@framers/agentos-ext-anchor-providers 1.1.0 → 1.2.1

package/dist/providers/EthereumProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"EthereumProvider.js","sourceRoot":"","sources":["../../src/providers/EthereumProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAehE,MAAM,OAAO,gBAAgB;IAClB,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,0BAA0B,CAAC;IAClC,UAAU,GAAe,sBAAsB,CAAC;IAExC,MAAM,CAAyB;IAC/B,UAAU,CAA+B;IAE1D,YAAY,MAA8B;QACxC,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,CAAC;YACV,GAAG,MAAM;SACV,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,0CAA0C;QAC1C,EAAE;QACF,0BAA0B;QAC1B,wEAAwE;QACxE,yDAAyD;QACzD,oEAAoE;QACpE,kCAAkC;QAClC,yEAAyE;QACzE,mCAAmC;QACnC,6CAA6C;QAC7C,6DAA6D;QAC7D,qDAAqD;QACrD,wEAAwE;QACxE,wEAAwE;QACxE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,2CAA2C;gBAC3C,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,kEAAkE;QAClE,8CAA8C;QAC9C,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO;QACX,qEAAqE;IACvE,CAAC;CACF"}
+{"version":3,"file":"EthereumProvider.js","sourceRoot":"","sources":["../../src/providers/EthereumProvider.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAiBhE;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,CAAC,qCAAqC,CAAC,CAAC;AAEpE,MAAM,OAAO,gBAAgB;IAClB,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,0BAA0B,CAAC;IAClC,UAAU,GAAe,sBAAsB,CAAC;IAExC,MAAM,CAIrB;IACe,UAAU,CAA+B;IAE1D,oDAAoD;IAC5C,cAAc,GAAQ,IAAI,CAAC;IACnC,sEAAsE;IAC9D,YAAY,GAAQ,IAAI,CAAC;IAEjC,YAAY,MAA8B;QACxC,IAAI,CAAC,MAAM,GAAG;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;YAC5B,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;YACxC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;YAC1C,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAClC,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,0EAA0E;gBACjF,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;aAC3C,CAAC;QACJ,CAAC;QAED,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjD,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,KAAK,SAAS,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,UAAe,CAAC;YAEpB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;gBAChC,yDAAyD;gBACzD,+CAA+C;gBAC/C,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;gBAC/F,MAAM,SAAS,GAA4B,EAAE,CAAC;gBAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAAE,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAClF,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,+DAA+D;gBAC/D,8DAA8D;gBAC9D,6DAA6D;gBAC7D,MAAM,EAAE,GAA4B;oBAClC,EAAE,EAAE,MAAM,MAAM,CAAC,UAAU,EAAE;oBAC7B,KAAK,EAAE,EAAE;oBACT,IAAI,EAAE,OAAO;iBACd,CAAC;gBACF,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAAE,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC3E,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACjE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,uCAAuC;oBAC9C,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;iBACpE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE;gBAC5E,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,QAAQ,EAAE;oBACR,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBAC5B,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI;oBACvC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;oBACpC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;oBAC5C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;iBAC5D;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,gCAAgC,OAAO,EAAE;gBAChD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1D,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iCAAiC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,qDAAqD;QAE9F,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;YACnF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAEnD,oEAAoE;YACpE,sEAAsE;YACtE,sCAAsC;YACtC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7E,MAAM,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAE7C,mEAAmE;YACnE,sEAAsE;YACtE,kEAAkE;YAClE,EAAE;YACF,uEAAuE;YACvE,qEAAqE;YACrE,+DAA+D;YAC/D,EAAE;YACF,gEAAgE;YAChE,iEAAiE;YACjE,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;gBACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;gBACtE,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC1E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACtD,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAY,CAAC,WAAW,EAAE,CAAC;gBACxD,OAAO,MAAM,KAAK,WAAW,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,cAAc,IAAI,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC7E,IAAI,CAAC;gBACH,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,UAAU,GAAG,QAAQ,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YACrC,gEAAgE;YAChE,qEAAqE;YACrE,kCAAkC;YAClC,OAAQ,GAAW,CAAC,MAAM,IAAI,GAAG,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,oDAAoD;gBAClD,0DAA0D,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,MAAW;QAC7B,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC;QACpD,iEAAiE;QACjE,oEAAoE;QACpE,+DAA+D;QAC/D,kEAAkE;QAClE,sBAAsB;QACtB,IAAI,CAAC,cAAc,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACxF,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1D,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,WAAW,CAAI,EAAoB;QAC/C,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAI;gBAC3B,EAAE,EAAE;gBACJ,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC3B,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,EAClF,IAAI,CAAC,MAAM,CAAC,SAAS,CACtB,CAAC;gBACJ,CAAC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,SAAS,CAAI,EAAoB;QAC7C,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,SAAS,GAAG,CAAC,CAAC;gBACd,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAClC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAW;QACjC,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF"}

package/dist/providers/OpenTimestampsProvider.d.ts

@@ -1,10 +1,21 @@
 /**
  * @file OpenTimestampsProvider.ts
  * @description Bitcoin-anchored timestamping via the OpenTimestamps protocol.
