@agentguard-run/spend 0.15.7 → 0.15.9

package/README.md

@@ -187,10 +187,70 @@ Each template sets recommended OpenRouter model assignments, capability tier, fa
 
 ## Provider bindings
 
-TypeScript includes native OpenAI, Anthropic, and Bedrock bindings. Streaming usage is settled from provider usage events when available, with local token-estimator fallback when usage is missing. Settlement entries are signed into the same hash chain as enforcement decisions.
+TypeScript includes native OpenAI, Anthropic, and Bedrock bindings. Each wraps a direct provider client in one line, with per-provider cost tables and response-shape handling. Enforcement semantics are identical across all three (and the OpenRouter path): the same policy blocks, downgrades, shadows, or allows a call before any bytes leave the process. Streaming usage is settled from provider usage events when available, with local token-estimator fallback when usage is missing. Settlement entries are signed into the same hash chain as enforcement decisions.
+
+Wrap a direct **OpenAI** client:
+
+```ts
+import OpenAI from 'openai';
+import { withSpendGuard } from '@agentguard-run/spend';
+
+const openai = withSpendGuard(new OpenAI(), { policy, scope: { tenantId: 'acme' } });
+await openai.chat.completions.create({ model: 'gpt-5', messages });
+```
+
+Wrap a direct **Anthropic** client:
+
+```ts
+import Anthropic from '@anthropic-ai/sdk';
+import { withSpendGuardAnthropic } from '@agentguard-run/spend';
+
+const anthropic = withSpendGuardAnthropic(new Anthropic(), { policy, scope: { tenantId: 'acme' } });
+await anthropic.messages.create({ model: 'claude-sonnet-4-6', max_tokens: 1024, messages });
+```
+
+Wrap a direct **Bedrock** runtime client:
+
+```ts
+import { BedrockRuntimeClient } from '@aws-sdk/client-bedrock-runtime';
+import { withSpendGuardBedrock } from '@agentguard-run/spend';
+
+const bedrock = withSpendGuardBedrock(new BedrockRuntimeClient({ region: 'us-east-1' }), { policy, scope: { tenantId: 'acme' } });
+await bedrock.send(new InvokeModelCommand({ modelId: 'anthropic.claude-sonnet-4-v1:0', body }));
+```
+
+Only `InvokeModel` / `InvokeModelWithResponseStream` commands are gated; other Bedrock commands pass through untouched.
 
 Python includes OpenAI, Anthropic, Bedrock, LangChain, CrewAI, and LlamaIndex integration helpers.
 
+## Sample receipts for outreach
+
+Generate a realistic, signed sample receipt for a named flow plus a self-contained, self-verifying HTML page — "exactly what your counterparty would get":
+
+```bash
+agentguard sample --flow x402-payment   # or: refund | agent-purchase
+```
+
+This writes `receipt.json` and `verify.html`. The HTML re-derives the entry hash from canonical JSON (SHA-256) and verifies the Ed25519 signature in-browser via WebCrypto, with NO network calls; where a browser lacks WebCrypto Ed25519 it still checks the hash chain and links to agentguard.run/verify with the receipt prefilled. The signature is real; only the flow parameters are illustrative.
+
+## External timestamp anchoring (opt-in)
+
+Signed receipts prove internal order and integrity, but the signatures are produced in your own environment. Anchoring the chain head's SHA-256 to a public timestamp calendar (OpenTimestamps → Bitcoin) adds an EXTERNAL clock, so "this chain existed no later than <time>" is provable to a third party.
+
+```bash
+AGENTGUARD_ANCHOR=opentimestamps agentguard anchor --tenant my-tenant
+agentguard verify --trace ~/.agentguard/my-tenant/decisions.ndjson
+# → chain head submitted to external timestamp calendar at <time>
+```
+
+Anchoring is OFF by default; nothing changes for existing users. **Zero data plane is preserved: only the 32-byte SHA-256 of the chain head leaves the machine.** A hash reveals nothing about prompts, completions, keys, amounts, or model identity. The proof is stored alongside the ledger at `~/.agentguard/<tenant>/anchor.json` (+ `anchor.ots`).
+
+Note: full Bitcoin-attestation verification requires the `opentimestamps` npm package, which is not yet bundled. Without it, submitted proofs are reported as `pending` (calendar commitment received; external attestation not yet confirmed) — never as a fabricated attested time.
+
+## Completeness: sequence-gap detection
+
+Each signed entry carries a monotonic per-tenant sequence number. `agentguard verify` and the `agentguard serve` integrity badge flag missing sequence numbers as `possible omitted actions: sequence gap at N` — evidence that an action may have been taken around the SDK and not logged, or that a logged entry was deleted. This is detection and reporting only; it never changes spend-cap enforcement.
+
 ## No proxy
 
