@agentguard-run/spend 0.15.7 → 0.15.8

package/README.md

@@ -187,10 +187,70 @@ Each template sets recommended OpenRouter model assignments, capability tier, fa
 
 ## Provider bindings
 
-TypeScript includes native OpenAI, Anthropic, and Bedrock bindings. Streaming usage is settled from provider usage events when available, with local token-estimator fallback when usage is missing. Settlement entries are signed into the same hash chain as enforcement decisions.
+TypeScript includes native OpenAI, Anthropic, and Bedrock bindings. Each wraps a direct provider client in one line, with per-provider cost tables and response-shape handling. Enforcement semantics are identical across all three (and the OpenRouter path): the same policy blocks, downgrades, shadows, or allows a call before any bytes leave the process. Streaming usage is settled from provider usage events when available, with local token-estimator fallback when usage is missing. Settlement entries are signed into the same hash chain as enforcement decisions.
+
+Wrap a direct **OpenAI** client:
+
+```ts
+import OpenAI from 'openai';
+import { withSpendGuard } from '@agentguard-run/spend';
+
+const openai = withSpendGuard(new OpenAI(), { policy, scope: { tenantId: 'acme' } });
+await openai.chat.completions.create({ model: 'gpt-5', messages });
+```
+
+Wrap a direct **Anthropic** client:
+
+```ts
+import Anthropic from '@anthropic-ai/sdk';
+import { withSpendGuardAnthropic } from '@agentguard-run/spend';
+
+const anthropic = withSpendGuardAnthropic(new Anthropic(), { policy, scope: { tenantId: 'acme' } });
+await anthropic.messages.create({ model: 'claude-sonnet-4-6', max_tokens: 1024, messages });
+```
+
+Wrap a direct **Bedrock** runtime client:
+
+```ts
+import { BedrockRuntimeClient } from '@aws-sdk/client-bedrock-runtime';
+import { withSpendGuardBedrock } from '@agentguard-run/spend';
+
+const bedrock = withSpendGuardBedrock(new BedrockRuntimeClient({ region: 'us-east-1' }), { policy, scope: { tenantId: 'acme' } });
+await bedrock.send(new InvokeModelCommand({ modelId: 'anthropic.claude-sonnet-4-v1:0', body }));
+```
+
+Only `InvokeModel` / `InvokeModelWithResponseStream` commands are gated; other Bedrock commands pass through untouched.
 
 Python includes OpenAI, Anthropic, Bedrock, LangChain, CrewAI, and LlamaIndex integration helpers.
 
+## Sample receipts for outreach
+
+Generate a realistic, signed sample receipt for a named flow plus a self-contained, self-verifying HTML page — "exactly what your counterparty would get":
+
+```bash
+agentguard sample --flow x402-payment   # or: refund | agent-purchase
+```
+
+This writes `receipt.json` and `verify.html`. The HTML re-derives the entry hash from canonical JSON (SHA-256) and verifies the Ed25519 signature in-browser via WebCrypto, with NO network calls; where a browser lacks WebCrypto Ed25519 it still checks the hash chain and links to agentguard.run/verify with the receipt prefilled. The signature is real; only the flow parameters are illustrative.
+
+## External timestamp anchoring (opt-in)
+
+Signed receipts prove internal order and integrity, but the signatures are produced in your own environment. Anchoring the chain head's SHA-256 to a public timestamp calendar (OpenTimestamps → Bitcoin) adds an EXTERNAL clock, so "this chain existed no later than <time>" is provable to a third party.
+
+```bash
+AGENTGUARD_ANCHOR=opentimestamps agentguard anchor --tenant my-tenant
+agentguard verify --trace ~/.agentguard/my-tenant/decisions.ndjson
+# → chain head submitted to external timestamp calendar at <time>
+```
+
+Anchoring is OFF by default; nothing changes for existing users. **Zero data plane is preserved: only the 32-byte SHA-256 of the chain head leaves the machine.** A hash reveals nothing about prompts, completions, keys, amounts, or model identity. The proof is stored alongside the ledger at `~/.agentguard/<tenant>/anchor.json` (+ `anchor.ots`).
+
+Note: full Bitcoin-attestation verification requires the `opentimestamps` npm package, which is not yet bundled. Without it, submitted proofs are reported as `pending` (calendar commitment received; external attestation not yet confirmed) — never as a fabricated attested time.
+
+## Completeness: sequence-gap detection
+
+Each signed entry carries a monotonic per-tenant sequence number. `agentguard verify` and the `agentguard serve` integrity badge flag missing sequence numbers as `possible omitted actions: sequence gap at N` — evidence that an action may have been taken around the SDK and not logged, or that a logged entry was deleted. This is detection and reporting only; it never changes spend-cap enforcement.
+
 ## No proxy
 
