@framers/agentos-ext-anchor-providers 1.1.0

package/dist/providers/OpenTimestampsProvider.js

@@ -0,0 +1,72 @@
+/**
+ * @file OpenTimestampsProvider.ts
+ * @description Bitcoin-anchored timestamping via the OpenTimestamps protocol.
+ * Creates OTS timestamps for anchor Merkle roots and submits to calendar servers.
+ *
+ * Proof level: `publicly-timestamped`
+ * Required peer dependency: `opentimestamps`
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+import { resolveBaseConfig } from '../types.js';
+import { hashCanonicalAnchor } from '../utils/serialization.js';
+const DEFAULT_CALENDAR_URLS = [
+    'https://a.pool.opentimestamps.org',
+    'https://b.pool.opentimestamps.org',
+    'https://a.pool.eternitywall.com',
+];
+export class OpenTimestampsProvider {
+    id = 'opentimestamps';
+    name = 'OpenTimestamps (Bitcoin)';
+    proofLevel = 'publicly-timestamped';
+    config;
+    baseConfig;
+    constructor(config = {}) {
+        this.config = {
+            calendarUrls: config.calendarUrls ?? DEFAULT_CALENDAR_URLS,
+            timeoutMs: config.timeoutMs ?? 30_000,
+            retries: config.retries ?? 3,
+            retryDelayMs: config.retryDelayMs ?? 1_000,
+        };
+        this.baseConfig = resolveBaseConfig(config);
+    }
+    async publish(anchor) {
+        // TODO: Implement using opentimestamps npm package
+        //
+        // Implementation outline:
+        //   1. Compute SHA-256 of canonical anchor: hashCanonicalAnchor(anchor)
+        //   2. Create a DetachedTimestampFile from the hash
+        //   3. Submit to calendar servers: OpenTimestamps.stamp(detached, { calendars })
+        //   4. Serialize the OTS proof to base64
+        //   5. Return { success: true, externalRef: `ots:${base64Proof}`,
+        //              metadata: { calendarUrls, pendingAttestation: true } }
+        //
+        // Note: OTS proofs are initially "pending" — they confirm after a Bitcoin block
+        // includes the calendar commitment (typically 1-2 hours). A separate verification
+        // step can upgrade pending proofs to confirmed.
+        try {
+            const _hash = await hashCanonicalAnchor(anchor);
+            throw new Error('OpenTimestampsProvider is not yet implemented. ' +
+                'Install opentimestamps and implement the Bitcoin timestamping integration.');
+        }
+        catch (e) {
+            return {
+                providerId: this.id,
+                success: false,
+                error: e instanceof Error ? e.message : String(e),
+            };
+        }
+    }
+    async verify(anchor) {
+        // TODO: Deserialize OTS proof from externalRef, call OpenTimestamps.verify()
+        //   Returns true if the proof is confirmed by a Bitcoin block
+        if (!anchor.externalRef)
+            return false;
+        console.warn('[OpenTimestampsProvider] verify() is not yet implemented');
+        return false;
+    }
+    async dispose() {
+        // No persistent resources in current implementation
+    }
+}
+//# sourceMappingURL=OpenTimestampsProvider.js.map

package/dist/providers/OpenTimestampsProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenTimestampsProvider.js","sourceRoot":"","sources":["../../src/providers/OpenTimestampsProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAOhE,MAAM,qBAAqB,GAAG;IAC5B,mCAAmC;IACnC,mCAAmC;IACnC,iCAAiC;CAClC,CAAC;AAEF,MAAM,OAAO,sBAAsB;IACxB,EAAE,GAAG,gBAAgB,CAAC;IACtB,IAAI,GAAG,0BAA0B,CAAC;IAClC,UAAU,GAAe,sBAAsB,CAAC;IAExC,MAAM,CAAyC;IAC/C,UAAU,CAA+B;IAE1D,YAAY,SAAuC,EAAE;QACnD,IAAI,CAAC,MAAM,GAAG;YACZ,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,qBAAqB;YAC1D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;SAC3C,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,mDAAmD;QACnD,EAAE;QACF,0BAA0B;QAC1B,wEAAwE;QACxE,oDAAoD;QACpD,iFAAiF;QACjF,yCAAyC;QACzC,kEAAkE;QAClE,sEAAsE;QACtE,EAAE;QACF,gFAAgF;QAChF,kFAAkF;QAClF,gDAAgD;QAChD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,iDAAiD;gBACjD,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,6EAA6E;QAC7E,8DAA8D;QAC9D,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO;QACX,oDAAoD;IACtD,CAAC;CACF"}