 AgentGuard Spend is a library, not a gateway. It does not proxy traffic, store prompts, hold provider keys, or host policy state. The signed log lives in your storage.

package/dist/anchor/index.d.ts

@@ -0,0 +1,35 @@
+/**
+ * External timestamp anchoring: public surface + factory.
+ *
+ * Opt-in only. `createAnchorFromEnv()` returns null unless AGENTGUARD_ANCHOR is
+ * set (today: "opentimestamps"). Nothing in the default SDK path anchors, so
+ * existing users see zero behavior change.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+import type { SignedDecisionLogEntry } from '../types';
+import type { TimestampAnchor } from './types';
+import { type OpenTimestampsAnchorOptions } from './opentimestamps';
+export type { AnchorProof, AnchorStatus, AnchorVerification, TimestampAnchor } from './types';
+export { OpenTimestampsAnchor, DEFAULT_OTS_CALENDARS, defaultOtsLib, type OtsSubmit, type OtsLib, type OtsBitcoinAttestation, type OpenTimestampsAnchorOptions, } from './opentimestamps';
+export { writeAnchorProof, replaceAnchorIndex, readAnchorIndex, readAnchorIndexAt, findAnchorForHead, anchorIndexPath, anchorProofPath, anchorDir, } from './store';
+/** Build a named anchor. Extend the switch as adapters are added. */
+export declare function createAnchor(type: string, options?: OpenTimestampsAnchorOptions): TimestampAnchor | null;
+/** Resolve the configured anchor from AGENTGUARD_ANCHOR, or null when unset. */
+export declare function createAnchorFromEnv(options?: OpenTimestampsAnchorOptions): TimestampAnchor | null;
+/**
+ * The digest an anchor should submit for a ledger: the SHA-256 of the current
+ * chain HEAD entry hash. Anchoring the head transitively commits to every prior
+ * entry (each entry binds its predecessor's hash), so a single 32-byte digest
+ * externally timestamps the whole chain. Returns null for an empty chain.
+ */
+export declare function chainHeadDigestHex(entries: ReadonlyArray<Pick<SignedDecisionLogEntry, 'sequence' | 'entryHash'>>): string | null;
+/**
+ * A Merkle root over the ndjson chain's entry hashes — an alternative anchor
+ * digest when you want the anchored value to be independent of chain order
+ * bugs. Uses SHA-256 with duplicate-last-node padding.
+ */
+export declare function merkleRootHex(entries: ReadonlyArray<Pick<SignedDecisionLogEntry, 'entryHash'>>): string | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/anchor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/anchor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAwB,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE1F,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,EACb,KAAK,SAAS,EACd,KAAK,MAAM,EACX,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,SAAS,GACV,MAAM,SAAS,CAAC;AAEjB,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC,GAAG,eAAe,GAAG,IAAI,CAG5G;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,2BAAgC,GAAG,eAAe,GAAG,IAAI,CAIrG;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,sBAAsB,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAKhI;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAa9G"}

