@agentguard-run/spend 0.15.8 → 0.15.10

package/README.md

@@ -251,6 +251,41 @@ Note: full Bitcoin-attestation verification requires the `opentimestamps` npm pa
 
 Each signed entry carries a monotonic per-tenant sequence number. `agentguard verify` and the `agentguard serve` integrity badge flag missing sequence numbers as `possible omitted actions: sequence gap at N` — evidence that an action may have been taken around the SDK and not logged, or that a logged entry was deleted. This is detection and reporting only; it never changes spend-cap enforcement.
 
+## Multi-agent DAG trust attestation
+
+Single receipts prove one agent's action. Real workflows are graphs: agents fan out, fan in, and hand capabilities to each other. A DAG Trust Attestation Token (TAT) is a signed receipt node that also records its parents, so a terminal agent can verify the whole causal chain before it acts. Each node carries version, timestamp, a truncated msg_hash of the screened payload, a trust score, a blocked flag, the screener id, the inferred topology (`linear` | `fan_in` | `fan_out` | `diamond`), the SHA-256 hashes of its parents, and an Ed25519 signature over the canonical serialization. It reuses the exact same signing and canonical-JSON hashing as the decision log, and it is metadata-only: no prompt, completion, key, or PII ever enters a node.
+
+`verifyReceiptDag` checks every signature, runs Kahn's algorithm to reject any cycle (the circular-dependency-injection defense), confirms diamond branches correlate to a shared uncorrupted ancestor, and returns the minimum-of-chain trust score with the DAG depth. `gateCapability` then turns that into an authorization: higher tiers (`READ_ONLY` < `TRANSACT` < `ADMIN` < `ORCHESTRATE`) require both higher min-of-chain trust and greater depth, so an agent cannot escalate on a shallow or low-trust chain.
+
+```ts
+import { signDagNode, verifyReceiptDag, gateCapability } from '@agentguard-run/spend';
+// or the subpath: '@agentguard-run/spend/receipts/dag'
+
+// Canonical diamond: A fans out to B and C, both fan in to terminal D.
+const a = await signDagNode({ sequence: 0, privateKey, publicKey, capability: 'READ_ONLY', trustScore: 0.96,
+  decision: { action: 'allow', agent: 'A', step: 'ingest_invoice' } });
+const b = await signDagNode({ sequence: 1, privateKey, publicKey, parents: [a], trustScore: 0.93,
+  decision: { action: 'allow', agent: 'B', step: 'analytics_score', ancestor: a.msgHash } });
+const c = await signDagNode({ sequence: 2, privateKey, publicKey, parents: [a], trustScore: 0.88,
+  decision: { action: 'allow', agent: 'C', step: 'validate_payment', ancestor: a.msgHash } });
+const d = await signDagNode({ sequence: 3, privateKey, publicKey, parents: [b, c], topology: 'diamond', trustScore: 0.91,
+  decision: { action: 'allow', agent: 'D', step: 'settle_invoice', capabilityClaim: 'payment_initiate' } });
+
+const result = await verifyReceiptDag([a, b, c, d], publicKey);
+// { valid: true, compositeTrust: 0.88, depth: 3, topologySummary: { diamond: 1, ... } }
+
+gateCapability('TRANSACT', result).granted;     // true  — trust + depth clear the bar
+gateCapability('ORCHESTRATE', result).granted;  // false — TRUST_BELOW_THRESHOLD
+```
+
+See it end-to-end (builds the diamond, verifies it, gates capabilities, and rejects an injected cycle):
+
+```bash
+agentguard dag-demo
+```
+
+For large agent swarms, `merkleRoot` / `compressReceiptDag` / `merkleInclusionProof` / `verifyInclusion` compress a DAG to a single root with per-node inclusion proofs. As with everything here, this is detection, verification, and reporting only: it never touches spend-cap enforcement.
+
 ## No proxy
 
 AgentGuard Spend is a library, not a gateway. It does not proxy traffic, store prompts, hold provider keys, or host policy state. The signed log lives in your storage.

package/dist/anchor/index.d.ts

@@ -13,8 +13,8 @@ import type { SignedDecisionLogEntry } from '../types';
 import type { TimestampAnchor } from './types';
 import { type OpenTimestampsAnchorOptions } from './opentimestamps';
 export type { AnchorProof, AnchorStatus, AnchorVerification, TimestampAnchor } from './types';
-export { OpenTimestampsAnchor, DEFAULT_OTS_CALENDARS, type OtsSubmit, type OpenTimestampsAnchorOptions } from './opentimestamps';
-export { writeAnchorProof, readAnchorIndex, readAnchorIndexAt, findAnchorForHead, anchorIndexPath, anchorProofPath, anchorDir, } from './store';
+export { OpenTimestampsAnchor, DEFAULT_OTS_CALENDARS, defaultOtsLib, type OtsSubmit, type OtsLib, type OtsBitcoinAttestation, type OpenTimestampsAnchorOptions, } from './opentimestamps';
+export { writeAnchorProof, replaceAnchorIndex, readAnchorIndex, readAnchorIndexAt, findAnchorForHead, anchorIndexPath, anchorProofPath, anchorDir, } from './store';
 /** Build a named anchor. Extend the switch as adapters are added. */
 export declare function createAnchor(type: string, options?: OpenTimestampsAnchorOptions): TimestampAnchor | null;
 /** Resolve the configured anchor from AGENTGUARD_ANCHOR, or null when unset. */

