@mikeargento/bitgraph 1.9.1 → 1.10.0

package/src/fuse-cli.ts

@@ -21,7 +21,7 @@
 import { readFile, writeFile, mkdir } from "node:fs/promises";
 import { basename, extname, join, resolve } from "node:path";
 import { sha256 } from "@noble/hashes/sha256";
-import { parseFrame, verifyFuse, verifyFuseMember, bytesToBase64 } from "@mikeargento/bitgraph-verify";
+import { parseFrame, verifyFuse, verifyFuseMember, bytesToBase64, isFuseMarkerName } from "@mikeargento/bitgraph-verify";
 import type { BitGraphProof, PlacementId, FuseVerifyResult, FuseMemberResult } from "@mikeargento/bitgraph-verify";
 import { fuse, fuseSet, builderFor, placementForBytes, fusedNamesFor, FuseError } from "./fuse.js";
 import type { FuseTransport } from "./fuse.js";
@@ -219,7 +219,7 @@ async function runCheck(args: Args): Promise<number> {
   const policy = typeof max === "string" ? { maxPositions: BigInt(max) } : {};
   // A set proof and a file that is not its manifest: the member verifier answers.
   const a = proof.attribution;
-  if (a?.name === "bitgraph-fuse/1" && a.title === "set/1" && bytesToBase64(sha256(bytes)) !== proof.artifact.digestB64) {
+  if (isFuseMarkerName(a?.name) && a?.title === "set/1" && bytesToBase64(sha256(bytes)) !== proof.artifact.digestB64) {
     const manifestArg = args.flags.get("manifest");
     const manifest = typeof manifestArg === "string" ? new Uint8Array(await readFile(resolve(manifestArg))) : undefined;
     const r = await verifyFuseMember({ proof, bytes, ...(manifest !== undefined ? { manifest } : {}), ...policy });

package/src/fuse.ts

@@ -51,6 +51,7 @@ import {
   bytesToBase64,
   bytesToHex,
   computeSlotCommitment,
+  producerCommitment,
   computeSlotRecordHash,
   fuseAttribution,
   getPlacement,
@@ -86,11 +87,22 @@ export async function digest(bytes: Uint8Array): Promise<Uint8Array> {
 
 export type { FuseFrame, PlacementId, SlotAllocation, BitGraphProof, SetManifest, FuseMemberResult, FuseVerifyResult } from "@mikeargento/bitgraph-verify";
 
+/** The floor anchor an enclave v9 allocation hands back: the one it signs at commit as commit.slotAnchor. */
+export interface AnchorMark {
+  counter: string;
+  blockNumber: number;
+  blockHash: string;
+}
+
 /** What the builder receives. The raw nonce is deliberately absent. */
 export interface BuilderInput {
-  /** 32-byte commitment to the signed slot record. Write this into the artifact. */
+  /** 32-byte commitment to the signed slot record (bitgraph-fuse/2 also binds the floor block). Write this into the artifact. */
   commitment: Uint8Array;
   commitmentHex: string;
+  /** Which commitment this is: 2 when the boundary returned its floor anchor (enclave v9 and later), else 1. */
+  fuseVersion: 1 | 2;
+  /** The floor bound into a fuse/2 commitment, when there is one. */
+  floor?: AnchorMark;
   /** The origin digest, when the fused artifact names a source. */
   originDigest?: Uint8Array;
   /** The signed slot record, for producers that want to embed its fields. Contains the nonce: do not copy it into the artifact. */
@@ -321,8 +333,21 @@ async function recover(
   return null;
 }
 