package/dist/anchor/index.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * External timestamp anchoring: public surface + factory.
+ *
+ * Opt-in only. `createAnchorFromEnv()` returns null unless AGENTGUARD_ANCHOR is
+ * set (today: "opentimestamps"). Nothing in the default SDK path anchors, so
+ * existing users see zero behavior change.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.anchorDir = exports.anchorProofPath = exports.anchorIndexPath = exports.findAnchorForHead = exports.readAnchorIndexAt = exports.readAnchorIndex = exports.replaceAnchorIndex = exports.writeAnchorProof = exports.defaultOtsLib = exports.DEFAULT_OTS_CALENDARS = exports.OpenTimestampsAnchor = void 0;
+exports.createAnchor = createAnchor;
+exports.createAnchorFromEnv = createAnchorFromEnv;
+exports.chainHeadDigestHex = chainHeadDigestHex;
+exports.merkleRootHex = merkleRootHex;
+const crypto_1 = require("crypto");
+const opentimestamps_1 = require("./opentimestamps");
+var opentimestamps_2 = require("./opentimestamps");
+Object.defineProperty(exports, "OpenTimestampsAnchor", { enumerable: true, get: function () { return opentimestamps_2.OpenTimestampsAnchor; } });
+Object.defineProperty(exports, "DEFAULT_OTS_CALENDARS", { enumerable: true, get: function () { return opentimestamps_2.DEFAULT_OTS_CALENDARS; } });
+Object.defineProperty(exports, "defaultOtsLib", { enumerable: true, get: function () { return opentimestamps_2.defaultOtsLib; } });
+var store_1 = require("./store");
+Object.defineProperty(exports, "writeAnchorProof", { enumerable: true, get: function () { return store_1.writeAnchorProof; } });
+Object.defineProperty(exports, "replaceAnchorIndex", { enumerable: true, get: function () { return store_1.replaceAnchorIndex; } });
+Object.defineProperty(exports, "readAnchorIndex", { enumerable: true, get: function () { return store_1.readAnchorIndex; } });
+Object.defineProperty(exports, "readAnchorIndexAt", { enumerable: true, get: function () { return store_1.readAnchorIndexAt; } });
+Object.defineProperty(exports, "findAnchorForHead", { enumerable: true, get: function () { return store_1.findAnchorForHead; } });
+Object.defineProperty(exports, "anchorIndexPath", { enumerable: true, get: function () { return store_1.anchorIndexPath; } });
+Object.defineProperty(exports, "anchorProofPath", { enumerable: true, get: function () { return store_1.anchorProofPath; } });
+Object.defineProperty(exports, "anchorDir", { enumerable: true, get: function () { return store_1.anchorDir; } });
+/** Build a named anchor. Extend the switch as adapters are added. */
+function createAnchor(type, options = {}) {
+    if (type === 'opentimestamps')
+        return new opentimestamps_1.OpenTimestampsAnchor(options);
+    return null;
+}
+/** Resolve the configured anchor from AGENTGUARD_ANCHOR, or null when unset. */
+function createAnchorFromEnv(options = {}) {
+    const type = (process.env.AGENTGUARD_ANCHOR || '').trim().toLowerCase();
+    if (!type || type === 'off' || type === 'none' || type === '0')
+        return null;
+    return createAnchor(type, options);
+}
+/**
+ * The digest an anchor should submit for a ledger: the SHA-256 of the current
+ * chain HEAD entry hash. Anchoring the head transitively commits to every prior
+ * entry (each entry binds its predecessor's hash), so a single 32-byte digest
+ * externally timestamps the whole chain. Returns null for an empty chain.
+ */
+function chainHeadDigestHex(entries) {
+    if (entries.length === 0)
+        return null;
+    let head = entries[0];
+    for (const e of entries)
+        if (e.sequence >= head.sequence)
+            head = e;
+    return (0, crypto_1.createHash)('sha256').update(head.entryHash, 'utf8').digest('hex');
+}
+/**
+ * A Merkle root over the ndjson chain's entry hashes — an alternative anchor
+ * digest when you want the anchored value to be independent of chain order
+ * bugs. Uses SHA-256 with duplicate-last-node padding.
+ */
+function merkleRootHex(entries) {
+    if (entries.length === 0)
+        return null;
+    let level = entries.map((e) => new Uint8Array((0, crypto_1.createHash)('sha256').update(e.entryHash, 'utf8').digest()));
+    while (level.length > 1) {
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            const left = level[i];
+            const right = level[i + 1] ?? left;
+            next.push(new Uint8Array((0, crypto_1.createHash)('sha256').update(Buffer.concat([left, right])).digest()));
+        }
+        level = next;
+    }
+    return Buffer.from(level[0]).toString('hex');
+}
+//# sourceMappingURL=index.js.map