 AgentGuard Spend is a library, not a gateway. It does not proxy traffic, store prompts, hold provider keys, or host policy state. The signed log lives in your storage.

package/dist/anchor/index.d.ts

@@ -0,0 +1,35 @@
+/**
+ * External timestamp anchoring: public surface + factory.
+ *
+ * Opt-in only. `createAnchorFromEnv()` returns null unless AGENTGUARD_ANCHOR is
+ * set (today: "opentimestamps"). Nothing in the default SDK path anchors, so
+ * existing users see zero behavior change.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+import type { SignedDecisionLogEntry } from '../types';
+import type { TimestampAnchor } from './types';
+import { type OpenTimestampsAnchorOptions } from './opentimestamps';
+export type { AnchorProof, AnchorStatus, AnchorVerification, TimestampAnchor } from './types';
+export { OpenTimestampsAnchor, DEFAULT_OTS_CALENDARS, type OtsSubmit, type OpenTimestampsAnchorOptions } from './opentimestamps';
+export { writeAnchorProof, readAnchorIndex, readAnchorIndexAt, findAnchorForHead, anchorIndexPath, anchorProofPath, anchorDir, } from './store';
+/** Build a named anchor. Extend the switch as adapters are added. */
+export declare function createAnchor(type: string, options?: OpenTimestampsAnchorOptions): TimestampAnchor | null;
+/** Resolve the configured anchor from AGENTGUARD_ANCHOR, or null when unset. */
+export declare function createAnchorFromEnv(options?: OpenTimestampsAnchorOptions): TimestampAnchor | null;
+/**
+ * The digest an anchor should submit for a ledger: the SHA-256 of the current
+ * chain HEAD entry hash. Anchoring the head transitively commits to every prior
+ * entry (each entry binds its predecessor's hash), so a single 32-byte digest
+ * externally timestamps the whole chain. Returns null for an empty chain.
+ */
+export declare function chainHeadDigestHex(entries: ReadonlyArray<Pick<SignedDecisionLogEntry, 'sequence' | 'entryHash'>>): string | null;
+/**
+ * A Merkle root over the ndjson chain's entry hashes — an alternative anchor
+ * digest when you want the anchored value to be independent of chain order
+ * bugs. Uses SHA-256 with duplicate-last-node padding.
+ */
+export declare function merkleRootHex(entries: ReadonlyArray<Pick<SignedDecisionLogEntry, 'entryHash'>>): string | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/anchor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/anchor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAwB,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE1F,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,KAAK,SAAS,EAAE,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACjI,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,SAAS,GACV,MAAM,SAAS,CAAC;AAEjB,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC,GAAG,eAAe,GAAG,IAAI,CAG5G;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,2BAAgC,GAAG,eAAe,GAAG,IAAI,CAIrG;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,sBAAsB,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAKhI;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAa9G"}