-/** 1. nonce. The signed slot record from the boundary; it must sit on the anchored chain. */
-async function allocateSlot(t: BoundTransport): Promise<SlotAllocation> {
+function isAnchorMark(x: unknown): x is AnchorMark {
+  if (x === null || typeof x !== "object" || Array.isArray(x)) return false;
+  const a = x as Record<string, unknown>;
+  return typeof a.counter === "string" && /^(0|[1-9][0-9]*)$/.test(a.counter)
+    && typeof a.blockNumber === "number" && Number.isSafeInteger(a.blockNumber) && a.blockNumber >= 0
+    && typeof a.blockHash === "string" && /^0x[0-9a-f]{64}$/.test(a.blockHash);
+}
+
+/**
+ * 1. nonce. The signed slot record from the boundary; it must sit on the
+ * anchored chain. Since enclave v9 the response also carries the floor anchor
+ * the boundary will sign at commit; with it the producer makes a
+ * bitgraph-fuse/2 commitment, without it a fuse/1 one.
+ */
+async function allocateSlot(t: BoundTransport): Promise<{ slot: SlotAllocation; anchor: AnchorMark | null }> {
   const alloc = await request(t, t.allocatePath, { method: "POST", body: {} });
   if (alloc.status === 503 && codeOf(alloc.json) === "tee-restarting") throw new FuseError("tee-restarting", messageOf(alloc.json, "the boundary is restarting"), 503);
   if (alloc.status !== 200) throw new FuseError("allocate-failed", messageOf(alloc.json, `allocation failed (${alloc.status})`), alloc.status);
@@ -330,7 +355,8 @@ async function allocateSlot(t: BoundTransport): Promise<SlotAllocation> {
   const slot = (alloc.json as { slot?: unknown } | null)?.slot;
   if (!isSlotRecord(slot) || slotId !== slot.nonceB64) throw new FuseError("allocate-failed", "the allocation response is not a slot record", alloc.status);
   if (slot.chainId !== "bitgraph:main") throw new FuseError("allocate-failed", "the slot is not on the anchored chain; a fused floor needs bitgraph:main");
-  return slot;
+  const anchorRaw = (alloc.json as { anchor?: unknown } | null)?.anchor;
+  return { slot, anchor: isAnchorMark(anchorRaw) ? anchorRaw : null };
 }
 
 /**
@@ -407,13 +433,13 @@ export async function fuse(builder: FuseBuilder, options: FuseOptions): Promise<
   const originDigestB64 = originDigest !== undefined ? bytesToBase64(originDigest) : null;
 
   // 1. nonce
-  const slot = await allocateSlot(t);
+  const { slot, anchor } = await allocateSlot(t);
 
   // 2. fuse
-  const commitment = computeSlotCommitment(slot);
+  const { commitment, version } = producerCommitment(slot, anchor);
   let fused: Uint8Array;
   try {
-    fused = await builder({ commitment, commitmentHex: bytesToHex(commitment), ...(originDigest !== undefined ? { originDigest } : {}), slot });
+    fused = await builder({ commitment, commitmentHex: bytesToHex(commitment), fuseVersion: version, ...(anchor !== null ? { floor: anchor } : {}), ...(originDigest !== undefined ? { originDigest } : {}), slot });
   } catch (err) {
     throw new FuseError("builder-failed", `the builder threw: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -425,13 +451,15 @@ export async function fuse(builder: FuseBuilder, options: FuseOptions): Promise<
   const artifactDigestB64 = bytesToBase64(artifactDigest);
 
   // 4. fill
-  const attribution = fuseAttribution(placement.id, originDigest);
+  const attribution = fuseAttribution(placement.id, originDigest, version);
   const body: Record<string, unknown> = {
     digests: [{ digestB64: artifactDigestB64, hashAlg: "sha256" }],
     slotId: slot.nonceB64,
     slot,
     chainId: "bitgraph:main",
     attribution,
+    // fuse/2: the boundary checks the bound floor against its ledger before spending the slot.
+    ...(version === 2 ? { anchor } : {}),
   };
   if (options.agency !== undefined) body.agency = options.agency;
   const { proof, recovered } = await commitUnderSlot(t, body, artifactDigestB64, slot);
@@ -482,6 +510,10 @@ export type SetMemberPlacement = "trailer/1" | "container/1" | "container/2";
 
 /** What a hashed member's fused digest is computed for: the held slot and its commitment. */
 export interface FusedDigestInput {
+  /** Which commitment this is: 2 when the boundary returned its floor anchor, else 1. */
+  fuseVersion: 1 | 2;
+  /** The floor bound into a fuse/2 commitment, when there is one. */
+  floor?: AnchorMark;
   commitment: Uint8Array;
   commitmentHex: string;
   slot: SlotAllocation;
@@ -721,7 +753,7 @@ export async function fuseSet(members: readonly FuseSetMember[], options: FuseSe
   const t: BoundTransport = { ...DEFAULTS, ...(options.transport ?? {}) };
 
   // 1. nonce: one slot for the whole set
-  const slot = await allocateSlot(t);
+  const { slot, anchor } = await allocateSlot(t);
 