package/dist/anchor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/anchor/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA6BH,oCAGC;AAGD,kDAIC;AAQD,gDAKC;AAOD,sCAaC;AAtED,mCAAoC;AAGpC,qDAA0F;AAG1F,mDAQ0B;AAPxB,sHAAA,oBAAoB,OAAA;AACpB,uHAAA,qBAAqB,OAAA;AACrB,+GAAA,aAAa,OAAA;AAMf,iCASiB;AARf,yGAAA,gBAAgB,OAAA;AAChB,2GAAA,kBAAkB,OAAA;AAClB,wGAAA,eAAe,OAAA;AACf,0GAAA,iBAAiB,OAAA;AACjB,0GAAA,iBAAiB,OAAA;AACjB,wGAAA,eAAe,OAAA;AACf,wGAAA,eAAe,OAAA;AACf,kGAAA,SAAS,OAAA;AAGX,qEAAqE;AACrE,SAAgB,YAAY,CAAC,IAAY,EAAE,UAAuC,EAAE;IAClF,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,IAAI,qCAAoB,CAAC,OAAO,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAgB,mBAAmB,CAAC,UAAuC,EAAE;IAC3E,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxE,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,OAA8E;IAC/G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,GAAG,CAAC,CAAC;IACnE,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAAiE;IAC7F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC"}

package/dist/anchor/opentimestamps.d.ts

@@ -0,0 +1,86 @@
+/**
+ * OpenTimestamps anchor adapter.
+ *
+ * Submits ONLY the 32-byte SHA-256 of the chain head to one or more public
+ * OpenTimestamps calendar servers, stores the returned `.ots` proof, and can
+ * later upgrade that proof to a Bitcoin block attestation. Nothing else leaves
+ * the process (zero data plane): a hash is submitted, an `.ots` proof comes
+ * back. No decision content, policy, scope, amount, model identity, or key
+ * material is ever transmitted.
+ *
+ * This adapter uses the real `opentimestamps` npm library through an injectable
+ * boundary (`OtsLib`), so:
+ *   - `anchor()` builds a `DetachedTimestampFile` from the raw digest, stamps it
+ *     against public calendars, and stores the serialized `.ots` bytes,
+ *   - `upgrade()` fetches the Bitcoin attestation when the calendars have it and
+ *     persists the upgraded `.ots` (idempotent),
+ *   - `verify()` reports `attested: true` with a real `when` ONLY when the `.ots`
+ *     proof actually carries a Bitcoin block-header attestation. A pending proof
+ *     stays pending. An attested time is NEVER fabricated.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+import type { AnchorProof, AnchorVerification, TimestampAnchor } from './types';
+/** Public OpenTimestamps calendar servers (aggregators). */
+export declare const DEFAULT_OTS_CALENDARS: string[];
+/**
+ * Result of inspecting an `.ots` proof for a Bitcoin attestation.
+ * `bitcoinAttested` is true iff the timestamp carries a Bitcoin block-header
+ * attestation; `attestedTimeSec` is the confirmed block time (unix seconds),
+ * only present when the attestation resolves to a real time.
+ */
+export interface OtsBitcoinAttestation {
+    bitcoinAttested: boolean;
+    attestedTimeSec?: number;
+    height?: number;
+}
+/**
+ * The `opentimestamps` library boundary. Injectable so tests are deterministic
+ * and never touch the network. Every method receives/returns raw bytes and the
+ * 32-byte digest only — zero data plane.
+ */
+export interface OtsLib {
+    /** Stamp a 32-byte SHA-256 digest against calendars; return the `.ots` bytes. */
+    stamp(sha256Digest: Uint8Array, calendars: string[]): Promise<Uint8Array>;
+    /** Upgrade stored `.ots` bytes (fetch Bitcoin attestation if available). Idempotent; returns the possibly-upgraded `.ots` bytes. */
+    upgrade(otsBytes: Uint8Array): Promise<Uint8Array>;
+    /** Inspect `.ots` bytes for the given digest. MUST throw if the proof's embedded file hash does not equal `sha256Digest`. */
+    verify(sha256Digest: Uint8Array, otsBytes: Uint8Array): Promise<OtsBitcoinAttestation>;
+}
+/**
+ * @deprecated Legacy calendar-POST transport hook. Superseded by the `OtsLib`
+ * boundary now that the real `opentimestamps` library is a dependency. Retained
+ * only so existing type imports keep compiling.
+ */
+export type OtsSubmit = (calendarUrl: string, digest: Uint8Array) => Promise<Uint8Array>;
+export interface OpenTimestampsAnchorOptions {
+    calendars?: string[];
+    /** Override the OpenTimestamps library boundary (defaults to the real npm lib). */
+    lib?: OtsLib;
+}
+/**
+ * Default `OtsLib` backed by the real `opentimestamps` npm package. Lazily
+ * required so the SDK never pulls the library (or node:https) at import time in
+ * bundlers — only when an anchor is actually exercised.
+ */
+export declare function defaultOtsLib(): OtsLib;
+export declare class OpenTimestampsAnchor implements TimestampAnchor {
+    readonly type = "opentimestamps";
+    private readonly calendars;
+    private lazyLib;
+    constructor(options?: OpenTimestampsAnchorOptions);
+    private lib;
+    private digestOf;
+    anchor(headHashHex: string): Promise<AnchorProof>;
+    /**
+     * Fetch the Bitcoin attestation for a stored proof, if the calendars now have
+     * it, and return an updated proof. Idempotent: safe to call repeatedly. If the
+     * attestation is confirmable, `attestedAt` is set to the real Bitcoin block
+     * time and status becomes `complete`; otherwise the proof stays `pending`.
+     */
+    upgrade(proof: AnchorProof): Promise<AnchorProof>;
+    verify(headHashHex: string, proof: AnchorProof): Promise<AnchorVerification>;
+}
+//# sourceMappingURL=opentimestamps.d.ts.map

