,gHAAgH,CAAC;AAIpI,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;YAAC,CAAC;;gBAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/H,CAAC;;YAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,KAAiC;IACtD,MAAM,CAAC,GAAkB,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAAC,IAAI,OAAO;QAAE,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;IAChE,MAAM,YAAY,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;IAAC,IAAI,YAAY;QAAE,CAAC,CAAC,YAAY,GAAG,YAAY,CAAC;IACzF,MAAM,UAAU,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;IAAC,IAAI,UAAU;QAAE,CAAC,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/E,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAAC,IAAI,MAAM;QAAE,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa,EAAE,KAAc,EAAE,SAAwB,EAAE,KAA6B;IAChI,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC9D,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAU;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,aAAa,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IACjI,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;IACxF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAwB,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,SAAwB,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrM,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAClG,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,SAAS,2GAA2G,CAAC,CAAC;IAC1L,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAU;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9H,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvM,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/F,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC;IAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,KAAoB,EAAE,QAAgB,EAAE,SAAkB,EAAE,SAAkB;IAC5F,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,IAAI,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,QAAQ,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,WAAW,IAAI,GAAG,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,WAAW,EAAE,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC;IACrG,IAAI,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8GAA8G,CAAC,CAAC;AACtJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAU;IAChC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAChG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAoB,CAAC;IACzB,IAAI,KAAK,KAAK,IAAI;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;SACnC,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC;QACzD,IAAI,MAAM,EAAE,OAAO,KAAK,YAAY,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QACtH,KAAK,GAAG,MAAkC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACxG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,eAAe;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,WAAW,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,eAAe,CAAC,CAAC;IACjJ,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,cAAc,CAAC,CAAC;IAChK,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6GAA6G,CAAC,CAAC;IACpI,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,CAAC,QAAQ,KAAK,mBAAmB;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3I,IAAI,CAAC,CAAC,QAAQ,KAAK,wBAAwB,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IACnF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YAC9C,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1C;gBAAS,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACpI,OAAO,GAAG,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/fuse.d.ts

@@ -0,0 +1,75 @@
+import type { BitGraphProof, FuseFrame, PlacementId, SlotAllocation, FuseVerifyResult } from "@mikeargento/bitgraph-verify";
+export type { FuseFrame, PlacementId, SlotAllocation, BitGraphProof } from "@mikeargento/bitgraph-verify";
+/** What the builder receives. The raw nonce is deliberately absent. */
+export interface BuilderInput {
+    /** 32-byte commitment to the signed slot record. Write this into the artifact. */
+    commitment: Uint8Array;
+    commitmentHex: string;
+    /** The origin digest, when the fused artifact names a source. */
+    originDigest?: Uint8Array;
+    /** The signed slot record, for producers that want to embed its fields. Contains the nonce: do not copy it into the artifact. */
+    slot: SlotAllocation;
+}
+/** Produces the finished (fused) bytes from the commitment. */
+export type FuseBuilder = (input: BuilderInput) => Uint8Array | Promise<Uint8Array>;
+export interface FuseTransport {
+    /** Origin of the commit surface. Default "https://bitgraph.ing". */
+    baseUrl?: string;
+    /** Default "/api/fuse/allocate". A parent-direct licensee uses "/allocate-slot". */
+    allocatePath?: string;
+    /** Default "/api/fuse/commit". A parent-direct licensee uses "/commit". */
+    commitPath?: string;
+    /** Default "/api/proofs/": the by-digest lookup used to recover a lost commit response. */
+    lookupPath?: string;
+    apiKey?: string;
+    fetch?: typeof fetch;
+    /** Per-request timeout. Default 30 s. */
+    timeoutMs?: number;
+    /** Lost-response recovery: how many by-digest reads to attempt, and the wait between them. */
+    recoveryAttempts?: number;
+    recoveryDelayMs?: number;
+}
+export interface FuseOptions {
+    /** A registered placement id: "trailer/1", "container/1", or "produced/1". */
+    placement: PlacementId;
+    /** Forms A and B: the original bytes. Never modified. Absent for Form C. */
+    original?: Uint8Array;
+    /** Form C only: a source the produced artifact references, if any. */
+    originDigest?: Uint8Array;
+    /** Filename recorded in the Frame manifest (advisory). */
+    fusedFile?: string | null;
+    /** Return the fused bytes in the result. Default: true for placements that are not byte-exact, false otherwise. */
+    keepFused?: boolean;
+    /** Actor-bound commits: an agency envelope passed through untouched. */
+    agency?: unknown;
+    transport?: FuseTransport;
+}
+export interface FuseResult {
+    frame: FuseFrame;
+    proof: BitGraphProof;
+    artifactDigestB64: string;
+    originDigestB64: string | null;
+    /** Present when keepFused is true (or defaulted to true). */
+    fusedBytes?: Uint8Array;
+    /** True when the commit response was lost and the proof was read back by digest. */
+    recovered: boolean;
+    /** The local verification of the returned proof against the fused bytes. Always FUSED_DIRECT on success. */
+    verification: FuseVerifyResult;
+}
+export type FuseErrorCode = "bad-placement" | "bad-input" | "allocate-failed" | "builder-failed" | "commitment-missing" | "commit-refused" | "slot-unavailable" | "tee-restarting" | "network" | "slot-mismatch" | "verification-failed" | "transport";
+export declare class FuseError extends Error {
+    readonly code: FuseErrorCode;
+    readonly status: number | null;
+    constructor(code: FuseErrorCode, message: string, status?: number | null);
+}
+/** A builder for a registered placement over an existing original (Forms A and B), or for a bare Form C payload. */
+export declare function builderFor(placement: PlacementId, original?: Uint8Array): FuseBuilder;
+/**
+ * Allocate, fuse, hash, fill. Returns the Frame with the unchanged proof, or
+ * throws a FuseError; it never returns an ordinary recording in place of a
+ * fused one.
+ */
+export declare function fuse(builder: FuseBuilder, options: FuseOptions): Promise<FuseResult>;
+/** Decode a standard-base64 digest, for callers holding one as text. */
+export declare function digestFromBase64(b64: string): Uint8Array;
+//# sourceMappingURL=fuse.d.ts.map

package/dist/fuse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fuse.d.ts","sourceRoot":"","sources":["../src/fuse.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAE5H,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE1G,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,iIAAiI;IACjI,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,+DAA+D;AAC/D,MAAM,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEpF,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,SAAS,EAAE,WAAW,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,sEAAsE;IACtE,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mHAAmH;IACnH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,6DAA6D;IAC7D,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,oFAAoF;IACpF,SAAS,EAAE,OAAO,CAAC;IACnB,4GAA4G;IAC5G,YAAY,EAAE,gBAAgB,CAAC;CAChC;AAED,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,WAAW,GACX,iBAAiB,GACjB,gBAAgB,GAChB,oBAAoB,GACpB,gBAAgB,GAChB,kBAAkB,GAClB,gBAAgB,GAChB,SAAS,GACT,eAAe,GACf,qBAAqB,GACrB,WAAW,CAAC;AAEhB,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,IAAW;CAM/E;AAED,oHAAoH;AACpH,wBAAgB,UAAU,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,WAAW,CAOrF;AAkGD;;;;GAIG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA4G1F;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAIxD"}