- * Creates OTS timestamps for anchor Merkle roots and submits to calendar servers.
+ *
+ * Submits a SHA-256 digest to one or more OpenTimestamps calendar servers
+ * via HTTP `POST /digest` and stores the calendars' binary attestations
+ * as base64. Each attestation eventually commits to a Bitcoin block via
+ * the calendar's own Merkle aggregation (typically 1–2 hours after
+ * submission); the verify path here is a non-Bitcoin "weak" verification
+ * that confirms a stored attestation was produced by a reachable calendar
+ * for the supplied hash.
+ *
+ * For full Bitcoin-anchor verification, parse the stored base64 with the
+ * `javascript-opentimestamps` library and call its `verify()` against a
+ * Bitcoin node or block explorer.
  *
  * Proof level: `publicly-timestamped`
- * Required peer dependency: `opentimestamps`
+ * Required dependencies: none (uses global `fetch`).
  *
  * @module @framers/agentos-ext-anchor-providers
  */
@@ -13,6 +24,12 @@ import type { BaseProviderConfig } from '../types.js';
 export interface OpenTimestampsProviderConfig extends BaseProviderConfig {
     /** OTS calendar server URLs. Default: public OpenTimestamps calendars. */
     calendarUrls?: string[];
+    /**
+     * Whether `publish()` requires every calendar in `calendarUrls` to succeed.
+     * Default `false`: any single calendar response is enough to consider the
+     * publish successful. Set `true` for higher independence guarantees.
+     */
+    requireAllCalendars?: boolean;
 }
 export declare class OpenTimestampsProvider implements AnchorProvider {
     readonly id = "opentimestamps";
@@ -22,6 +39,13 @@ export declare class OpenTimestampsProvider implements AnchorProvider {
     private readonly baseConfig;
     constructor(config?: OpenTimestampsProviderConfig);
     publish(anchor: AnchorRecord): Promise<AnchorProviderResult>;
+    /**
+     * Weak verification: re-derive the canonical anchor digest, decode the
+     * stored OTS payload, and confirm at least one stored attestation hash
+     * matches what the corresponding calendar serves today. This is NOT a
+     * full Bitcoin-block verification — for that, parse the base64 with
+     * `javascript-opentimestamps` and run its `verify()` against Bitcoin.
+     */
     verify(anchor: AnchorRecord): Promise<boolean>;
     dispose(): Promise<void>;
 }

package/dist/providers/OpenTimestampsProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OpenTimestampsProvider.d.ts","sourceRoot":"","sources":["../../src/providers/OpenTimestampsProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAItD,MAAM,WAAW,4BAA6B,SAAQ,kBAAkB;IACtE,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAQD,qBAAa,sBAAuB,YAAW,cAAc;IAC3D,QAAQ,CAAC,EAAE,oBAAoB;IAC/B,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAA0B;IAEzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;gBAE9C,MAAM,GAAE,4BAAiC;IAU/C,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA6B5D,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}
+{"version":3,"file":"OpenTimestampsProvider.d.ts","sourceRoot":"","sources":["../../src/providers/OpenTimestampsProvider.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAKtD,MAAM,WAAW,4BAA6B,SAAQ,kBAAkB;IACtE,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAgCD,qBAAa,sBAAuB,YAAW,cAAc;IAC3D,QAAQ,CAAC,EAAE,oBAAoB;IAC/B,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAA0B;IAEzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;gBAE9C,MAAM,GAAE,4BAAiC;IAW/C,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0FlE;;;;;;OAMG;IACG,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IA4C9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}

package/dist/providers/OpenTimestampsProvider.js

@@ -1,20 +1,41 @@
+// @ts-nocheck
 /**
  * @file OpenTimestampsProvider.ts
  * @description Bitcoin-anchored timestamping via the OpenTimestamps protocol.