package/dist/anchor/opentimestamps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opentimestamps.d.ts","sourceRoot":"","sources":["../../src/anchor/opentimestamps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAEhF,4DAA4D;AAC5D,eAAO,MAAM,qBAAqB,UAGjC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,MAAM;IACrB,iFAAiF;IACjF,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1E,oIAAoI;IACpI,OAAO,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,6HAA6H;IAC7H,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACxF;AAED;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEzF,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAkBD;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAkEtC;AAED,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,QAAQ,CAAC,IAAI,oBAAoB;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,OAAO,CAAC,OAAO,CAAqB;gBAExB,OAAO,GAAE,2BAAgC;IAKrD,OAAO,CAAC,GAAG;IAKX,OAAO,CAAC,QAAQ;IAQV,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAmBvD;;;;;OAKG;IACG,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAoBjD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;CA2DnF"}

package/dist/anchor/opentimestamps.js

@@ -0,0 +1,239 @@
+"use strict";
+/**
+ * OpenTimestamps anchor adapter.
+ *
+ * Submits ONLY the 32-byte SHA-256 of the chain head to one or more public
+ * OpenTimestamps calendar servers, stores the returned `.ots` proof, and can
+ * later upgrade that proof to a Bitcoin block attestation. Nothing else leaves
+ * the process (zero data plane): a hash is submitted, an `.ots` proof comes
+ * back. No decision content, policy, scope, amount, model identity, or key
+ * material is ever transmitted.
+ *
+ * This adapter uses the real `opentimestamps` npm library through an injectable
+ * boundary (`OtsLib`), so:
+ *   - `anchor()` builds a `DetachedTimestampFile` from the raw digest, stamps it
+ *     against public calendars, and stores the serialized `.ots` bytes,
+ *   - `upgrade()` fetches the Bitcoin attestation when the calendars have it and
+ *     persists the upgraded `.ots` (idempotent),
+ *   - `verify()` reports `attested: true` with a real `when` ONLY when the `.ots`
+ *     proof actually carries a Bitcoin block-header attestation. A pending proof
+ *     stays pending. An attested time is NEVER fabricated.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenTimestampsAnchor = exports.DEFAULT_OTS_CALENDARS = void 0;
+exports.defaultOtsLib = defaultOtsLib;
+/** Public OpenTimestamps calendar servers (aggregators). */
+exports.DEFAULT_OTS_CALENDARS = [
+    'https://alice.btc.calendar.opentimestamps.org',
+    'https://bob.btc.calendar.opentimestamps.org',
+];
+function hexToBytes(hex) {
+    const clean = hex.trim().toLowerCase();
+    if (!/^[0-9a-f]*$/.test(clean) || clean.length % 2 !== 0) {
+        throw new Error('OpenTimestampsAnchor: headHashHex must be lowercase hex of even length');
+    }
+    const out = new Uint8Array(clean.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+function bytesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    for (let i = 0; i < a.length; i++)
+        if (a[i] !== b[i])
+            return false;
+    return true;
+}
+/**
+ * Default `OtsLib` backed by the real `opentimestamps` npm package. Lazily
+ * required so the SDK never pulls the library (or node:https) at import time in
+ * bundlers — only when an anchor is actually exercised.
+ */
+function defaultOtsLib() {
+    let OTS;
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        OTS = require('opentimestamps');
+    }
+    catch {
+        throw new Error("Bitcoin timestamp anchoring requires the optional 'opentimestamps' package. " +
+            'Install it to enable this feature: npm i opentimestamps');
+    }
+    const { DetachedTimestampFile, Ops, Notary } = OTS;
+    const detachedFromHash = (digest) => DetachedTimestampFile.fromHash(new Ops.OpSHA256(), Array.from(digest));
+    const detachedFromOts = (otsBytes) => DetachedTimestampFile.deserialize(Array.from(otsBytes));
+    const toBytes = (detached) => Uint8Array.from(detached.serializeToBytes());
+    const hasBitcoinAttestation = (detached) => {
+        let found = false;
+        detached.timestamp.allAttestations().forEach((attestation) => {
+            if (attestation instanceof Notary.BitcoinBlockHeaderAttestation)
+                found = true;
+        });
+        return found;
+    };
+    return {
+        async stamp(sha256Digest, calendars) {
+            const detached = detachedFromHash(sha256Digest);
+            await OTS.stamp(detached, { calendars, m: calendars.length >= 2 ? 2 : 1 });
+            return toBytes(detached);
+        },
+        async upgrade(otsBytes) {
+            const detached = detachedFromOts(otsBytes);
+            await OTS.upgrade(detached);
+            return toBytes(detached);
+        },
+        async verify(sha256Digest, otsBytes) {
+            const detached = detachedFromOts(otsBytes);
+            // Bind the proof to the supplied digest: the .ots embeds the file hash it
+            // was built from. A mismatch means this proof is not for this head.
+            if (!bytesEqual(Uint8Array.from(detached.fileDigest()), sha256Digest)) {
+                throw new Error('OTS proof file hash does not match the supplied digest');
+            }
+            if (!hasBitcoinAttestation(detached)) {
+                return { bitcoinAttested: false };
+            }
+            // A Bitcoin attestation is present; resolve its block time. verifyTimestamp
+            // checks completed attestations only (no re-stamp) and returns
+            // { bitcoin: { timestamp, height } } when confirmable.
+            const result = await OTS.verifyTimestamp(detached.timestamp, {});
+            const btc = result && (result.bitcoin || result.Bitcoin);
+            if (btc && typeof btc.timestamp === 'number') {