package/dist/anchor/index.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * External timestamp anchoring: public surface + factory.
+ *
+ * Opt-in only. `createAnchorFromEnv()` returns null unless AGENTGUARD_ANCHOR is
+ * set (today: "opentimestamps"). Nothing in the default SDK path anchors, so
+ * existing users see zero behavior change.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.anchorDir = exports.anchorProofPath = exports.anchorIndexPath = exports.findAnchorForHead = exports.readAnchorIndexAt = exports.readAnchorIndex = exports.writeAnchorProof = exports.DEFAULT_OTS_CALENDARS = exports.OpenTimestampsAnchor = void 0;
+exports.createAnchor = createAnchor;
+exports.createAnchorFromEnv = createAnchorFromEnv;
+exports.chainHeadDigestHex = chainHeadDigestHex;
+exports.merkleRootHex = merkleRootHex;
+const crypto_1 = require("crypto");
+const opentimestamps_1 = require("./opentimestamps");
+var opentimestamps_2 = require("./opentimestamps");
+Object.defineProperty(exports, "OpenTimestampsAnchor", { enumerable: true, get: function () { return opentimestamps_2.OpenTimestampsAnchor; } });
+Object.defineProperty(exports, "DEFAULT_OTS_CALENDARS", { enumerable: true, get: function () { return opentimestamps_2.DEFAULT_OTS_CALENDARS; } });
+var store_1 = require("./store");
+Object.defineProperty(exports, "writeAnchorProof", { enumerable: true, get: function () { return store_1.writeAnchorProof; } });
+Object.defineProperty(exports, "readAnchorIndex", { enumerable: true, get: function () { return store_1.readAnchorIndex; } });
+Object.defineProperty(exports, "readAnchorIndexAt", { enumerable: true, get: function () { return store_1.readAnchorIndexAt; } });
+Object.defineProperty(exports, "findAnchorForHead", { enumerable: true, get: function () { return store_1.findAnchorForHead; } });
+Object.defineProperty(exports, "anchorIndexPath", { enumerable: true, get: function () { return store_1.anchorIndexPath; } });
+Object.defineProperty(exports, "anchorProofPath", { enumerable: true, get: function () { return store_1.anchorProofPath; } });
+Object.defineProperty(exports, "anchorDir", { enumerable: true, get: function () { return store_1.anchorDir; } });
+/** Build a named anchor. Extend the switch as adapters are added. */
+function createAnchor(type, options = {}) {
+    if (type === 'opentimestamps')
+        return new opentimestamps_1.OpenTimestampsAnchor(options);
+    return null;
+}
+/** Resolve the configured anchor from AGENTGUARD_ANCHOR, or null when unset. */
+function createAnchorFromEnv(options = {}) {
+    const type = (process.env.AGENTGUARD_ANCHOR || '').trim().toLowerCase();
+    if (!type || type === 'off' || type === 'none' || type === '0')
+        return null;
+    return createAnchor(type, options);
+}
+/**
+ * The digest an anchor should submit for a ledger: the SHA-256 of the current
+ * chain HEAD entry hash. Anchoring the head transitively commits to every prior
+ * entry (each entry binds its predecessor's hash), so a single 32-byte digest
+ * externally timestamps the whole chain. Returns null for an empty chain.
+ */
+function chainHeadDigestHex(entries) {
+    if (entries.length === 0)
+        return null;
+    let head = entries[0];
+    for (const e of entries)
+        if (e.sequence >= head.sequence)
+            head = e;
+    return (0, crypto_1.createHash)('sha256').update(head.entryHash, 'utf8').digest('hex');
+}
+/**
+ * A Merkle root over the ndjson chain's entry hashes — an alternative anchor
+ * digest when you want the anchored value to be independent of chain order
+ * bugs. Uses SHA-256 with duplicate-last-node padding.
+ */
+function merkleRootHex(entries) {
+    if (entries.length === 0)
+        return null;
+    let level = entries.map((e) => new Uint8Array((0, crypto_1.createHash)('sha256').update(e.entryHash, 'utf8').digest()));
+    while (level.length > 1) {
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            const left = level[i];
+            const right = level[i + 1] ?? left;
+            next.push(new Uint8Array((0, crypto_1.createHash)('sha256').update(Buffer.concat([left, right])).digest()));
+        }
+        level = next;
+    }
+    return Buffer.from(level[0]).toString('hex');
+}
+//# sourceMappingURL=index.js.map