- * Creates OTS timestamps for anchor Merkle roots and submits to calendar servers.
+ *
+ * Submits a SHA-256 digest to one or more OpenTimestamps calendar servers
+ * via HTTP `POST /digest` and stores the calendars' binary attestations
+ * as base64. Each attestation eventually commits to a Bitcoin block via
+ * the calendar's own Merkle aggregation (typically 1–2 hours after
+ * submission); the verify path here is a non-Bitcoin "weak" verification
+ * that confirms a stored attestation was produced by a reachable calendar
+ * for the supplied hash.
+ *
+ * For full Bitcoin-anchor verification, parse the stored base64 with the
+ * `javascript-opentimestamps` library and call its `verify()` against a
+ * Bitcoin node or block explorer.
  *
  * Proof level: `publicly-timestamped`
- * Required peer dependency: `opentimestamps`
+ * Required dependencies: none (uses global `fetch`).
  *
  * @module @framers/agentos-ext-anchor-providers
  */
+import { createHash } from 'node:crypto';
 import { resolveBaseConfig } from '../types.js';
+import { fetchWithRetry } from '../utils/http-client.js';
 import { hashCanonicalAnchor } from '../utils/serialization.js';
 const DEFAULT_CALENDAR_URLS = [
     'https://a.pool.opentimestamps.org',
     'https://b.pool.opentimestamps.org',
     'https://a.pool.eternitywall.com',
 ];
+/**
+ * Convert a hex string into a Buffer of raw bytes. Used to send the SHA-256
+ * digest binary in the calendar POST body.
+ */
+function hexToBuffer(hex) {
+    return Buffer.from(hex, 'hex');
+}
 export class OpenTimestampsProvider {
     id = 'opentimestamps';
     name = 'OpenTimestamps (Bitcoin)';
@@ -24,6 +45,7 @@ export class OpenTimestampsProvider {
     constructor(config = {}) {
         this.config = {
             calendarUrls: config.calendarUrls ?? DEFAULT_CALENDAR_URLS,
+            requireAllCalendars: config.requireAllCalendars ?? false,
             timeoutMs: config.timeoutMs ?? 30_000,
             retries: config.retries ?? 3,
             retryDelayMs: config.retryDelayMs ?? 1_000,
@@ -31,42 +53,135 @@ export class OpenTimestampsProvider {
         this.baseConfig = resolveBaseConfig(config);
     }
     async publish(anchor) {
-        // TODO: Implement using opentimestamps npm package
-        //
-        // Implementation outline:
-        //   1. Compute SHA-256 of canonical anchor: hashCanonicalAnchor(anchor)
-        //   2. Create a DetachedTimestampFile from the hash
-        //   3. Submit to calendar servers: OpenTimestamps.stamp(detached, { calendars })
-        //   4. Serialize the OTS proof to base64
-        //   5. Return { success: true, externalRef: `ots:${base64Proof}`,
-        //              metadata: { calendarUrls, pendingAttestation: true } }
-        //
-        // Note: OTS proofs are initially "pending" — they confirm after a Bitcoin block
-        // includes the calendar commitment (typically 1-2 hours). A separate verification
-        // step can upgrade pending proofs to confirmed.