+                return { bitcoinAttested: true, attestedTimeSec: btc.timestamp, height: btc.height };
+            }
+            // Attestation present but time not resolvable right now (e.g. explorer
+            // unreachable). Report attested-but-timeless; callers keep it pending
+            // rather than inventing a time.
+            return { bitcoinAttested: true };
+        },
+    };
+}
+class OpenTimestampsAnchor {
+    type = 'opentimestamps';
+    calendars;
+    lazyLib;
+    constructor(options = {}) {
+        this.calendars = options.calendars ?? exports.DEFAULT_OTS_CALENDARS;
+        this.lazyLib = options.lib;
+    }
+    lib() {
+        if (!this.lazyLib)
+            this.lazyLib = defaultOtsLib();
+        return this.lazyLib;
+    }
+    digestOf(headHashHex) {
+        const digest = hexToBytes(headHashHex);
+        if (digest.length !== 32) {
+            throw new Error('OpenTimestampsAnchor: chain head digest must be SHA-256 (32 bytes)');
+        }
+        return digest;
+    }
+    async anchor(headHashHex) {
+        const digest = this.digestOf(headHashHex);
+        const otsBytes = await this.lib().stamp(digest, this.calendars);
+        return {
+            version: 1,
+            anchorType: this.type,
+            headHashHex: headHashHex.trim().toLowerCase(),
+            submittedAt: new Date().toISOString(),
+            proof: Buffer.from(otsBytes).toString('base64'),
+            status: 'pending',
+            calendars: this.calendars.slice(),
+            attestedAt: null,
+            note: 'OpenTimestamps .ots proof stored. Bitcoin attestation not yet confirmed; ' +
+                "run 'agentguard anchor --upgrade' once the calendars have committed the " +
+                'digest to a Bitcoin block. Only a 32-byte SHA-256 hash was transmitted.',
+        };
+    }
+    /**
+     * Fetch the Bitcoin attestation for a stored proof, if the calendars now have
+     * it, and return an updated proof. Idempotent: safe to call repeatedly. If the
+     * attestation is confirmable, `attestedAt` is set to the real Bitcoin block
+     * time and status becomes `complete`; otherwise the proof stays `pending`.
+     */
+    async upgrade(proof) {
+        if (proof.anchorType !== this.type)
+            return proof;
+        const digest = this.digestOf(proof.headHashHex);
+        const current = Uint8Array.from(Buffer.from(proof.proof, 'base64'));
+        const upgraded = await this.lib().upgrade(current);
+        const next = { ...proof, proof: Buffer.from(upgraded).toString('base64') };
+        const info = await this.lib().verify(digest, upgraded);
+        if (info.bitcoinAttested && typeof info.attestedTimeSec === 'number') {
+            next.attestedAt = new Date(info.attestedTimeSec * 1000).toISOString();
+            next.status = 'complete';
+            next.note =
+                'OpenTimestamps .ots proof upgraded: chain head committed to Bitcoin' +
+                    (typeof info.height === 'number' ? ` block ${info.height}` : '') + '.';
+        }
+        else {
+            next.attestedAt = proof.attestedAt ?? null;
+            next.status = 'pending';
+        }
+        return next;
+    }
+    async verify(headHashHex, proof) {
+        const head = headHashHex.trim().toLowerCase();
+        if (proof.anchorType !== this.type) {
+            return { ok: false, status: 'invalid', when: null, attested: false, detail: `not an ${this.type} proof` };
+        }
+        if (proof.headHashHex.trim().toLowerCase() !== head) {
+            return {
+                ok: false,
+                status: 'invalid',
+                when: null,
+                attested: false,
+                detail: 'proof does not bind the supplied chain head hash',
+            };
+        }
+        let digest;
+        try {
+            digest = this.digestOf(head);
+        }
+        catch (err) {
+            return { ok: false, status: 'invalid', when: null, attested: false, detail: err instanceof Error ? err.message : String(err) };
+        }
+        const hasProofBytes = typeof proof.proof === 'string' && proof.proof.length > 0;
+        if (!hasProofBytes) {
+            return { ok: false, status: 'invalid', when: null, attested: false, detail: 'proof carries no .ots commitment' };
+        }
+        let info;
+        try {
+            const otsBytes = Uint8Array.from(Buffer.from(proof.proof, 'base64'));
+            info = await this.lib().verify(digest, otsBytes);
+        }
+        catch (err) {
+            return {
+                ok: false,
+                status: 'invalid',
+                when: null,
+                attested: false,
+                detail: `OTS proof did not verify against this head: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        // attested:true is gated SOLELY on the .ots carrying a Bitcoin block
+        // attestation that resolves to a real block time. Never fabricated.
+        if (info.bitcoinAttested && typeof info.attestedTimeSec === 'number') {
+            return { ok: true, status: 'complete', when: new Date(info.attestedTimeSec * 1000).toISOString(), attested: true };
+        }
+        // A previously-recorded, real upgrade may have persisted attestedAt; trust it
+        // (we only ever set it from a genuine Bitcoin block time).
+        if (proof.attestedAt) {
+            return { ok: true, status: 'complete', when: proof.attestedAt, attested: true };
+        }
+        return {
+            ok: true,
+            status: 'pending',
+            when: proof.submittedAt ?? null,
+            attested: false,
+            detail: 'OpenTimestamps .ots commitment present for this head hash; Bitcoin attestation ' +
+                'not yet confirmed (run `anchor --upgrade`). `when` is the submission time, not an attested time.',
+        };
+    }
+}
+exports.OpenTimestampsAnchor = OpenTimestampsAnchor;
+//# sourceMappingURL=opentimestamps.js.map