package/dist/anchor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/anchor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAwB,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE1F,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,KAAK,SAAS,EAAE,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACjI,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,SAAS,GACV,MAAM,SAAS,CAAC;AAEjB,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC,GAAG,eAAe,GAAG,IAAI,CAG5G;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,2BAAgC,GAAG,eAAe,GAAG,IAAI,CAIrG;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,sBAAsB,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAKhI;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAa9G"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/anchor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAwB,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE1F,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,EACb,KAAK,SAAS,EACd,KAAK,MAAM,EACX,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,SAAS,GACV,MAAM,SAAS,CAAC;AAEjB,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,2BAAgC,GAAG,eAAe,GAAG,IAAI,CAG5G;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,2BAAgC,GAAG,eAAe,GAAG,IAAI,CAIrG;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,sBAAsB,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAKhI;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAa9G"}

package/dist/anchor/index.js

@@ -11,7 +11,7 @@
  * 64/071,781; 64/071,789).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.anchorDir = exports.anchorProofPath = exports.anchorIndexPath = exports.findAnchorForHead = exports.readAnchorIndexAt = exports.readAnchorIndex = exports.writeAnchorProof = exports.DEFAULT_OTS_CALENDARS = exports.OpenTimestampsAnchor = void 0;
+exports.anchorDir = exports.anchorProofPath = exports.anchorIndexPath = exports.findAnchorForHead = exports.readAnchorIndexAt = exports.readAnchorIndex = exports.replaceAnchorIndex = exports.writeAnchorProof = exports.defaultOtsLib = exports.DEFAULT_OTS_CALENDARS = exports.OpenTimestampsAnchor = void 0;
 exports.createAnchor = createAnchor;
 exports.createAnchorFromEnv = createAnchorFromEnv;
 exports.chainHeadDigestHex = chainHeadDigestHex;
@@ -21,8 +21,10 @@ const opentimestamps_1 = require("./opentimestamps");
 var opentimestamps_2 = require("./opentimestamps");
 Object.defineProperty(exports, "OpenTimestampsAnchor", { enumerable: true, get: function () { return opentimestamps_2.OpenTimestampsAnchor; } });
 Object.defineProperty(exports, "DEFAULT_OTS_CALENDARS", { enumerable: true, get: function () { return opentimestamps_2.DEFAULT_OTS_CALENDARS; } });
+Object.defineProperty(exports, "defaultOtsLib", { enumerable: true, get: function () { return opentimestamps_2.defaultOtsLib; } });
 var store_1 = require("./store");
 Object.defineProperty(exports, "writeAnchorProof", { enumerable: true, get: function () { return store_1.writeAnchorProof; } });
+Object.defineProperty(exports, "replaceAnchorIndex", { enumerable: true, get: function () { return store_1.replaceAnchorIndex; } });
 Object.defineProperty(exports, "readAnchorIndex", { enumerable: true, get: function () { return store_1.readAnchorIndex; } });
 Object.defineProperty(exports, "readAnchorIndexAt", { enumerable: true, get: function () { return store_1.readAnchorIndexAt; } });
 Object.defineProperty(exports, "findAnchorForHead", { enumerable: true, get: function () { return store_1.findAnchorForHead; } });