package/dist/providers/RekorProvider.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @file RekorProvider.ts
+ * @description Sigstore Rekor transparency log anchor provider.
+ * Publishes anchor Merkle roots as hashedrekord entries to Rekor.
+ *
+ * Proof level: `publicly-auditable`
+ * Required peer dependency: `sigstore`
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+import type { AnchorProvider, AnchorRecord, AnchorProviderResult, ProofLevel } from '@framers/agentos';
+import type { BaseProviderConfig } from '../types.js';
+export interface RekorProviderConfig extends BaseProviderConfig {
+    /** Rekor server URL. Default: 'https://rekor.sigstore.dev'. */
+    serverUrl?: string;
+}
+export declare class RekorProvider implements AnchorProvider {
+    readonly id = "rekor";
+    readonly name = "Sigstore Rekor Transparency Log";
+    readonly proofLevel: ProofLevel;
+    private readonly config;
+    private readonly baseConfig;
+    constructor(config?: RekorProviderConfig);
+    publish(anchor: AnchorRecord): Promise<AnchorProviderResult>;
+    verify(anchor: AnchorRecord): Promise<boolean>;
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=RekorProvider.d.ts.map

package/dist/providers/RekorProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RekorProvider.d.ts","sourceRoot":"","sources":["../../src/providers/RekorProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAItD,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,qBAAa,aAAc,YAAW,cAAc;IAClD,QAAQ,CAAC,EAAE,WAAW;IACtB,QAAQ,CAAC,IAAI,qCAAqC;IAClD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAwB;IAEvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;gBAE9C,MAAM,GAAE,mBAAwB;IAUtC,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA4B5D,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAS9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}

package/dist/providers/RekorProvider.js

@@ -0,0 +1,68 @@
+/**
+ * @file RekorProvider.ts
+ * @description Sigstore Rekor transparency log anchor provider.
+ * Publishes anchor Merkle roots as hashedrekord entries to Rekor.
+ *
+ * Proof level: `publicly-auditable`
+ * Required peer dependency: `sigstore`
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+import { resolveBaseConfig } from '../types.js';
+import { hashCanonicalAnchor } from '../utils/serialization.js';
+const DEFAULT_SERVER_URL = 'https://rekor.sigstore.dev';
+export class RekorProvider {
+    id = 'rekor';
+    name = 'Sigstore Rekor Transparency Log';
+    proofLevel = 'publicly-auditable';
+    config;
+    baseConfig;
+    constructor(config = {}) {
+        this.config = {
+            serverUrl: config.serverUrl ?? DEFAULT_SERVER_URL,
+            timeoutMs: config.timeoutMs ?? 30_000,
+            retries: config.retries ?? 3,
+            retryDelayMs: config.retryDelayMs ?? 1_000,
+        };
+        this.baseConfig = resolveBaseConfig(config);
+    }
+    async publish(anchor) {
+        // TODO: Implement using sigstore SDK or direct HTTP to Rekor API
+        //
+        // Implementation outline:
+        //   1. Compute SHA-256 hash of canonical anchor: hashCanonicalAnchor(anchor)
+        //   2. Create a hashedrekord entry:
+        //      POST ${serverUrl}/api/v1/log/entries
+        //      Body: { kind: 'hashedrekord', apiVersion: '0.0.1',
+        //              spec: { data: { hash: { algorithm: 'sha256', value: anchorHash } },
+        //                      signature: { content: anchor.signature, publicKey: { content: ... } } } }
+        //   3. Parse response for log index and entry UUID
+        //   4. Return { success: true, externalRef: `rekor:${logIndex}:${entryUUID}`,
+        //              metadata: { logIndex, serverUrl, inclusionProof } }
+        try {
+            const _hash = await hashCanonicalAnchor(anchor);
+            throw new Error('RekorProvider is not yet implemented. ' +
+                'Install sigstore SDK and implement the Rekor transparency log integration.');
+        }
+        catch (e) {
+            return {
+                providerId: this.id,
+                success: false,
+                error: e instanceof Error ? e.message : String(e),
+            };
+        }
+    }
+    async verify(anchor) {
+        // TODO: Retrieve entry from Rekor by externalRef and verify inclusion proof
+        //   GET ${serverUrl}/api/v1/log/entries/${entryUUID}
+        //   Verify inclusion proof against the transparency log root
+        if (!anchor.externalRef)
+            return false;
+        console.warn('[RekorProvider] verify() is not yet implemented');
+        return false;
+    }
+    async dispose() {
+        // No persistent resources in current implementation
+    }
+}
+//# sourceMappingURL=RekorProvider.js.map