   // 2. fuse: the commitment once, every member's digest under it. The slot
   //    is held and its TTL is running; a throw here burns it but commits
@@ -729,7 +761,7 @@ export async function fuseSet(members: readonly FuseSetMember[], options: FuseSe
   //    and released in turn, so memory holds one member's bytes at a time.
   //    They are held only for a caller who keeps them or asks the full
   //    verifier to read them.
-  const commitment = computeSlotCommitment(slot);
+  const { commitment, version } = producerCommitment(slot, anchor);
   const commitmentHex = bytesToHex(commitment);
   const fusedBytes: (Uint8Array | null)[] = [];
   const rows: SetMember[] = [];
@@ -741,7 +773,7 @@ export async function fuseSet(members: readonly FuseSetMember[], options: FuseSe
     if (c.kind === "hashed") {
       let d: unknown;
       try {
-        d = await c.fusedDigest!({ commitment, commitmentHex, slot });
+        d = await c.fusedDigest!({ commitment, commitmentHex, fuseVersion: version, ...(anchor !== null ? { floor: anchor } : {}), slot });
       } catch (err) {
         throw new FuseError("builder-failed", `member ${i}: fusedDigest threw: ${err instanceof Error ? err.message : String(err)}; ${expiring}`, null, i);
       }
@@ -766,7 +798,7 @@ export async function fuseSet(members: readonly FuseSetMember[], options: FuseSe
       const builder = c.builder ?? builderFor(c.id, original);
       let fused: Uint8Array;
       try {
-        fused = await builder({ commitment, commitmentHex, originDigest: c.originDigest, slot });
+        fused = await builder({ commitment, commitmentHex, fuseVersion: version, ...(anchor !== null ? { floor: anchor } : {}), originDigest: c.originDigest, slot });
       } catch (err) {
         throw new FuseError("builder-failed", `member ${i}: the builder threw: ${err instanceof Error ? err.message : String(err)}`, null, i);
       }
@@ -817,8 +849,9 @@ export async function fuseSet(members: readonly FuseSetMember[], options: FuseSe
     slotId: slot.nonceB64,
     slot,
     chainId: "bitgraph:main",
-    attribution: fuseAttribution(setKind === "set/1" ? SET_PLACEMENT_ID_LOCAL : SET2_PLACEMENT_ID),
+    attribution: fuseAttribution(setKind === "set/1" ? SET_PLACEMENT_ID_LOCAL : SET2_PLACEMENT_ID, undefined, version),
     metadata: { [SET_METADATA_KEY]: manifest },
+    ...(version === 2 ? { anchor } : {}),
   };
   if (options.agency !== undefined) body.agency = options.agency;
   report("commit", 0, 1);

package/dist/__tests__/audit-anchors.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=audit-anchors.test.d.ts.map

package/dist/__tests__/audit-anchors.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-anchors.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/audit-anchors.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/audit-anchors.test.js