package/dist/anchor/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/anchor/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAoBH,oCAGC;AAGD,kDAIC;AAQD,gDAKC;AAOD,sCAaC;AA7DD,mCAAoC;AAGpC,qDAA0F;AAG1F,mDAAiI;AAAxH,sHAAA,oBAAoB,OAAA;AAAE,uHAAA,qBAAqB,OAAA;AACpD,iCAQiB;AAPf,yGAAA,gBAAgB,OAAA;AAChB,wGAAA,eAAe,OAAA;AACf,0GAAA,iBAAiB,OAAA;AACjB,0GAAA,iBAAiB,OAAA;AACjB,wGAAA,eAAe,OAAA;AACf,wGAAA,eAAe,OAAA;AACf,kGAAA,SAAS,OAAA;AAGX,qEAAqE;AACrE,SAAgB,YAAY,CAAC,IAAY,EAAE,UAAuC,EAAE;IAClF,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,IAAI,qCAAoB,CAAC,OAAO,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAgB,mBAAmB,CAAC,UAAuC,EAAE;IAC3E,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxE,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,OAA8E;IAC/G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,GAAG,CAAC,CAAC;IACnE,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAAiE;IAC7F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/anchor/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA6BH,oCAGC;AAGD,kDAIC;AAQD,gDAKC;AAOD,sCAaC;AAtED,mCAAoC;AAGpC,qDAA0F;AAG1F,mDAQ0B;AAPxB,sHAAA,oBAAoB,OAAA;AACpB,uHAAA,qBAAqB,OAAA;AACrB,+GAAA,aAAa,OAAA;AAMf,iCASiB;AARf,yGAAA,gBAAgB,OAAA;AAChB,2GAAA,kBAAkB,OAAA;AAClB,wGAAA,eAAe,OAAA;AACf,0GAAA,iBAAiB,OAAA;AACjB,0GAAA,iBAAiB,OAAA;AACjB,wGAAA,eAAe,OAAA;AACf,wGAAA,eAAe,OAAA;AACf,kGAAA,SAAS,OAAA;AAGX,qEAAqE;AACrE,SAAgB,YAAY,CAAC,IAAY,EAAE,UAAuC,EAAE;IAClF,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,IAAI,qCAAoB,CAAC,OAAO,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAgB,mBAAmB,CAAC,UAAuC,EAAE;IAC3E,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxE,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,OAA8E;IAC/G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,GAAG,CAAC,CAAC;IACnE,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAAiE;IAC7F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,GAAiB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC"}

package/dist/anchor/opentimestamps.d.ts

@@ -2,26 +2,21 @@
  * OpenTimestamps anchor adapter.
  *
  * Submits ONLY the 32-byte SHA-256 of the chain head to one or more public
- * OpenTimestamps calendar servers and stores the returned commitment. Nothing
- * else leaves the process (zero data plane): a hash is submitted, a proof comes
- * back.
+ * OpenTimestamps calendar servers, stores the returned `.ots` proof, and can
+ * later upgrade that proof to a Bitcoin block attestation. Nothing else leaves
+ * the process (zero data plane): a hash is submitted, an `.ots` proof comes
+ * back. No decision content, policy, scope, amount, model identity, or key
+ * material is ever transmitted.
  *
- * IMPORTANT HONESTY NOTE (read before relying on this in production):
- * The canonical OpenTimestamps `.ots` serialization and the Bitcoin-attestation
- * *upgrade + verification* require the `opentimestamps` npm package, which is
- * NOT a dependency of this package today. Without it, this adapter:
- *   - DOES perform a real calendar submission (POST <calendar>/digest) and
- *     store the raw calendar response bytes, and
- *   - DOES bind the proof to the exact head hash it anchored,
- * but it does NOT parse the .ots structure or confirm the Bitcoin attestation.
- * Such proofs are therefore reported as `status: 'pending'` with
- * `attested: false`. The OTS wire/verification protocol is STUBBED pending the
- * `opentimestamps` dependency. We never fabricate an attested time.
- *
- * To complete the chain to Bitcoin: add `opentimestamps` and upgrade the stored
- * proof (`ots upgrade`), then `attestedAt` can be populated from the real
- * Bitcoin block time. This adapter reads `attestedAt` if present but never sets
- * it without a real upgrade.
+ * This adapter uses the real `opentimestamps` npm library through an injectable
+ * boundary (`OtsLib`), so:
+ *   - `anchor()` builds a `DetachedTimestampFile` from the raw digest, stamps it
+ *     against public calendars, and stores the serialized `.ots` bytes,
+ *   - `upgrade()` fetches the Bitcoin attestation when the calendars have it and
+ *     persists the upgraded `.ots` (idempotent),
+ *   - `verify()` reports `attested: true` with a real `when` ONLY when the `.ots`
+ *     proof actually carries a Bitcoin block-header attestation. A pending proof
+ *     stays pending. An attested time is NEVER fabricated.
  *
  * Patent notice: Protected by U.S. patent-pending technology
  * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
@@ -31,25 +26,61 @@ import type { AnchorProof, AnchorVerification, TimestampAnchor } from './types';
 /** Public OpenTimestamps calendar servers (aggregators). */
 export declare const DEFAULT_OTS_CALENDARS: string[];
 /**
- * Transport hook: submit a digest to one calendar, return the raw response
- * bytes (the calendar's commitment). Injectable for tests / private mirrors.
- * Should reject on network/HTTP failure.
+ * Result of inspecting an `.ots` proof for a Bitcoin attestation.
+ * `bitcoinAttested` is true iff the timestamp carries a Bitcoin block-header
+ * attestation; `attestedTimeSec` is the confirmed block time (unix seconds),
+ * only present when the attestation resolves to a real time.
+ */
+export interface OtsBitcoinAttestation {
+    bitcoinAttested: boolean;
+    attestedTimeSec?: number;
+    height?: number;
+}
+/**
+ * The `opentimestamps` library boundary. Injectable so tests are deterministic
+ * and never touch the network. Every method receives/returns raw bytes and the
+ * 32-byte digest only — zero data plane.
+ */
+export interface OtsLib {
+    /** Stamp a 32-byte SHA-256 digest against calendars; return the `.ots` bytes. */
+    stamp(sha256Digest: Uint8Array, calendars: string[]): Promise<Uint8Array>;
+    /** Upgrade stored `.ots` bytes (fetch Bitcoin attestation if available). Idempotent; returns the possibly-upgraded `.ots` bytes. */
+    upgrade(otsBytes: Uint8Array): Promise<Uint8Array>;
+    /** Inspect `.ots` bytes for the given digest. MUST throw if the proof's embedded file hash does not equal `sha256Digest`. */
+    verify(sha256Digest: Uint8Array, otsBytes: Uint8Array): Promise<OtsBitcoinAttestation>;
+}
+/**
+ * @deprecated Legacy calendar-POST transport hook. Superseded by the `OtsLib`
+ * boundary now that the real `opentimestamps` library is a dependency. Retained
+ * only so existing type imports keep compiling.
  */
 export type OtsSubmit = (calendarUrl: string, digest: Uint8Array) => Promise<Uint8Array>;
 export interface OpenTimestampsAnchorOptions {
     calendars?: string[];
-    /** Override the calendar transport (defaults to a real https POST). */
-    submit?: OtsSubmit;
-    /** Require at least one calendar to succeed. Defaults to true. */
-    requireCalendar?: boolean;
+    /** Override the OpenTimestamps library boundary (defaults to the real npm lib). */
+    lib?: OtsLib;
 }
+/**
+ * Default `OtsLib` backed by the real `opentimestamps` npm package. Lazily
+ * required so the SDK never pulls the library (or node:https) at import time in
+ * bundlers — only when an anchor is actually exercised.
+ */
+export declare function defaultOtsLib(): OtsLib;
 export declare class OpenTimestampsAnchor implements TimestampAnchor {
     readonly type = "opentimestamps";
     private readonly calendars;
-    private readonly submit;
-    private readonly requireCalendar;
+    private lazyLib;
     constructor(options?: OpenTimestampsAnchorOptions);
+    private lib;
+    private digestOf;
     anchor(headHashHex: string): Promise<AnchorProof>;
+    /**
+     * Fetch the Bitcoin attestation for a stored proof, if the calendars now have
+     * it, and return an updated proof. Idempotent: safe to call repeatedly. If the
+     * attestation is confirmable, `attestedAt` is set to the real Bitcoin block
+     * time and status becomes `complete`; otherwise the proof stays `pending`.
+     */
+    upgrade(proof: AnchorProof): Promise<AnchorProof>;
     verify(headHashHex: string, proof: AnchorProof): Promise<AnchorVerification>;
 }
 //# sourceMappingURL=opentimestamps.d.ts.map