package/dist/providers/RekorProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RekorProvider.js","sourceRoot":"","sources":["../../src/providers/RekorProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAOhE,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AAExD,MAAM,OAAO,aAAa;IACf,EAAE,GAAG,OAAO,CAAC;IACb,IAAI,GAAG,iCAAiC,CAAC;IACzC,UAAU,GAAe,oBAAoB,CAAC;IAEtC,MAAM,CAAgC;IACtC,UAAU,CAA+B;IAE1D,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,kBAAkB;YACjD,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;SAC3C,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,iEAAiE;QACjE,EAAE;QACF,0BAA0B;QAC1B,6EAA6E;QAC7E,oCAAoC;QACpC,4CAA4C;QAC5C,0DAA0D;QAC1D,mFAAmF;QACnF,iGAAiG;QACjG,mDAAmD;QACnD,8EAA8E;QAC9E,mEAAmE;QACnE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,wCAAwC;gBACxC,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,4EAA4E;QAC5E,qDAAqD;QACrD,6DAA6D;QAC7D,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO;QACX,oDAAoD;IACtD,CAAC;CACF"}

package/dist/providers/SolanaProvider.d.ts

@@ -0,0 +1,62 @@
+/**
+ * @file SolanaProvider.ts
+ * @description Solana on-chain anchor provider (Wunderland-compatible).
+ *
+ * Publishes AgentOS anchor records via the `anchor_post` instruction of the
+ * Wunderland Solana program (content_hash + manifest_hash).
+ *
+ * Proof level: `publicly-timestamped`
+ *
+ * Required runtime dependency: `@solana/web3.js`
+ * Optional runtime dependency (only if using base58 secret keys): `bs58`
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+import type { AnchorProvider, AnchorRecord, AnchorProviderResult, ProofLevel } from '@framers/agentos';
+import type { BaseProviderConfig } from '../types.js';
+export interface SolanaProviderConfig extends BaseProviderConfig {
+    /** JSON-RPC endpoint URL. */
+    rpcUrl: string;
+    /** Wunderland on-chain program ID. */
+    programId: string;
+    /**
+     * Signer secret key (Solana Keypair secretKey bytes) as a JSON number array.
+     * Example: the contents of a Solana CLI keypair file.
+     */
+    signerSecretKeyJson?: number[];
+    /** Path to Solana keypair JSON file (array of numbers). */
+    signerKeypairPath?: string;
+    /** Base58-encoded signer secret key bytes (64 bytes). */
+    signerPrivateKeyBase58?: string;
+    /** Solana cluster label used only for `externalRef` formatting. */
+    cluster?: 'devnet' | 'testnet' | 'mainnet-beta' | 'localnet';
+    /** Commitment level (e.g. 'confirmed', 'finalized'). Default: 'confirmed'. */
+    commitment?: string;
+    /**
+     * If true, automatically initializes the agent (initialize_agent) when missing.
+     * Default: true
+     */
+    autoInitializeAgent?: boolean;
+    /** Display name used when auto-initializing the agent. Default: 'AgentOS'. */
+    agentDisplayName?: string;
+    /**
+     * HEXACO traits (u16 0-1000) used when auto-initializing the agent.
+     * Order: [H, E, X, A, C, O]
+     */
+    agentHexacoTraits?: [number, number, number, number, number, number];
+}
+export declare class SolanaProvider implements AnchorProvider {
+    readonly id = "solana";
+    readonly name = "Solana On-Chain Anchor (Wunderland)";
+    readonly proofLevel: ProofLevel;
+    private readonly config;
+    private readonly baseConfig;
+    constructor(config: SolanaProviderConfig);
+    publish(anchor: AnchorRecord): Promise<AnchorProviderResult>;
+    verify(anchor: AnchorRecord): Promise<boolean>;
+    dispose(): Promise<void>;
+    private loadWeb3;
+    private loadSigner;
+    private loadBs58;
+}
+//# sourceMappingURL=SolanaProvider.d.ts.map