package/dist/anchor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/anchor/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAoBH,oCAGC;AAGD,kDAIC;AAQD,gDAKC;AAOD,sCAaC;AA7DD,mCAAoC;AAGpC,qDAA0F;AAG1F,mDAAiI;AAAxH,sHAAA,oBAAoB,OAAA;AAAE,uHAAA,qBAAqB,OAAA;AACpD,iCAQiB;AAPf,yGAAA,gBAAgB,OAAA;AAChB,wGAAA,eAAe,OAAA;AACf,0GAAA,iBAAiB,OAAA;AACjB,0GAAA,iBAAiB,OAAA;AACjB,wGAAA,eAAe,OAAA;AACf,wGAAA,eAAe,OAAA;AACf,kGAAA,SAAS,OAAA;AAGX,qEAAqE;AACrE,SAAgB,YAAY,CAAC,IAAY,EAAE,UAAuC,EAAE;IAClF,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,IAAI,qCAAoB,CAAC,OAAO,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAgB,mBAAmB,CAAC,UAAuC,EAAE;IAC3E,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxE,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,OAA8E;IAC/G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,GAAG,CAAC,CAAC;IACnE,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAAiE;IAC7F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC"}

package/dist/anchor/opentimestamps.d.ts

@@ -0,0 +1,55 @@
+/**
+ * OpenTimestamps anchor adapter.
+ *
+ * Submits ONLY the 32-byte SHA-256 of the chain head to one or more public
+ * OpenTimestamps calendar servers and stores the returned commitment. Nothing
+ * else leaves the process (zero data plane): a hash is submitted, a proof comes
+ * back.
+ *
+ * IMPORTANT HONESTY NOTE (read before relying on this in production):
+ * The canonical OpenTimestamps `.ots` serialization and the Bitcoin-attestation
+ * *upgrade + verification* require the `opentimestamps` npm package, which is
+ * NOT a dependency of this package today. Without it, this adapter:
+ *   - DOES perform a real calendar submission (POST <calendar>/digest) and
+ *     store the raw calendar response bytes, and
+ *   - DOES bind the proof to the exact head hash it anchored,
+ * but it does NOT parse the .ots structure or confirm the Bitcoin attestation.
+ * Such proofs are therefore reported as `status: 'pending'` with
+ * `attested: false`. The OTS wire/verification protocol is STUBBED pending the
+ * `opentimestamps` dependency. We never fabricate an attested time.
+ *
+ * To complete the chain to Bitcoin: add `opentimestamps` and upgrade the stored
+ * proof (`ots upgrade`), then `attestedAt` can be populated from the real
+ * Bitcoin block time. This adapter reads `attestedAt` if present but never sets
+ * it without a real upgrade.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+import type { AnchorProof, AnchorVerification, TimestampAnchor } from './types';
+/** Public OpenTimestamps calendar servers (aggregators). */
+export declare const DEFAULT_OTS_CALENDARS: string[];
+/**
+ * Transport hook: submit a digest to one calendar, return the raw response
+ * bytes (the calendar's commitment). Injectable for tests / private mirrors.
+ * Should reject on network/HTTP failure.
+ */
+export type OtsSubmit = (calendarUrl: string, digest: Uint8Array) => Promise<Uint8Array>;
+export interface OpenTimestampsAnchorOptions {
+    calendars?: string[];
+    /** Override the calendar transport (defaults to a real https POST). */
+    submit?: OtsSubmit;
+    /** Require at least one calendar to succeed. Defaults to true. */
+    requireCalendar?: boolean;
+}
+export declare class OpenTimestampsAnchor implements TimestampAnchor {
+    readonly type = "opentimestamps";
+    private readonly calendars;
+    private readonly submit;
+    private readonly requireCalendar;
+    constructor(options?: OpenTimestampsAnchorOptions);
+    anchor(headHashHex: string): Promise<AnchorProof>;
+    verify(headHashHex: string, proof: AnchorProof): Promise<AnchorVerification>;
+}
+//# sourceMappingURL=opentimestamps.d.ts.map