package/dist/anchor/opentimestamps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opentimestamps.d.ts","sourceRoot":"","sources":["../../src/anchor/opentimestamps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAEhF,4DAA4D;AAC5D,eAAO,MAAM,qBAAqB,UAGjC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEzF,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,uEAAuE;IACvE,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,kEAAkE;IAClE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAiDD,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,QAAQ,CAAC,IAAI,oBAAoB;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;gBAE9B,OAAO,GAAE,2BAAgC;IAM/C,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAwCjD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAiCnF"}
+{"version":3,"file":"opentimestamps.d.ts","sourceRoot":"","sources":["../../src/anchor/opentimestamps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAEhF,4DAA4D;AAC5D,eAAO,MAAM,qBAAqB,UAGjC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,MAAM;IACrB,iFAAiF;IACjF,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1E,oIAAoI;IACpI,OAAO,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,6HAA6H;IAC7H,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACxF;AAED;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEzF,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAkBD;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAkEtC;AAED,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,QAAQ,CAAC,IAAI,oBAAoB;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,OAAO,CAAC,OAAO,CAAqB;gBAExB,OAAO,GAAE,2BAAgC;IAKrD,OAAO,CAAC,GAAG;IAKX,OAAO,CAAC,QAAQ;IAQV,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAmBvD;;;;;OAKG;IACG,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAoBjD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;CA2DnF"}