package/dist/providers/SolanaProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SolanaProvider.d.ts","sourceRoot":"","sources":["../../src/providers/SolanaProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAItD,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE/B,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,yDAAyD;IACzD,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,mEAAmE;IACnE,OAAO,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,cAAc,GAAG,UAAU,CAAC;IAE7D,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;CACtE;AA4CD,qBAAa,cAAe,YAAW,cAAc;IACnD,QAAQ,CAAC,EAAE,YAAY;IACvB,QAAQ,CAAC,IAAI,yCAAyC;IACtD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAA0B;IAEzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;gBAE9C,MAAM,EAAE,oBAAoB;IAWlC,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA6I5D,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IA8B9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAIhB,QAAQ;YAYR,UAAU;YAwBV,QAAQ;CASvB"}

package/dist/providers/SolanaProvider.js

@@ -0,0 +1,256 @@
+/**
+ * @file SolanaProvider.ts
+ * @description Solana on-chain anchor provider (Wunderland-compatible).
+ *
+ * Publishes AgentOS anchor records via the `anchor_post` instruction of the
+ * Wunderland Solana program (content_hash + manifest_hash).
+ *
+ * Proof level: `publicly-timestamped`
+ *
+ * Required runtime dependency: `@solana/web3.js`
+ * Optional runtime dependency (only if using base58 secret keys): `bs58`
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+import { createHash } from 'crypto';
+import { existsSync, readFileSync } from 'fs';
+import { resolveBaseConfig } from '../types.js';
+import { hashCanonicalAnchor } from '../utils/serialization.js';
+const DEFAULT_HEXACO = [800, 450, 650, 750, 850, 700];
+function instructionDiscriminator(methodName) {
+    return createHash('sha256')
+        .update(`global:${methodName}`)
+        .digest()
+        .subarray(0, 8);
+}
+function encodeName32(displayName) {
+    const bytes = Buffer.alloc(32, 0);
+    Buffer.from(displayName, 'utf-8').copy(bytes, 0, 0, Math.min(displayName.length, 32));
+    return bytes;
+}
+function parseSolExternalRef(externalRef) {
+    // Format: sol:<cluster>:<postPda>:<txSignature>
+    const parts = externalRef.split(':');
+    if (parts.length < 4)
+        return null;
+    const [prefix, cluster, postPda, txSignature] = parts;
+    if (prefix !== 'sol' && prefix !== 'solana')
+        return null;
+    return { cluster, postPda, txSignature };
+}
+function sha256Hex(input) {
+    return createHash('sha256').update(input, 'utf8').digest('hex');
+}
+function canonicalizeSolanaManifest(anchor) {
+    // Deterministic (sorted keys) is achieved by constructing object literal in stable order.
+    return JSON.stringify({
+        anchorId: anchor.id,
+        eventCount: anchor.eventCount,
+        merkleRoot: anchor.merkleRoot,
+        schema: 'agentos.solana-anchor-manifest.v1',
+        sequenceFrom: anchor.sequenceFrom,
+        sequenceTo: anchor.sequenceTo,
+        signature: anchor.signature,
+        timestamp: anchor.timestamp,
+    });
+}
+export class SolanaProvider {
+    id = 'solana';
+    name = 'Solana On-Chain Anchor (Wunderland)';
+    proofLevel = 'publicly-timestamped';
+    config;
+    baseConfig;
+    constructor(config) {
+        this.config = {
+            cluster: 'devnet',
+            commitment: 'confirmed',
+            autoInitializeAgent: true,
+            agentDisplayName: 'AgentOS',
+            ...config,
+        };
+        this.baseConfig = resolveBaseConfig(config);
+    }
+    async publish(anchor) {
+        const publishedAt = new Date().toISOString();
+        try {
+            if (!this.config.rpcUrl) {
+                throw new Error('Missing required config: rpcUrl');
+            }
+            if (!this.config.programId) {
+                throw new Error('Missing required config: programId');
+            }
+            const hasSigner = (this.config.signerSecretKeyJson && this.config.signerSecretKeyJson.length > 0) ||
+                !!this.config.signerKeypairPath ||
+                !!this.config.signerPrivateKeyBase58;
+            if (!hasSigner) {
+                throw new Error('Missing signer configuration. Provide one of: signerSecretKeyJson, signerKeypairPath, signerPrivateKeyBase58.');
+            }
+            if (this.config.signerKeypairPath && !existsSync(this.config.signerKeypairPath)) {
+                throw new Error(`signerKeypairPath does not exist: ${this.config.signerKeypairPath}`);
+            }
+            const web3 = await this.loadWeb3();
+            const signer = await this.loadSigner(web3);
+            const connection = new web3.Connection(this.config.rpcUrl, this.config.commitment);
+            const programId = new web3.PublicKey(this.config.programId);
+            // ── Derive agent PDA ────────────────────────────────────────────────
+            const [agentPda] = web3.PublicKey.findProgramAddressSync([Buffer.from('agent'), signer.publicKey.toBuffer()], programId);
+            // ── Ensure agent exists (optional auto-init) ────────────────────────
+            let agentInfo = await connection.getAccountInfo(agentPda, this.config.commitment);
+            if (!agentInfo && this.config.autoInitializeAgent) {
+                const displayName = this.config.agentDisplayName || 'AgentOS';
+                const traits = this.config.agentHexacoTraits || DEFAULT_HEXACO;
+                const initData = Buffer.alloc(8 + 32 + 12);
+                instructionDiscriminator('initialize_agent').copy(initData, 0);
+                encodeName32(displayName).copy(initData, 8);
+                for (let i = 0; i < 6; i++) {
+                    const val = traits[i];
+                    if (val < 0 || val > 1000) {
+                        throw new Error(`Invalid agentHexacoTraits[${i}] value: ${val} (expected 0..1000)`);
+                    }
+                    initData.writeUInt16LE(val, 8 + 32 + i * 2);
+                }
+                const ix = new web3.TransactionInstruction({
+                    programId,
+                    keys: [
+                        { pubkey: agentPda, isSigner: false, isWritable: true },
+                        { pubkey: signer.publicKey, isSigner: true, isWritable: true },
+                        { pubkey: web3.SystemProgram.programId, isSigner: false, isWritable: false },
+                    ],