@@ -1,152 +0,0 @@
-// Copyright (c) Argento Computing Inc. All rights reserved. See LICENSE.
-/**
- * Anchor identification tests (G5): the SIGNED attribution.name is the
- * discriminator; unsigned metadata.type is corroboration only, recorded
- * but never trusted; the block number comes only from the signed
- * Etherscan URL; no wall-clock time is ever derived from anything here.
- */
-import { describe, it } from "node:test";
-import * as assert from "node:assert/strict";
-import { identifyAnchors, ingestBundle, verifyObservedProofs, } from "@mikeargento/bitgraph-audit";
-import { makeAnchorProof, makeChainIdProof, makeTempDir, proofJson, writeBundleDir, } from "./audit-fixtures.js";
-const BLOCK_HASH = "0x28ed3639cd705fb8cb2b915c1991e9f808b40e775bc8eb540702942729fec2c0";
-async function ingestAndVerify(files) {
-    const dir = await makeTempDir("bg-audit-anchors-");
-    await writeBundleDir(dir, files);
-    const ingest = await ingestBundle(dir);
-    await verifyObservedProofs(ingest);
-    return ingest;
-}
-describe("audit anchors: identification by signed attribution", () => {
-    it("identifies an anchor by attribution.name and extracts the signed facts", async () => {
-        const anchor = await makeAnchorProof({
-            blockHash: BLOCK_HASH,
-            blockNumber: "24800448",
-            epochId: "EPOCH-A",
-            counter: "4",
-            slotCounter: "3",
-            chainId: "bitgraph:main",
-            metadata: {
-                type: "ethereum-anchor",
-                anchor: { blockNumber: 24800448, blockHash: BLOCK_HASH, blockTime: 1750000000 },
-            },
-        });
-        const user = await makeChainIdProof({ chainId: "bitgraph:main", counter: "6", epochId: "EPOCH-A" });
-        const ingest = await ingestAndVerify({
-            "proofs/anchor.json": proofJson(anchor.proof),
-            "proofs/user.json": proofJson(user.proof),
-        });
-        const result = identifyAnchors(ingest);
-        assert.equal(result.anchors.length, 1);
-        const record = result.anchors[0];
-        assert.equal(record.proofHash, anchor.proofHash);
-        assert.equal(record.epochId, "EPOCH-A");
-        assert.equal(record.chainId, "bitgraph:main");
-        assert.equal(record.counter, "4");
-        assert.equal(record.slotCounter, "3");
-        assert.equal(record.blockHash, BLOCK_HASH);
-        assert.equal(record.blockNumber, "24800448");
-        assert.equal(record.metadataCorroboration, "agrees");
-        // The unsigned metadata carries a blockTime; no time field of any kind
-        // may appear on the record.
-        assert.ok(!("timestamp" in record));
-        assert.ok(!("blockTime" in record));
-        assert.equal(result.findings.length, 0);
-    });
-    it("copies the run verification status onto the record", async () => {
-        const good = await makeAnchorProof({ blockHash: BLOCK_HASH, blockNumber: "1", epochId: "E", counter: "2" });
-        const bad = await makeAnchorProof({ blockHash: BLOCK_HASH.replace("28", "29"), blockNumber: "2", epochId: "E", counter: "4" });
-        // Tamper the signature after signing: identification still works (it
-        // reads the signed body fields), and the failed status is copied.
-        bad.proof.signer.signatureB64 = `AA${bad.proof.signer.signatureB64.slice(2)}`;
-        const ingest = await ingestAndVerify({
-            "proofs/good.json": proofJson(good.proof),
-            "proofs/bad.json": proofJson(bad.proof),
-        });
-        const result = identifyAnchors(ingest);
-        assert.equal(result.anchors.length, 2);
-        const goodRecord = result.anchors.find((a) => a.proofHash === good.proofHash);
-        assert.equal(goodRecord.verificationTier, "integrity");
-        assert.equal(goodRecord.verificationStatus, "artifact-unavailable");
-        const badRecord = result.anchors.find((a) => a.proofHash !== good.proofHash);
-        assert.equal(badRecord.verificationStatus, "failed");
-        assert.ok(badRecord.verificationReason !== undefined);
-    });
-    it("never identifies an anchor from unsigned metadata alone", async () => {
-        const user = await makeChainIdProof({ counter: "2", epochId: "E-META" });
-        user.proof["metadata"] = { type: "ethereum-anchor" };
-        const ingest = await ingestAndVerify({ "proofs/claimant.json": proofJson(user.proof) });
-        const result = identifyAnchors(ingest);
-        assert.equal(result.anchors.length, 0);
-        assert.equal(result.metadataOnlyProofHashes.length, 1);
-        const finding = result.findings.find((f) => f.code === "anchor-metadata-only-claim");
-        assert.ok(finding !== undefined);
-        assert.match(finding.message, /not treated as an anchor/);
-    });
-    it("records disagreement between the signed attribution and unsigned metadata", async () => {
-        const anchor = await makeAnchorProof({
-            blockHash: BLOCK_HASH,
-            blockNumber: "7",
-            epochId: "E-DIS",
-            counter: "2",
-            metadata: { type: "something-else" },
-        });
-        const ingest = await ingestAndVerify({ "proofs/anchor.json": proofJson(anchor.proof) });
-        const result = identifyAnchors(ingest);
-        assert.equal(result.anchors.length, 1, "the signed field governs: still an anchor");
-        assert.equal(result.anchors[0].metadataCorroboration, "disagrees");
-        assert.ok(result.findings.some((f) => f.code === "anchor-metadata-disagreement"));
-    });
-    it("treats absent metadata as absent corroboration, not disagreement", async () => {
-        const anchor = await makeAnchorProof({ blockHash: BLOCK_HASH, blockNumber: "9", epochId: "E-ABS", counter: "2" });
-        const ingest = await ingestAndVerify({ "proofs/anchor.json": proofJson(anchor.proof) });
-        const result = identifyAnchors(ingest);
-        assert.equal(result.anchors[0].metadataCorroboration, "absent");
-        assert.equal(result.findings.filter((f) => f.code === "anchor-metadata-disagreement").length, 0);
-    });
-});
-describe("audit anchors: block number from the signed title URL", () => {
-    it("parses the number only from a strict Etherscan block URL", async () => {
-        const good = await makeAnchorProof({ blockHash: BLOCK_HASH, blockNumber: "24800448", epochId: "E-URL", counter: "2" });
-        const foreign = await makeAnchorProof({
-            blockHash: BLOCK_HASH.replace("28", "30"),
-            title: "https://example.com/block/99",
-            epochId: "E-URL",
-            counter: "4",
-        });
-        const missing = await makeAnchorProof({
-            blockHash: BLOCK_HASH.replace("28", "31"),
-            noTitle: true,
-            epochId: "E-URL",
-            counter: "6",
-        });
-        const ingest = await ingestAndVerify({
-            "proofs/good.json": proofJson(good.proof),
-            "proofs/foreign.json": proofJson(foreign.proof),
-            "proofs/missing.json": proofJson(missing.proof),
-        });
-        const result = identifyAnchors(ingest);
-        const byHash = new Map(result.anchors.map((a) => [a.proofHash, a]));
-        assert.equal(byHash.get(good.proofHash).blockNumber, "24800448");
-        assert.equal(byHash.get(foreign.proofHash).blockNumber, undefined);
-        assert.equal(byHash.get(missing.proofHash).blockNumber, undefined);
-        assert.equal(result.findings.filter((f) => f.code === "anchor-title-unparseable").length, 2);
-    });
-});
-describe("audit anchors: non-anchor proofs are untouched", () => {
-    it("produces no records or findings for ordinary proofs and mutates nothing", async () => {
-        const a = await makeChainIdProof({ counter: "2", epochId: "E-PLAIN" });
-        const b = await makeChainIdProof({ counter: "4", epochId: "E-PLAIN" });
-        const ingest = await ingestAndVerify({
-            "proofs/a.json": proofJson(a.proof),
-            "proofs/b.json": proofJson(b.proof),
-        });
-        const statusesBefore = ingest.proofs.map((p) => p.verification?.status);
-        const result = identifyAnchors(ingest);
-        assert.equal(result.anchors.length, 0);
-        assert.equal(result.metadataOnlyProofHashes.length, 0);
-        assert.equal(result.findings.length, 0);
-        assert.deepEqual(ingest.proofs.map((p) => p.verification?.status), statusesBefore, "identification is read-only");
-    });
-});
-//# sourceMappingURL=audit-anchors.test.js.map