package/dist/anchor/opentimestamps.js

@@ -3,26 +3,21 @@
  * OpenTimestamps anchor adapter.
  *
  * Submits ONLY the 32-byte SHA-256 of the chain head to one or more public
- * OpenTimestamps calendar servers and stores the returned commitment. Nothing
- * else leaves the process (zero data plane): a hash is submitted, a proof comes
- * back.
+ * OpenTimestamps calendar servers, stores the returned `.ots` proof, and can
+ * later upgrade that proof to a Bitcoin block attestation. Nothing else leaves
+ * the process (zero data plane): a hash is submitted, an `.ots` proof comes
+ * back. No decision content, policy, scope, amount, model identity, or key
+ * material is ever transmitted.
  *
- * IMPORTANT HONESTY NOTE (read before relying on this in production):
- * The canonical OpenTimestamps `.ots` serialization and the Bitcoin-attestation
- * *upgrade + verification* require the `opentimestamps` npm package, which is
- * NOT a dependency of this package today. Without it, this adapter:
- *   - DOES perform a real calendar submission (POST <calendar>/digest) and
- *     store the raw calendar response bytes, and
- *   - DOES bind the proof to the exact head hash it anchored,
- * but it does NOT parse the .ots structure or confirm the Bitcoin attestation.
- * Such proofs are therefore reported as `status: 'pending'` with
- * `attested: false`. The OTS wire/verification protocol is STUBBED pending the
- * `opentimestamps` dependency. We never fabricate an attested time.
- *
- * To complete the chain to Bitcoin: add `opentimestamps` and upgrade the stored
- * proof (`ots upgrade`), then `attestedAt` can be populated from the real
- * Bitcoin block time. This adapter reads `attestedAt` if present but never sets
- * it without a real upgrade.
+ * This adapter uses the real `opentimestamps` npm library through an injectable
+ * boundary (`OtsLib`), so:
+ *   - `anchor()` builds a `DetachedTimestampFile` from the raw digest, stamps it
+ *     against public calendars, and stores the serialized `.ots` bytes,
+ *   - `upgrade()` fetches the Bitcoin attestation when the calendars have it and
+ *     persists the upgraded `.ots` (idempotent),
+ *   - `verify()` reports `attested: true` with a real `when` ONLY when the `.ots`
+ *     proof actually carries a Bitcoin block-header attestation. A pending proof
+ *     stays pending. An attested time is NEVER fabricated.
  *
  * Patent notice: Protected by U.S. patent-pending technology
  * (App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626;
@@ -30,6 +25,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OpenTimestampsAnchor = exports.DEFAULT_OTS_CALENDARS = void 0;
+exports.defaultOtsLib = defaultOtsLib;
 /** Public OpenTimestamps calendar servers (aggregators). */
 exports.DEFAULT_OTS_CALENDARS = [
     'https://alice.btc.calendar.opentimestamps.org',
@@ -45,88 +41,141 @@ function hexToBytes(hex) {
         out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
     return out;
 }
-/** Default transport: POST the raw digest bytes to <calendar>/digest over https. */
-const defaultSubmit = (calendarUrl, digest) => new Promise((resolve, reject) => {
-    // Lazy require so the SDK never pulls node:https at import time in bundlers.
-    // eslint-disable-next-line @typescript-eslint/no-var-requires
-    const https = require('https');
-    const url = new URL(calendarUrl.replace(/\/+$/, '') + '/digest');
-    const req = https.request({
-        hostname: url.hostname,
-        port: url.port || 443,
-        path: url.pathname,
-        method: 'POST',
-        headers: {
-            'Content-Type': 'application/octet-stream',
-            'Accept': 'application/vnd.opentimestamps.v1',
-            'Content-Length': digest.length,
-            'User-Agent': 'agentguard-spend',
+function bytesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    for (let i = 0; i < a.length; i++)
+        if (a[i] !== b[i])
+            return false;
+    return true;
+}
+/**
+ * Default `OtsLib` backed by the real `opentimestamps` npm package. Lazily
+ * required so the SDK never pulls the library (or node:https) at import time in
+ * bundlers — only when an anchor is actually exercised.
+ */
+function defaultOtsLib() {
+    let OTS;
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        OTS = require('opentimestamps');
+    }
+    catch {
+        throw new Error("Bitcoin timestamp anchoring requires the optional 'opentimestamps' package. " +
+            'Install it to enable this feature: npm i opentimestamps');
+    }
+    const { DetachedTimestampFile, Ops, Notary } = OTS;
+    const detachedFromHash = (digest) => DetachedTimestampFile.fromHash(new Ops.OpSHA256(), Array.from(digest));
+    const detachedFromOts = (otsBytes) => DetachedTimestampFile.deserialize(Array.from(otsBytes));
+    const toBytes = (detached) => Uint8Array.from(detached.serializeToBytes());
+    const hasBitcoinAttestation = (detached) => {
+        let found = false;
+        detached.timestamp.allAttestations().forEach((attestation) => {
+            if (attestation instanceof Notary.BitcoinBlockHeaderAttestation)
+                found = true;
+        });