+                    data: initData,
+                });
+                const tx = new web3.Transaction().add(ix);
+                await web3.sendAndConfirmTransaction(connection, tx, [signer]);
+                agentInfo = await connection.getAccountInfo(agentPda, this.config.commitment);
+            }
+            if (!agentInfo) {
+                throw new Error('AgentIdentity not found. Provide a registered signer or enable autoInitializeAgent.');
+            }
+            // total_posts is at offset 8 + 32 + 32 + 12 + 1 + 8 = 93
+            const agentData = Buffer.from(agentInfo.data);
+            if (agentData.length < 97) {
+                throw new Error(`AgentIdentity account data too small (${agentData.length} bytes).`);
+            }
+            const postIndex = agentData.readUInt32LE(93);
+            const indexBuf = Buffer.alloc(4);
+            indexBuf.writeUInt32LE(postIndex);
+            const [postPda] = web3.PublicKey.findProgramAddressSync([Buffer.from('post'), agentPda.toBuffer(), indexBuf], programId);
+            // ── Hashes ──────────────────────────────────────────────────────────
+            const contentHashHex = await hashCanonicalAnchor(anchor);
+            const manifestHashHex = sha256Hex(canonicalizeSolanaManifest(anchor));
+            const contentHash = Buffer.from(contentHashHex, 'hex');
+            const manifestHash = Buffer.from(manifestHashHex, 'hex');
+            if (contentHash.length !== 32 || manifestHash.length !== 32) {
+                throw new Error('Computed hashes are not 32 bytes.');
+            }
+            const data = Buffer.concat([
+                instructionDiscriminator('anchor_post'),
+                contentHash,
+                manifestHash,
+            ]);
+            const postIx = new web3.TransactionInstruction({
+                programId,
+                keys: [
+                    { pubkey: postPda, isSigner: false, isWritable: true },
+                    { pubkey: agentPda, isSigner: false, isWritable: true },
+                    { pubkey: signer.publicKey, isSigner: true, isWritable: true },
+                    { pubkey: web3.SystemProgram.programId, isSigner: false, isWritable: false },
+                ],
+                data,
+            });
+            const postTx = new web3.Transaction().add(postIx);
+            const txSignature = await web3.sendAndConfirmTransaction(connection, postTx, [signer]);
+            return {
+                providerId: this.id,
+                success: true,
+                publishedAt,
+                externalRef: `sol:${this.config.cluster}:${postPda.toBase58()}:${txSignature}`,
+                metadata: {
+                    cluster: this.config.cluster,
+                    commitment: this.config.commitment,
+                    postPda: postPda.toBase58(),
+                    agentPda: agentPda.toBase58(),
+                    postIndex,
+                    txSignature,
+                },
+            };
+        }
+        catch (e) {
+            return {
+                providerId: this.id,
+                success: false,
+                publishedAt,
+                error: e instanceof Error ? e.message : String(e),
+            };
+        }
+    }
+    async verify(anchor) {
+        try {
+            if (!anchor.externalRef)
+                return false;
+            const parsed = parseSolExternalRef(anchor.externalRef);
+            if (!parsed?.postPda)
+                return false;
+            const web3 = await this.loadWeb3();
+            const connection = new web3.Connection(this.config.rpcUrl, this.config.commitment);
+            const postKey = new web3.PublicKey(parsed.postPda);
+            const postInfo = await connection.getAccountInfo(postKey, this.config.commitment);
+            if (!postInfo)
+                return false;
+            const data = Buffer.from(postInfo.data);
+            // discriminator (8) + agent (32) + post_index (4)
+            const offset = 8 + 32 + 4;
+            if (data.length < offset + 64)
+                return false;
+            const onChainContentHash = data.subarray(offset, offset + 32);
+            const onChainManifestHash = data.subarray(offset + 32, offset + 64);
+            const expectedContentHash = Buffer.from(await hashCanonicalAnchor(anchor), 'hex');
+            const expectedManifestHash = Buffer.from(sha256Hex(canonicalizeSolanaManifest(anchor)), 'hex');
+            return onChainContentHash.equals(expectedContentHash) && onChainManifestHash.equals(expectedManifestHash);
+        }
+        catch {
+            return false;
+        }
+    }
+    async dispose() {
+        // No persistent resources.
+    }
+    async loadWeb3() {
+        const moduleName = '@solana/web3.js';
+        try {
+            return await import(moduleName);
+        }
+        catch (e) {
+            throw new Error('SolanaProvider requires @solana/web3.js at runtime. ' +
+                'Install it in your project to enable Solana anchoring.');
+        }
+    }
+    async loadSigner(web3) {
+        if (this.config.signerSecretKeyJson && this.config.signerSecretKeyJson.length > 0) {
+            return web3.Keypair.fromSecretKey(Uint8Array.from(this.config.signerSecretKeyJson));
+        }
+        if (this.config.signerKeypairPath) {
+            if (!existsSync(this.config.signerKeypairPath)) {
+                throw new Error(`signerKeypairPath does not exist: ${this.config.signerKeypairPath}`);
+            }
+            const raw = JSON.parse(readFileSync(this.config.signerKeypairPath, 'utf-8'));
+            return web3.Keypair.fromSecretKey(Uint8Array.from(raw));
+        }
+        if (this.config.signerPrivateKeyBase58) {
+            const bs58 = await this.loadBs58();
+            const secretKey = bs58.decode(this.config.signerPrivateKeyBase58);
+            return web3.Keypair.fromSecretKey(secretKey);
+        }
+        throw new Error('Missing signer configuration. Provide one of: signerSecretKeyJson, signerKeypairPath, signerPrivateKeyBase58.');
+    }
+    async loadBs58() {
+        const moduleName = 'bs58';
+        try {
+            const mod = await import(moduleName);
+            return mod.default ?? mod;
+        }
+        catch {
+            throw new Error('signerPrivateKeyBase58 requires the optional dependency "bs58" at runtime.');
+        }
+    }
+}
+//# sourceMappingURL=SolanaProvider.js.map