package/dist/anchor/opentimestamps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opentimestamps.d.ts","sourceRoot":"","sources":["../../src/anchor/opentimestamps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAEhF,4DAA4D;AAC5D,eAAO,MAAM,qBAAqB,UAGjC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEzF,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,uEAAuE;IACvE,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,kEAAkE;IAClE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAiDD,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,QAAQ,CAAC,IAAI,oBAAoB;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;gBAE9B,OAAO,GAAE,2BAAgC;IAM/C,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAwCjD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAiCnF"}

package/dist/anchor/opentimestamps.js

@@ -0,0 +1,179 @@
+"use strict";
+/**
+ * OpenTimestamps anchor adapter.
+ *
+ * Submits ONLY the 32-byte SHA-256 of the chain head to one or more public
+ * OpenTimestamps calendar servers and stores the returned commitment. Nothing
+ * else leaves the process (zero data plane): a hash is submitted, a proof comes
+ * back.
+ *
+ * IMPORTANT HONESTY NOTE (read before relying on this in production):
+ * The canonical OpenTimestamps `.ots` serialization and the Bitcoin-attestation
+ * *upgrade + verification* require the `opentimestamps` npm package, which is
+ * NOT a dependency of this package today. Without it, this adapter:
+ *   - DOES perform a real calendar submission (POST <calendar>/digest) and
+ *     store the raw calendar response bytes, and
+ *   - DOES bind the proof to the exact head hash it anchored,
+ * but it does NOT parse the .ots structure or confirm the Bitcoin attestation.
+ * Such proofs are therefore reported as `status: 'pending'` with
+ * `attested: false`. The OTS wire/verification protocol is STUBBED pending the
+ * `opentimestamps` dependency. We never fabricate an attested time.
+ *
+ * To complete the chain to Bitcoin: add `opentimestamps` and upgrade the stored
+ * proof (`ots upgrade`), then `attestedAt` can be populated from the real
+ * Bitcoin block time. This adapter reads `attestedAt` if present but never sets
+ * it without a real upgrade.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenTimestampsAnchor = exports.DEFAULT_OTS_CALENDARS = void 0;
+/** Public OpenTimestamps calendar servers (aggregators). */
+exports.DEFAULT_OTS_CALENDARS = [
+    'https://alice.btc.calendar.opentimestamps.org',
+    'https://bob.btc.calendar.opentimestamps.org',
+];
+function hexToBytes(hex) {
+    const clean = hex.trim().toLowerCase();
+    if (!/^[0-9a-f]*$/.test(clean) || clean.length % 2 !== 0) {
+        throw new Error('OpenTimestampsAnchor: headHashHex must be lowercase hex of even length');
+    }
+    const out = new Uint8Array(clean.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+/** Default transport: POST the raw digest bytes to <calendar>/digest over https. */
+const defaultSubmit = (calendarUrl, digest) => new Promise((resolve, reject) => {
+    // Lazy require so the SDK never pulls node:https at import time in bundlers.
+    // eslint-disable-next-line @typescript-eslint/no-var-requires
+    const https = require('https');
+    const url = new URL(calendarUrl.replace(/\/+$/, '') + '/digest');
+    const req = https.request({
+        hostname: url.hostname,
+        port: url.port || 443,
+        path: url.pathname,
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/octet-stream',
+            'Accept': 'application/vnd.opentimestamps.v1',
+            'Content-Length': digest.length,
+            'User-Agent': 'agentguard-spend',
+        },
+    }, (res) => {
+        const chunks = [];
+        res.on('data', (c) => chunks.push(c));
+        res.on('end', () => {
+            if (res.statusCode && res.statusCode >= 200 && res.statusCode < 300) {
+                resolve(new Uint8Array(Buffer.concat(chunks)));
+            }
+            else {
+                reject(new Error(`OTS calendar ${calendarUrl} returned HTTP ${res.statusCode}`));
+            }
+        });
+    });
+    req.on('error', reject);
+    req.write(Buffer.from(digest));
+    req.end();
+});
+class OpenTimestampsAnchor {