+        return found;
+    };
+    return {
+        async stamp(sha256Digest, calendars) {
+            const detached = detachedFromHash(sha256Digest);
+            await OTS.stamp(detached, { calendars, m: calendars.length >= 2 ? 2 : 1 });
+            return toBytes(detached);
+        },
+        async upgrade(otsBytes) {
+            const detached = detachedFromOts(otsBytes);
+            await OTS.upgrade(detached);
+            return toBytes(detached);
         },
-    }, (res) => {
-        const chunks = [];
-        res.on('data', (c) => chunks.push(c));
-        res.on('end', () => {
-            if (res.statusCode && res.statusCode >= 200 && res.statusCode < 300) {
-                resolve(new Uint8Array(Buffer.concat(chunks)));
+        async verify(sha256Digest, otsBytes) {
+            const detached = detachedFromOts(otsBytes);
+            // Bind the proof to the supplied digest: the .ots embeds the file hash it
+            // was built from. A mismatch means this proof is not for this head.
+            if (!bytesEqual(Uint8Array.from(detached.fileDigest()), sha256Digest)) {
+                throw new Error('OTS proof file hash does not match the supplied digest');
             }
-            else {
-                reject(new Error(`OTS calendar ${calendarUrl} returned HTTP ${res.statusCode}`));
+            if (!hasBitcoinAttestation(detached)) {
+                return { bitcoinAttested: false };
             }
-        });
-    });
-    req.on('error', reject);
-    req.write(Buffer.from(digest));
-    req.end();
-});
+            // A Bitcoin attestation is present; resolve its block time. verifyTimestamp
+            // checks completed attestations only (no re-stamp) and returns
+            // { bitcoin: { timestamp, height } } when confirmable.
+            const result = await OTS.verifyTimestamp(detached.timestamp, {});
+            const btc = result && (result.bitcoin || result.Bitcoin);
+            if (btc && typeof btc.timestamp === 'number') {
+                return { bitcoinAttested: true, attestedTimeSec: btc.timestamp, height: btc.height };
+            }
+            // Attestation present but time not resolvable right now (e.g. explorer
+            // unreachable). Report attested-but-timeless; callers keep it pending
+            // rather than inventing a time.
+            return { bitcoinAttested: true };
+        },
+    };
+}
 class OpenTimestampsAnchor {
     type = 'opentimestamps';
     calendars;
-    submit;
-    requireCalendar;
+    lazyLib;
     constructor(options = {}) {
         this.calendars = options.calendars ?? exports.DEFAULT_OTS_CALENDARS;
-        this.submit = options.submit ?? defaultSubmit;
-        this.requireCalendar = options.requireCalendar ?? true;
+        this.lazyLib = options.lib;
     }
-    async anchor(headHashHex) {
+    lib() {
+        if (!this.lazyLib)
+            this.lazyLib = defaultOtsLib();
+        return this.lazyLib;
+    }
+    digestOf(headHashHex) {
         const digest = hexToBytes(headHashHex);
         if (digest.length !== 32) {
             throw new Error('OpenTimestampsAnchor: chain head digest must be SHA-256 (32 bytes)');
         }
-        const responses = [];
-        const used = [];
-        const errors = [];
-        for (const calendar of this.calendars) {
-            try {
-                const bytes = await this.submit(calendar, digest);
-                responses.push(bytes);
-                used.push(calendar);
-            }
-            catch (err) {
-                errors.push(`${calendar}: ${err instanceof Error ? err.message : String(err)}`);
-            }
-        }
-        if (responses.length === 0 && this.requireCalendar) {
-            throw new Error('OpenTimestampsAnchor: no calendar accepted the digest: ' + errors.join('; '));
-        }
-        // Concatenate raw calendar commitments length-prefixed so verify can bind
-        // them back to the head. This is NOT a canonical .ots file — see the module
-        // note. It is a real, non-fabricated record of what each calendar returned.
-        const proofBytes = concatLengthPrefixed(responses);
+        return digest;
+    }
+    async anchor(headHashHex) {
+        const digest = this.digestOf(headHashHex);
+        const otsBytes = await this.lib().stamp(digest, this.calendars);
         return {
             version: 1,
             anchorType: this.type,
             headHashHex: headHashHex.trim().toLowerCase(),
             submittedAt: new Date().toISOString(),
-            proof: Buffer.from(proofBytes).toString('base64'),
+            proof: Buffer.from(otsBytes).toString('base64'),
             status: 'pending',
-            calendars: used,
+            calendars: this.calendars.slice(),
             attestedAt: null,
-            note: 'Calendar commitment stored. Bitcoin attestation upgrade + verification ' +
-                'require the `opentimestamps` npm package (not bundled); OTS .ots ' +
-                'serialization is stubbed pending that dependency. Only a SHA-256 hash was sent.',
+            note: 'OpenTimestamps .ots proof stored. Bitcoin attestation not yet confirmed; ' +