package/dist/providers/SolanaProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SolanaProvider.js","sourceRoot":"","sources":["../../src/providers/SolanaProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AA0ChE,MAAM,cAAc,GAAqD,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAExG,SAAS,wBAAwB,CAAC,UAAkB;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,UAAU,UAAU,EAAE,CAAC;SAC9B,MAAM,EAAE;SACR,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,gDAAgD;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC;IACtD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAoB;IACtD,0FAA0F;IAC1F,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,mCAAmC;QAC3C,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,cAAc;IAChB,EAAE,GAAG,QAAQ,CAAC;IACd,IAAI,GAAG,qCAAqC,CAAC;IAC7C,UAAU,GAAe,sBAAsB,CAAC;IAExC,MAAM,CAAuB;IAC7B,UAAU,CAA+B;IAE1D,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,WAAW;YACvB,mBAAmB,EAAE,IAAI;YACzB,gBAAgB,EAAE,SAAS;YAC3B,GAAG,MAAM;SACV,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE7C,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,SAAS,GACb,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC/E,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBAC/B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;YACvC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,+GAA+G,CAChH,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAChF,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACxF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEnF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAE5D,uEAAuE;YACvE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CACtD,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EACnD,SAAS,CACV,CAAC;YAEF,uEAAuE;YACvE,IAAI,SAAS,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClF,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAClD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,SAAS,CAAC;gBAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,cAAc,CAAC;gBAE/D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3C,wBAAwB,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC/D,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACtB,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;wBAC1B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,YAAY,GAAG,qBAAqB,CAAC,CAAC;oBACtF,CAAC;oBACD,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9C,CAAC;gBAED,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,sBAAsB,CAAC;oBACzC,SAAS;oBACT,IAAI,EAAE;wBACJ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;wBACvD,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;wBAC9D,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;qBAC7E;oBACD,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;gBAEH,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1C,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC/D,SAAS,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAChF,CAAC;YAED,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;YACzG,CAAC;YAED,yDAAyD;YACzD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,CAAC,MAAM,UAAU,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAE7C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAClC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CACrD,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,EACpD,SAAS,CACV,CAAC;YAEF,uEAAuE;YACvE,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACzD,MAAM,eAAe,GAAG,SAAS,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;YAEtE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YAEzD,IAAI,WAAW,CAAC,MAAM,KAAK,EAAE,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;gBACzB,wBAAwB,CAAC,aAAa,CAAC;gBACvC,WAAW;gBACX,YAAY;aACb,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,sBAAsB,CAAC;gBAC7C,SAAS;gBACT,IAAI,EAAE;oBACJ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;oBACtD,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;oBACvD,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;oBAC9D,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;iBAC7E;gBACD,IAAI;aACL,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAEvF,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,IAAI;gBACb,WAAW;gBACX,WAAW,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,WAAW,EAAE;gBAC9E,QAAQ,EAAE;oBACR,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBAC5B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;oBAClC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;oBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;oBAC7B,SAAS;oBACT,WAAW;iBACZ;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,WAAW;gBACX,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,WAAW;gBAAE,OAAO,KAAK,CAAC;YACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,KAAK,CAAC;YAEnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACnF,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAEnD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClF,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxC,kDAAkD;YAClD,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,EAAE;gBAAE,OAAO,KAAK,CAAC;YAE5C,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;YAC9D,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;YAEpE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,mBAAmB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;YAClF,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAE/F,OAAO,kBAAkB,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC5G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,2BAA2B;IAC7B,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,UAAU,GAAW,iBAAiB,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,sDAAsD;gBACtD,wDAAwD,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAS;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAa,CAAC;YACzF,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,SAAS,GAAI,IAAI,CAAC,MAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACrG,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,KAAK,CACb,+GAA+G,CAChH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,UAAU,GAAW,MAAM,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YACrC,OAAQ,GAAW,CAAC,OAAO,IAAI,GAAG,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;CACF"}