+    type = 'opentimestamps';
+    calendars;
+    submit;
+    requireCalendar;
+    constructor(options = {}) {
+        this.calendars = options.calendars ?? exports.DEFAULT_OTS_CALENDARS;
+        this.submit = options.submit ?? defaultSubmit;
+        this.requireCalendar = options.requireCalendar ?? true;
+    }
+    async anchor(headHashHex) {
+        const digest = hexToBytes(headHashHex);
+        if (digest.length !== 32) {
+            throw new Error('OpenTimestampsAnchor: chain head digest must be SHA-256 (32 bytes)');
+        }
+        const responses = [];
+        const used = [];
+        const errors = [];
+        for (const calendar of this.calendars) {
+            try {
+                const bytes = await this.submit(calendar, digest);
+                responses.push(bytes);
+                used.push(calendar);
+            }
+            catch (err) {
+                errors.push(`${calendar}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        if (responses.length === 0 && this.requireCalendar) {
+            throw new Error('OpenTimestampsAnchor: no calendar accepted the digest: ' + errors.join('; '));
+        }
+        // Concatenate raw calendar commitments length-prefixed so verify can bind
+        // them back to the head. This is NOT a canonical .ots file — see the module
+        // note. It is a real, non-fabricated record of what each calendar returned.
+        const proofBytes = concatLengthPrefixed(responses);
+        return {
+            version: 1,
+            anchorType: this.type,
+            headHashHex: headHashHex.trim().toLowerCase(),
+            submittedAt: new Date().toISOString(),
+            proof: Buffer.from(proofBytes).toString('base64'),
+            status: 'pending',
+            calendars: used,
+            attestedAt: null,
+            note: 'Calendar commitment stored. Bitcoin attestation upgrade + verification ' +
+                'require the `opentimestamps` npm package (not bundled); OTS .ots ' +
+                'serialization is stubbed pending that dependency. Only a SHA-256 hash was sent.',
+        };
+    }
+    async verify(headHashHex, proof) {
+        const head = headHashHex.trim().toLowerCase();
+        if (proof.anchorType !== this.type) {
+            return { ok: false, status: 'invalid', when: null, attested: false, detail: `not an ${this.type} proof` };
+        }
+        if (proof.headHashHex.trim().toLowerCase() !== head) {
+            return {
+                ok: false,
+                status: 'invalid',
+                when: null,
+                attested: false,
+                detail: 'proof does not bind the supplied chain head hash',
+            };
+        }
+        // A real Bitcoin-attested upgrade populates attestedAt; we trust it only if
+        // present (never synthesised here).
+        if (proof.attestedAt) {
+            return { ok: true, status: 'complete', when: proof.attestedAt, attested: true };
+        }
+        const hasCommitment = typeof proof.proof === 'string' && proof.proof.length > 0;
+        if (!hasCommitment && !(proof.calendars && proof.calendars.length > 0)) {
+            return { ok: false, status: 'invalid', when: null, attested: false, detail: 'proof carries no calendar commitment' };
+        }
+        return {
+            ok: true,
+            status: 'pending',
+            when: proof.submittedAt ?? null,
+            attested: false,
+            detail: 'Calendar commitment present for this head hash; Bitcoin attestation not yet ' +
+                'confirmed (requires `opentimestamps` upgrade). `when` is the submission time, not an attested time.',
+        };
+    }
+}
+exports.OpenTimestampsAnchor = OpenTimestampsAnchor;
+function concatLengthPrefixed(chunks) {
+    let total = 0;
+    for (const c of chunks)
+        total += 4 + c.length;
+    const out = new Uint8Array(total);
+    const view = new DataView(out.buffer);
+    let offset = 0;
+    for (const c of chunks) {
+        view.setUint32(offset, c.length, false);
+        offset += 4;
+        out.set(c, offset);
+        offset += c.length;
+    }
+    return out;
+}
+//# sourceMappingURL=opentimestamps.js.map