+                "run 'agentguard anchor --upgrade' once the calendars have committed the " +
+                'digest to a Bitcoin block. Only a 32-byte SHA-256 hash was transmitted.',
         };
     }
+    /**
+     * Fetch the Bitcoin attestation for a stored proof, if the calendars now have
+     * it, and return an updated proof. Idempotent: safe to call repeatedly. If the
+     * attestation is confirmable, `attestedAt` is set to the real Bitcoin block
+     * time and status becomes `complete`; otherwise the proof stays `pending`.
+     */
+    async upgrade(proof) {
+        if (proof.anchorType !== this.type)
+            return proof;
+        const digest = this.digestOf(proof.headHashHex);
+        const current = Uint8Array.from(Buffer.from(proof.proof, 'base64'));
+        const upgraded = await this.lib().upgrade(current);
+        const next = { ...proof, proof: Buffer.from(upgraded).toString('base64') };
+        const info = await this.lib().verify(digest, upgraded);
+        if (info.bitcoinAttested && typeof info.attestedTimeSec === 'number') {
+            next.attestedAt = new Date(info.attestedTimeSec * 1000).toISOString();
+            next.status = 'complete';
+            next.note =
+                'OpenTimestamps .ots proof upgraded: chain head committed to Bitcoin' +
+                    (typeof info.height === 'number' ? ` block ${info.height}` : '') + '.';
+        }
+        else {
+            next.attestedAt = proof.attestedAt ?? null;
+            next.status = 'pending';
+        }
+        return next;
+    }
     async verify(headHashHex, proof) {
         const head = headHashHex.trim().toLowerCase();
         if (proof.anchorType !== this.type) {
@@ -141,39 +190,50 @@ class OpenTimestampsAnchor {
                 detail: 'proof does not bind the supplied chain head hash',
             };
         }
-        // A real Bitcoin-attested upgrade populates attestedAt; we trust it only if
-        // present (never synthesised here).
+        let digest;
+        try {
+            digest = this.digestOf(head);
+        }
+        catch (err) {
+            return { ok: false, status: 'invalid', when: null, attested: false, detail: err instanceof Error ? err.message : String(err) };
+        }
+        const hasProofBytes = typeof proof.proof === 'string' && proof.proof.length > 0;
+        if (!hasProofBytes) {
+            return { ok: false, status: 'invalid', when: null, attested: false, detail: 'proof carries no .ots commitment' };
+        }
+        let info;
+        try {
+            const otsBytes = Uint8Array.from(Buffer.from(proof.proof, 'base64'));
+            info = await this.lib().verify(digest, otsBytes);
+        }
+        catch (err) {
+            return {
+                ok: false,
+                status: 'invalid',
+                when: null,
+                attested: false,
+                detail: `OTS proof did not verify against this head: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        // attested:true is gated SOLELY on the .ots carrying a Bitcoin block
+        // attestation that resolves to a real block time. Never fabricated.
+        if (info.bitcoinAttested && typeof info.attestedTimeSec === 'number') {
+            return { ok: true, status: 'complete', when: new Date(info.attestedTimeSec * 1000).toISOString(), attested: true };
+        }
+        // A previously-recorded, real upgrade may have persisted attestedAt; trust it
+        // (we only ever set it from a genuine Bitcoin block time).
         if (proof.attestedAt) {
             return { ok: true, status: 'complete', when: proof.attestedAt, attested: true };
         }
-        const hasCommitment = typeof proof.proof === 'string' && proof.proof.length > 0;
-        if (!hasCommitment && !(proof.calendars && proof.calendars.length > 0)) {
-            return { ok: false, status: 'invalid', when: null, attested: false, detail: 'proof carries no calendar commitment' };
-        }
         return {
             ok: true,
             status: 'pending',
             when: proof.submittedAt ?? null,
             attested: false,
-            detail: 'Calendar commitment present for this head hash; Bitcoin attestation not yet ' +
-                'confirmed (requires `opentimestamps` upgrade). `when` is the submission time, not an attested time.',
+            detail: 'OpenTimestamps .ots commitment present for this head hash; Bitcoin attestation ' +
+                'not yet confirmed (run `anchor --upgrade`). `when` is the submission time, not an attested time.',
         };
     }
 }
 exports.OpenTimestampsAnchor = OpenTimestampsAnchor;
-function concatLengthPrefixed(chunks) {
-    let total = 0;
-    for (const c of chunks)
-        total += 4 + c.length;
-    const out = new Uint8Array(total);
-    const view = new DataView(out.buffer);
-    let offset = 0;
-    for (const c of chunks) {
-        view.setUint32(offset, c.length, false);
-        offset += 4;
-        out.set(c, offset);
-        offset += c.length;
-    }
-    return out;
-}
 //# sourceMappingURL=opentimestamps.js.map