package/dist/__tests__/audit-anchors.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-anchors.test.js","sourceRoot":"","sources":["../../src/__tests__/audit-anchors.test.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EACL,eAAe,EACf,YAAY,EACZ,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,SAAS,EACT,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,MAAM,UAAU,GAAG,oEAAoE,CAAC;AAExF,KAAK,UAAU,eAAe,CAAC,KAA0C;IACvE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnD,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,UAAU;YACvB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,GAAG;YACZ,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE;gBACR,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE;aAChF;SACF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpG,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7C,kBAAkB,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QACrD,uEAAuE;QACvE,4BAA4B;QAC5B,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5G,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/H,qEAAqE;QACrE,kEAAkE;QAClE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,kBAAkB,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YACzC,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAE,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAE,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,KAA4C,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAE7F,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,sBAAsB,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,4BAA4B,CAAC,CAAC;QACrF,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,GAAG;YACZ,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;SACrC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,2CAA2C,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,8BAA8B,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAClH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACvH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;YACzC,KAAK,EAAE,8BAA8B;YACrC,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;YACzC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,kBAAkB,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YACzC,qBAAqB,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/C,qBAAqB,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAE,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;YACnC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,EAChD,cAAc,EACd,6BAA6B,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/audit-anomalies.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=audit-anomalies.test.d.ts.map

package/dist/__tests__/audit-anomalies.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-anomalies.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/audit-anomalies.test.ts"],"names":[],"mappings":""}