-        try {
-            const _hash = await hashCanonicalAnchor(anchor);
-            throw new Error('OpenTimestampsProvider is not yet implemented. ' +
-                'Install opentimestamps and implement the Bitcoin timestamping integration.');
+        const digestHex = await hashCanonicalAnchor(anchor);
+        const digestBuf = hexToBuffer(digestHex);
+        const attestations = [];
+        const errors = [];
+        for (const calendarUrl of this.config.calendarUrls) {
+            const submitUrl = `${calendarUrl.replace(/\/$/, '')}/digest`;
+            try {
+                const response = await fetchWithRetry(submitUrl, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                    body: digestBuf,
+                }, {
+                    timeoutMs: this.config.timeoutMs,
+                    retries: this.config.retries,
+                    retryDelayMs: this.config.retryDelayMs,
+                });
+                if (!response.ok) {
+                    errors.push({
+                        calendar: calendarUrl,
+                        message: `HTTP ${response.status} ${response.statusText}`,
+                    });
+                    continue;
+                }
+                const bytes = Buffer.from(await response.arrayBuffer());
+                attestations.push({
+                    calendarUrl,
+                    attestationBase64: bytes.toString('base64'),
+                    attestationHash: createHash('sha256').update(bytes).digest('hex'),
+                });
+            }
+            catch (e) {
+                errors.push({
+                    calendar: calendarUrl,
+                    message: e instanceof Error ? e.message : String(e),
+                });
+            }
         }
-        catch (e) {
+        const total = this.config.calendarUrls.length;
+        const succeeded = attestations.length;
+        const meetsThreshold = this.config.requireAllCalendars
+            ? succeeded === total
+            : succeeded > 0;
+        if (!meetsThreshold) {
             return {
                 providerId: this.id,
                 success: false,
-                error: e instanceof Error ? e.message : String(e),
+                error: `OpenTimestamps calendar submission failed (${succeeded}/${total} succeeded${errors.length ? `; first error: ${errors[0]?.message}` : ''})`,
+                metadata: {
+                    digestHex,
+                    attemptedCalendars: this.config.calendarUrls,
+                    errors,
+                },
             };
         }
+        const externalPayload = {
+            digestSha256: digestHex,
+            attestations,
+            submittedAt: new Date().toISOString(),
+        };
+        return {
+            providerId: this.id,
+            success: true,
+            // externalRef carries the entire OTS payload. Use the `ots:` prefix
+            // so it is unambiguously distinguishable from other provider refs
+            // (e.g. `eth:`, `s3://`, `solana:`) when stored on AnchorRecord.
+            externalRef: `ots:${Buffer.from(JSON.stringify(externalPayload), 'utf-8').toString('base64')}`,
+            publishedAt: externalPayload.submittedAt,
+            metadata: {
+                digestSha256: digestHex,
+                calendarsContacted: attestations.map((a) => a.calendarUrl),
+                calendarsFailed: errors.map((e) => e.calendar),
+                pendingBitcoinAttestation: true,
+                succeeded,
+                total,
+            },
+        };
     }
+    /**
+     * Weak verification: re-derive the canonical anchor digest, decode the
+     * stored OTS payload, and confirm at least one stored attestation hash
+     * matches what the corresponding calendar serves today. This is NOT a
+     * full Bitcoin-block verification — for that, parse the base64 with
+     * `javascript-opentimestamps` and run its `verify()` against Bitcoin.
+     */
     async verify(anchor) {
-        // TODO: Deserialize OTS proof from externalRef, call OpenTimestamps.verify()
-        //   Returns true if the proof is confirmed by a Bitcoin block
-        if (!anchor.externalRef)
+        if (!anchor.externalRef?.startsWith('ots:'))
+            return false;
+        let payload;
+        try {
+            const json = Buffer.from(anchor.externalRef.slice('ots:'.length), 'base64').toString('utf-8');
+            payload = JSON.parse(json);
+        }
+        catch {
             return false;
-        console.warn('[OpenTimestampsProvider] verify() is not yet implemented');
+        }
+        const digestHex = await hashCanonicalAnchor(anchor);
+        if (payload.digestSha256 !== digestHex)
+            return false;
+        // Re-submit to the first reachable calendar; if it returns the same
+        // attestation bytes the original submission still aligns with the
+        // calendar's commitment. This is "weak" because a calendar could
+        // re-serve a tampered timestamp; for strong proof use the OTS library.
+        const digestBuf = hexToBuffer(digestHex);
+        for (const attestation of payload.attestations) {
+            try {
+                const response = await fetchWithRetry(`${attestation.calendarUrl.replace(/\/$/, '')}/digest`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                    body: digestBuf,
+                }, {
+                    timeoutMs: this.config.timeoutMs,
+                    retries: this.config.retries,
+                    retryDelayMs: this.config.retryDelayMs,
+                });
+                if (!response.ok)
+                    continue;
+                const bytes = Buffer.from(await response.arrayBuffer());
+                const reHash = createHash('sha256').update(bytes).digest('hex');
+                if (reHash === attestation.attestationHash)
+                    return true;
+            }
+            catch {
+                // Try the next calendar.