package/dist/anchor/opentimestamps.js.map

@@ -1 +1 @@
-{"version":3,"file":"opentimestamps.js","sourceRoot":"","sources":["../../src/anchor/opentimestamps.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AAIH,4DAA4D;AAC/C,QAAA,qBAAqB,GAAG;IACnC,+CAA+C;IAC/C,6CAA6C;CAC9C,CAAC;AAiBF,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,aAAa,GAAc,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CACvD,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC1C,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAA2B,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CACvB;QACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG;QACrB,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,QAAQ,EAAE,mCAAmC;YAC7C,gBAAgB,EAAE,MAAM,CAAC,MAAM;YAC/B,YAAY,EAAE,kBAAkB;SACjC;KACF,EACD,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,WAAW,kBAAkB,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC,CAAC,CAAC;AAEL,MAAa,oBAAoB;IACtB,IAAI,GAAG,gBAAgB,CAAC;IAChB,SAAS,CAAW;IACpB,MAAM,CAAY;IAClB,eAAe,CAAU;IAE1C,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,6BAAqB,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,SAAS,GAAiB,EAAE,CAAC;QACnC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,yDAAyD,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YAC7C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACjD,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,IAAI,EACF,yEAAyE;gBACzE,mEAAmE;gBACnE,iFAAiF;SACpF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,KAAkB;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5G,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,kDAAkD;aAC3D,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,oCAAoC;QACpC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAClF,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAChF,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QACvH,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YAC/B,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,8EAA8E;gBAC9E,qGAAqG;SACxG,CAAC;IACJ,CAAC;CACF;AArFD,oDAqFC;AAED,SAAS,oBAAoB,CAAC,MAAoB;IAChD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,CAAC;QACZ,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"opentimestamps.js","sourceRoot":"","sources":["../../src/anchor/opentimestamps.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAsEH,sCAkEC;AApID,4DAA4D;AAC/C,QAAA,qBAAqB,GAAG;IACnC,+CAA+C;IAC/C,6CAA6C;CAC9C,CAAC;AAyCF,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa;IAC3B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,8DAA8D;QAC9D,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,8EAA8E;YAC5E,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEnD,MAAM,gBAAgB,GAAG,CAAC,MAAkB,EAAE,EAAE,CAC9C,qBAAqB,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEzE,MAAM,eAAe,GAAG,CAAC,QAAoB,EAAE,EAAE,CAC/C,qBAAqB,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,CAAC,QAAa,EAAc,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE5F,MAAM,qBAAqB,GAAG,CAAC,QAAa,EAAW,EAAE;QACvD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC,WAAgB,EAAE,EAAE;YAChE,IAAI,WAAW,YAAY,MAAM,CAAC,6BAA6B;gBAAE,KAAK,GAAG,IAAI,CAAC;QAChF,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS;YACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3E,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,QAAQ;YACpB,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ;YACjC,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3C,0EAA0E;YAC1E,oEAAoE;YACpE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACpC,CAAC;YACD,4EAA4E;YAC5E,+DAA+D;YAC/D,uDAAuD;YACvD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC7C,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YACvF,CAAC;YACD,uEAAuE;YACvE,sEAAsE;YACtE,gCAAgC;YAChC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAa,oBAAoB;IACtB,IAAI,GAAG,gBAAgB,CAAC;IAChB,SAAS,CAAW;IAC7B,OAAO,CAAqB;IAEpC,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,6BAAqB,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC7B,CAAC;IAEO,GAAG;QACT,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,aAAa,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,QAAQ,CAAC,WAAmB;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,OAAO;YACL,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YAC7C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/C,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YACjC,UAAU,EAAE,IAAI;YAChB,IAAI,EACF,2EAA2E;gBAC3E,0EAA0E;gBAC1E,yEAAyE;SAC5E,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,KAAkB;QAC9B,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,IAAI,GAAgB,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,eAAe,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YACrE,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACtE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;YACzB,IAAI,CAAC,IAAI;gBACP,qEAAqE;oBACrE,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC;YAC3C,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,KAAkB;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5G,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,kDAAkD;aAC3D,CAAC;QACJ,CAAC;QACD,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACjI,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAChF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;QACnH,CAAC;QAED,IAAI,IAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACrE,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC1G,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,IAAI,CAAC,eAAe,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACrH,CAAC;QACD,8EAA8E;QAC9E,2DAA2D;QAC3D,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAClF,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YAC/B,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,iFAAiF;gBACjF,kGAAkG;SACrG,CAAC;IACJ,CAAC;CACF;AA/HD,oDA+HC"}

package/dist/anchor/store.d.ts

@@ -17,6 +17,10 @@ export declare function anchorIndexPath(tenant: string, home?: string): string;
 export declare function anchorProofPath(tenant: string, home?: string): string;
 /** Append a proof to the tenant index and write its raw bytes to anchor.ots. */
 export declare function writeAnchorProof(tenant: string, proof: AnchorProof, home?: string): void;
+/** Overwrite the tenant index with `proofs` and refresh the raw .ots sidecar
+ *  from the most recent proof. Used by `anchor --upgrade` to update proofs in
+ *  place (idempotent) rather than appending duplicates. */
+export declare function replaceAnchorIndex(tenant: string, proofs: AnchorProof[], home?: string): void;
 export declare function readAnchorIndex(tenant: string, home?: string): AnchorProof[];
 /** Read an anchor index directly from a path (used by verify beside a trace). */
 export declare function readAnchorIndexAt(indexPath: string): AnchorProof[];

package/dist/anchor/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/anchor/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAAsB,GAAG,MAAM,CAG9E;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAWxF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE,CAE5E;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CASlE;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAMhG"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/anchor/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAAsB,GAAG,MAAM,CAG9E;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAWxF;AAED;;2DAE2D;AAC3D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAY7F;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE,CAE5E;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CASlE;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAMhG"}