package/dist/anchor/opentimestamps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opentimestamps.js","sourceRoot":"","sources":["../../src/anchor/opentimestamps.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AAIH,4DAA4D;AAC/C,QAAA,qBAAqB,GAAG;IACnC,+CAA+C;IAC/C,6CAA6C;CAC9C,CAAC;AAiBF,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,aAAa,GAAc,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CACvD,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC1C,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAA2B,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CACvB;QACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG;QACrB,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,QAAQ,EAAE,mCAAmC;YAC7C,gBAAgB,EAAE,MAAM,CAAC,MAAM;YAC/B,YAAY,EAAE,kBAAkB;SACjC;KACF,EACD,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,WAAW,kBAAkB,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC,CAAC,CAAC;AAEL,MAAa,oBAAoB;IACtB,IAAI,GAAG,gBAAgB,CAAC;IAChB,SAAS,CAAW;IACpB,MAAM,CAAY;IAClB,eAAe,CAAU;IAE1C,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,6BAAqB,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,SAAS,GAAiB,EAAE,CAAC;QACnC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,yDAAyD,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YAC7C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACjD,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,IAAI,EACF,yEAAyE;gBACzE,mEAAmE;gBACnE,iFAAiF;SACpF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,KAAkB;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5G,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,kDAAkD;aAC3D,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,oCAAoC;QACpC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAClF,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAChF,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QACvH,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YAC/B,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,8EAA8E;gBAC9E,qGAAqG;SACxG,CAAC;IACJ,CAAC;CACF;AArFD,oDAqFC;AAED,SAAS,oBAAoB,CAAC,MAAoB;IAChD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,CAAC;QACZ,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/anchor/store.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Anchor proof persistence, stored ALONGSIDE the ndjson ledger so a verifier
+ * can find both together:
+ *   ~/.agentguard/<tenant>/anchor.ots    latest raw calendar proof bytes (binary)
+ *   ~/.agentguard/<tenant>/anchor.json   small append-only index of AnchorProof
+ *
+ * The index is what `agentguard verify` reads to report external timestamping.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+import type { AnchorProof } from './types';
+export declare function defaultHome(): string;
+export declare function anchorDir(tenant: string, home?: string): string;
+export declare function anchorIndexPath(tenant: string, home?: string): string;
+export declare function anchorProofPath(tenant: string, home?: string): string;
+/** Append a proof to the tenant index and write its raw bytes to anchor.ots. */
+export declare function writeAnchorProof(tenant: string, proof: AnchorProof, home?: string): void;
+export declare function readAnchorIndex(tenant: string, home?: string): AnchorProof[];
+/** Read an anchor index directly from a path (used by verify beside a trace). */
+export declare function readAnchorIndexAt(indexPath: string): AnchorProof[];
+/** The most recent proof recorded for a given head hash, if any. */
+export declare function findAnchorForHead(proofs: AnchorProof[], headHashHex: string): AnchorProof | null;
+//# sourceMappingURL=store.d.ts.map

package/dist/anchor/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/anchor/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAAsB,GAAG,MAAM,CAG9E;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAWxF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE,CAE5E;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CASlE;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAMhG"}