+            }
+        }
         return false;
     }
     async dispose() {
-        // No persistent resources in current implementation
+        // No persistent resources.
     }
 }
 //# sourceMappingURL=OpenTimestampsProvider.js.map

package/dist/providers/OpenTimestampsProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"OpenTimestampsProvider.js","sourceRoot":"","sources":["../../src/providers/OpenTimestampsProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAOhE,MAAM,qBAAqB,GAAG;IAC5B,mCAAmC;IACnC,mCAAmC;IACnC,iCAAiC;CAClC,CAAC;AAEF,MAAM,OAAO,sBAAsB;IACxB,EAAE,GAAG,gBAAgB,CAAC;IACtB,IAAI,GAAG,0BAA0B,CAAC;IAClC,UAAU,GAAe,sBAAsB,CAAC;IAExC,MAAM,CAAyC;IAC/C,UAAU,CAA+B;IAE1D,YAAY,SAAuC,EAAE;QACnD,IAAI,CAAC,MAAM,GAAG;YACZ,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;YAC1D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;SAC3C,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,mDAAmD;QACnD,EAAE;QACF,0BAA0B;QAC1B,wEAAwE;QACxE,oDAAoD;QACpD,iFAAiF;QACjF,yCAAyC;QACzC,kEAAkE;QAClE,sEAAsE;QACtE,EAAE;QACF,gFAAgF;QAChF,kFAAkF;QAClF,gDAAgD;QAChD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,iDAAiD;gBACjD,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,6EAA6E;QAC7E,8DAA8D;QAC9D,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO;QACX,oDAAoD;IACtD,CAAC;CACF"}
+{"version":3,"file":"OpenTimestampsProvider.js","sourceRoot":"","sources":["../../src/providers/OpenTimestampsProvider.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAahE,MAAM,qBAAqB,GAAG;IAC5B,mCAAmC;IACnC,mCAAmC;IACnC,iCAAiC;CAClC,CAAC;AAkBF;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,OAAO,sBAAsB;IACxB,EAAE,GAAG,gBAAgB,CAAC;IACtB,IAAI,GAAG,0BAA0B,CAAC;IAClC,UAAU,GAAe,sBAAsB,CAAC;IAExC,MAAM,CAAyC;IAC/C,UAAU,CAA+B;IAE1D,YAAY,SAAuC,EAAE;QACnD,IAAI,CAAC,MAAM,GAAG;YACZ,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;YAC1D,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,KAAK;YACxD,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;SAC3C,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAEzC,MAAM,YAAY,GAA0B,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAiD,EAAE,CAAC;QAEhE,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,SAAS,EACT;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;oBAChE,IAAI,EAAE,SAAS;iBAChB,EACD;oBACE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;oBAChC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBAC5B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;iBACvC,CACF,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,WAAW;wBACrB,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;qBAC1D,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;gBACxD,YAAY,CAAC,IAAI,CAAC;oBAChB,WAAW;oBACX,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC3C,eAAe,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAClE,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,WAAW;oBACrB,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAC9C,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,CAAC,CAAC,SAAS,KAAK,KAAK;YACrB,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAElB,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,8CAA8C,SAAS,IAAI,KAAK,aACrE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAC3D,GAAG;gBACH,QAAQ,EAAE;oBACR,SAAS;oBACT,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;oBAC5C,MAAM;iBACP;aACF,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAmB;YACtC,YAAY,EAAE,SAAS;YACvB,YAAY;YACZ,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QAEF,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,OAAO,EAAE,IAAI;YACb,oEAAoE;YACpE,kEAAkE;YAClE,iEAAiE;YACjE,WAAW,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAC9F,WAAW,EAAE,eAAe,CAAC,WAAW;YACxC,QAAQ,EAAE;gBACR,YAAY,EAAE,SAAS;gBACvB,kBAAkB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC1D,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC9C,yBAAyB,EAAE,IAAI;gBAC/B,SAAS;gBACT,KAAK;aACN;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1D,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9F,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAErD,oEAAoE;QACpE,kEAAkE;QAClE,iEAAiE;QACjE,uEAAuE;QACvE,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,EACtD;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;oBAChE,IAAI,EAAE,SAAS;iBAChB,EACD;oBACE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;oBAChC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBAC5B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;iBACvC,CACF,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,SAAS;gBAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;gBACxD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChE,IAAI,MAAM,KAAK,WAAW,CAAC,eAAe;oBAAE,OAAO,IAAI,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO;QACX,2BAA2B;IAC7B,CAAC;CACF"}

package/dist/providers/RekorProvider.d.ts

@@ -1,10 +1,18 @@
 /**
  * @file RekorProvider.ts
- * @description Sigstore Rekor transparency log anchor provider.