package/dist/anchor/opentimestamps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opentimestamps.js","sourceRoot":"","sources":["../../src/anchor/opentimestamps.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAsEH,sCAkEC;AApID,4DAA4D;AAC/C,QAAA,qBAAqB,GAAG;IACnC,+CAA+C;IAC/C,6CAA6C;CAC9C,CAAC;AAyCF,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa;IAC3B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,8DAA8D;QAC9D,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,8EAA8E;YAC5E,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEnD,MAAM,gBAAgB,GAAG,CAAC,MAAkB,EAAE,EAAE,CAC9C,qBAAqB,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEzE,MAAM,eAAe,GAAG,CAAC,QAAoB,EAAE,EAAE,CAC/C,qBAAqB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,CAAC,QAAa,EAAc,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE5F,MAAM,qBAAqB,GAAG,CAAC,QAAa,EAAW,EAAE;QACvD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,WAAgB,EAAE,EAAE;YAChE,IAAI,WAAW,YAAY,MAAM,CAAC,6BAA6B;gBAAE,KAAK,GAAG,IAAI,CAAC;QAChF,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS;YACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3E,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,QAAQ;YACpB,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ;YACjC,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3C,0EAA0E;YAC1E,oEAAoE;YACpE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACpC,CAAC;YACD,4EAA4E;YAC5E,+DAA+D;YAC/D,uDAAuD;YACvD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC7C,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YACvF,CAAC;YACD,uEAAuE;YACvE,sEAAsE;YACtE,gCAAgC;YAChC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAa,oBAAoB;IACtB,IAAI,GAAG,gBAAgB,CAAC;IAChB,SAAS,CAAW;IAC7B,OAAO,CAAqB;IAEpC,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,6BAAqB,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC7B,CAAC;IAEO,GAAG;QACT,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,aAAa,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,QAAQ,CAAC,WAAmB;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,OAAO;YACL,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YAC7C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/C,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,UAAU,EAAE,IAAI;YAChB,IAAI,EACF,2EAA2E;gBAC3E,0EAA0E;gBAC1E,yEAAyE;SAC5E,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,KAAkB;QAC9B,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,IAAI,GAAgB,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,eAAe,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YACrE,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACtE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;YACzB,IAAI,CAAC,IAAI;gBACP,qEAAqE;oBACrE,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC;YAC3C,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,KAAkB;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5G,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,kDAAkD;aAC3D,CAAC;QACJ,CAAC;QACD,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACjI,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAChF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;QACnH,CAAC;QAED,IAAI,IAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACrE,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC1G,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,IAAI,CAAC,eAAe,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACrH,CAAC;QACD,8EAA8E;QAC9E,2DAA2D;QAC3D,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAClF,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YAC/B,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,iFAAiF;gBACjF,kGAAkG;SACrG,CAAC;IACJ,CAAC;CACF;AA/HD,oDA+HC"}