package/dist/providers/WormSnapshotProvider.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @file WormSnapshotProvider.ts
+ * @description S3 Object Lock / WORM storage anchor provider.
+ * Publishes anchor records to an S3 bucket with Object Lock governance/compliance retention.
+ *
+ * Proof level: `externally-archived`
+ * Required peer dependency: `@aws-sdk/client-s3`
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+import type { AnchorProvider, AnchorRecord, AnchorProviderResult, ProofLevel } from '@framers/agentos';
+import type { BaseProviderConfig } from '../types.js';
+export interface WormSnapshotProviderConfig extends BaseProviderConfig {
+    /** S3 bucket name (must have Object Lock enabled). */
+    bucket: string;
+    /** S3 region. */
+    region: string;
+    /** Key prefix for anchor objects. Default: 'provenance/anchors/'. */
+    keyPrefix?: string;
+    /** Retention period in days. Default: 365. */
+    retentionDays?: number;
+    /** Retention mode: 'GOVERNANCE' or 'COMPLIANCE'. Default: 'GOVERNANCE'. */
+    retentionMode?: 'GOVERNANCE' | 'COMPLIANCE';
+}
+export declare class WormSnapshotProvider implements AnchorProvider {
+    readonly id = "worm-snapshot";
+    readonly name = "WORM Snapshot (S3 Object Lock)";
+    readonly proofLevel: ProofLevel;
+    private readonly config;
+    private readonly baseConfig;
+    constructor(config: WormSnapshotProviderConfig);
+    publish(anchor: AnchorRecord): Promise<AnchorProviderResult>;
+    verify(anchor: AnchorRecord): Promise<boolean>;
+}
+//# sourceMappingURL=WormSnapshotProvider.d.ts.map