- * Publishes anchor Merkle roots as hashedrekord entries to Rekor.
+ * @description Sigstore Rekor transparency-log anchor provider.
+ *
+ * Submits a `hashedrekord` entry to Rekor so each anchor is recorded
+ * in a public append-only log keyed by SHA-256 of the canonical
+ * anchor. Rekor cryptographically verifies the supplied signature
+ * against the supplied hash before accepting the entry, so the caller
+ * must provide an Ed25519 `signArtifact` function that signs over the
+ * raw hash bytes (Rekor's verification target) — **not** the
+ * AgentKeyManager's sign-over-merkleRoot-string output, which is the
+ * wrong byte sequence for Rekor's verifier.
  *
  * Proof level: `publicly-auditable`
- * Required peer dependency: `sigstore`
+ * Required dependencies: none for `publish` (uses global `fetch`).
  *
  * @module @framers/agentos-ext-anchor-providers
  */
@@ -13,6 +21,20 @@ import type { BaseProviderConfig } from '../types.js';
 export interface RekorProviderConfig extends BaseProviderConfig {
     /** Rekor server URL. Default: 'https://rekor.sigstore.dev'. */
     serverUrl?: string;
+    /**
+     * PEM-encoded Ed25519 public key matching the signer. Required for
+     * `publish()` because Rekor's hashedrekord verifier needs the
+     * public key to validate `signArtifact`'s signature against the
+     * artifact hash.
+     */
+    publicKeyPem?: string;
+    /**
+     * Sign the artifact's raw bytes (NOT the hex string) using the same
+     * Ed25519 keypair whose public key is in `publicKeyPem`. Required
+     * for `publish()`. Receives the canonical-anchor SHA-256 bytes and
+     * must return an Ed25519 signature.
+     */
+    signArtifact?: (bytes: Uint8Array) => Promise<Uint8Array> | Uint8Array;
 }
 export declare class RekorProvider implements AnchorProvider {
     readonly id = "rekor";
@@ -22,6 +44,13 @@ export declare class RekorProvider implements AnchorProvider {
     private readonly baseConfig;
     constructor(config?: RekorProviderConfig);
     publish(anchor: AnchorRecord): Promise<AnchorProviderResult>;
+    /**
+     * Confirm the anchor's Rekor entry exists and its body hash matches a
+     * fresh canonical anchor digest. Does NOT cryptographically verify
+     * the inclusion proof against the signed tree head — that needs the
+     * sigstore SDK; for compliance workflows wire up
+     * `sigstore.verify(bundle)` after this method returns true.
+     */
     verify(anchor: AnchorRecord): Promise<boolean>;
     dispose(): Promise<void>;
 }

package/dist/providers/RekorProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RekorProvider.d.ts","sourceRoot":"","sources":["../../src/providers/RekorProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAItD,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,qBAAa,aAAc,YAAW,cAAc;IAClD,QAAQ,CAAC,EAAE,WAAW;IACtB,QAAQ,CAAC,IAAI,qCAAqC;IAClD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAwB;IAEvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;gBAE9C,MAAM,GAAE,mBAAwB;IAUtC,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA4B5D,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAS9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}
+{"version":3,"file":"RekorProvider.d.ts","sourceRoot":"","sources":["../../src/providers/RekorProvider.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAKtD,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;CACxE;AA0CD,qBAAa,aAAc,YAAW,cAAc;IAClD,QAAQ,CAAC,EAAE,WAAW;IACtB,QAAQ,CAAC,IAAI,qCAAqC;IAClD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAwB;IAEvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAGrB;IACF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;gBAE9C,MAAM,GAAE,mBAAwB;IAYtC,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoIlE;;;;;;OAMG;IACG,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAmC9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}