package/dist/anchor/store.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Anchor proof persistence, stored ALONGSIDE the ndjson ledger so a verifier
+ * can find both together:
+ *   ~/.agentguard/<tenant>/anchor.ots    latest raw calendar proof bytes (binary)
+ *   ~/.agentguard/<tenant>/anchor.json   small append-only index of AnchorProof
+ *
+ * The index is what `agentguard verify` reads to report external timestamping.
+ *
+ * Patent notice: Protected by U.S. patent-pending technology
+ * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
+ * 64/071,781; 64/071,789).
+ */
+import type { AnchorProof } from './types';
+export declare function defaultHome(): string;
+export declare function anchorDir(tenant: string, home?: string): string;
+export declare function anchorIndexPath(tenant: string, home?: string): string;
+export declare function anchorProofPath(tenant: string, home?: string): string;
+/** Append a proof to the tenant index and write its raw bytes to anchor.ots. */
+export declare function writeAnchorProof(tenant: string, proof: AnchorProof, home?: string): void;
+/** Overwrite the tenant index with `proofs` and refresh the raw .ots sidecar
+ *  from the most recent proof. Used by `anchor --upgrade` to update proofs in
+ *  place (idempotent) rather than appending duplicates. */
+export declare function replaceAnchorIndex(tenant: string, proofs: AnchorProof[], home?: string): void;
+export declare function readAnchorIndex(tenant: string, home?: string): AnchorProof[];
+/** Read an anchor index directly from a path (used by verify beside a trace). */
+export declare function readAnchorIndexAt(indexPath: string): AnchorProof[];
+/** The most recent proof recorded for a given head hash, if any. */
+export declare function findAnchorForHead(proofs: AnchorProof[], headHashHex: string): AnchorProof | null;
+//# sourceMappingURL=store.d.ts.map

package/dist/anchor/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/anchor/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAAsB,GAAG,MAAM,CAG9E;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAWxF;AAED;;2DAE2D;AAC3D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAY7F;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE,CAE5E;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CASlE;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAMhG"}