package/dist/anchor/store.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * Anchor proof persistence, stored ALONGSIDE the ndjson ledger so a verifier
+ * can find both together:
+ *   ~/.agentguard/<tenant>/anchor.ots    latest raw calendar proof bytes (binary)
+ *   ~/.agentguard/<tenant>/anchor.json   small append-only index of AnchorProof
+ *
+ * The index is what `agentguard verify` reads to report external timestamping.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultHome = defaultHome;
+exports.anchorDir = anchorDir;
+exports.anchorIndexPath = anchorIndexPath;
+exports.anchorProofPath = anchorProofPath;
+exports.writeAnchorProof = writeAnchorProof;
+exports.readAnchorIndex = readAnchorIndex;
+exports.readAnchorIndexAt = readAnchorIndexAt;
+exports.findAnchorForHead = findAnchorForHead;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+function defaultHome() {
+    return process.env.AGENTGUARD_HOME || path.join(os.homedir(), '.agentguard');
+}
+function anchorDir(tenant, home = defaultHome()) {
+    const clean = String(tenant || 'default').replace(/[^A-Za-z0-9._-]/g, '_') || 'default';
+    return path.join(home, clean);
+}
+function anchorIndexPath(tenant, home) {
+    return path.join(anchorDir(tenant, home), 'anchor.json');
+}
+function anchorProofPath(tenant, home) {
+    return path.join(anchorDir(tenant, home), 'anchor.ots');
+}
+/** Append a proof to the tenant index and write its raw bytes to anchor.ots. */
+function writeAnchorProof(tenant, proof, home) {
+    const dir = anchorDir(tenant, home);
+    fs.mkdirSync(dir, { recursive: true });
+    const existing = readAnchorIndex(tenant, home);
+    existing.push(proof);
+    fs.writeFileSync(anchorIndexPath(tenant, home), JSON.stringify(existing, null, 2) + '\n');
+    try {
+        fs.writeFileSync(anchorProofPath(tenant, home), Buffer.from(proof.proof, 'base64'));
+    }
+    catch {
+        // best-effort binary sidecar; the JSON index is the source of truth
+    }
+}
+function readAnchorIndex(tenant, home) {
+    return readAnchorIndexAt(anchorIndexPath(tenant, home));
+}
+/** Read an anchor index directly from a path (used by verify beside a trace). */
+function readAnchorIndexAt(indexPath) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
+        if (Array.isArray(parsed))
+            return parsed;
+        if (parsed && typeof parsed === 'object')
+            return [parsed];
+        return [];
+    }
+    catch {
+        return [];
+    }
+}
+/** The most recent proof recorded for a given head hash, if any. */
+function findAnchorForHead(proofs, headHashHex) {
+    const head = headHashHex.trim().toLowerCase();
+    for (let i = proofs.length - 1; i >= 0; i--) {
+        if (proofs[i]?.headHashHex?.trim().toLowerCase() === head)
+            return proofs[i];
+    }
+    return null;
+}
+//# sourceMappingURL=store.js.map

package/dist/anchor/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/anchor/store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOH,kCAEC;AAED,8BAGC;AAED,0CAEC;AAED,0CAEC;AAGD,4CAWC;AAED,0CAEC;AAGD,8CASC;AAGD,8CAMC;AA3DD,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAG7B,SAAgB,WAAW;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AAC/E,CAAC;AAED,SAAgB,SAAS,CAAC,MAAc,EAAE,OAAe,WAAW,EAAE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC;IACxF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAgB,eAAe,CAAC,MAAc,EAAE,IAAa;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC;AAED,SAAgB,eAAe,CAAC,MAAc,EAAE,IAAa;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;AAC1D,CAAC;AAED,gFAAgF;AAChF,SAAgB,gBAAgB,CAAC,MAAc,EAAE,KAAkB,EAAE,IAAa;IAChF,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1F,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,MAAc,EAAE,IAAa;IAC3D,OAAO,iBAAiB,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,iFAAiF;AACjF,SAAgB,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAuB,CAAC;QAC1D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,MAAqB,CAAC,CAAC;QACzE,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAgB,iBAAiB,CAAC,MAAqB,EAAE,WAAmB;IAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC;IAC/E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}