package/dist/providers/WormSnapshotProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WormSnapshotProvider.d.ts","sourceRoot":"","sources":["../../src/providers/WormSnapshotProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAItD,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IACpE,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;CAC7C;AAED,qBAAa,oBAAqB,YAAW,cAAc;IACzD,QAAQ,CAAC,EAAE,mBAAmB;IAC9B,QAAQ,CAAC,IAAI,oCAAoC;IACjD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAyB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;gBAE9C,MAAM,EAAE,0BAA0B;IAUxC,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA8B5D,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;CAMrD"}

package/dist/providers/WormSnapshotProvider.js

@@ -0,0 +1,64 @@
+/**
+ * @file WormSnapshotProvider.ts
+ * @description S3 Object Lock / WORM storage anchor provider.
+ * Publishes anchor records to an S3 bucket with Object Lock governance/compliance retention.
+ *
+ * Proof level: `externally-archived`
+ * Required peer dependency: `@aws-sdk/client-s3`
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+import { resolveBaseConfig } from '../types.js';
+import { canonicalizeAnchor } from '../utils/serialization.js';
+export class WormSnapshotProvider {
+    id = 'worm-snapshot';
+    name = 'WORM Snapshot (S3 Object Lock)';
+    proofLevel = 'externally-archived';
+    config;
+    baseConfig;
+    constructor(config) {
+        this.config = {
+            keyPrefix: 'provenance/anchors/',
+            retentionDays: 365,
+            retentionMode: 'GOVERNANCE',
+            ...config,
+        };
+        this.baseConfig = resolveBaseConfig(config);
+    }
+    async publish(anchor) {
+        // TODO: Implement using @aws-sdk/client-s3
+        //
+        // Implementation outline:
+        //   1. Import { S3Client, PutObjectCommand } from '@aws-sdk/client-s3'
+        //   2. Create S3Client with region from config
+        //   3. Serialize anchor via canonicalizeAnchor()
+        //   4. PutObject with:
+        //      - Bucket: this.config.bucket
+        //      - Key: `${this.config.keyPrefix}${anchor.id}.json`
+        //      - Body: canonical JSON
+        //      - ContentType: 'application/json'
+        //      - ObjectLockMode: this.config.retentionMode
+        //      - ObjectLockRetainUntilDate: now + retentionDays
+        //   5. Return { success: true, externalRef: `s3://${bucket}/${key}` }
+        try {
+            const _canonical = canonicalizeAnchor(anchor);
+            throw new Error('WormSnapshotProvider is not yet implemented. ' +
+                'Install @aws-sdk/client-s3 and implement the S3 Object Lock integration.');
+        }
+        catch (e) {
+            return {
+                providerId: this.id,
+                success: false,
+                error: e instanceof Error ? e.message : String(e),
+            };
+        }
+    }
+    async verify(anchor) {
+        // TODO: Implement using HeadObject to check object exists and retention is active
+        if (!anchor.externalRef)
+            return false;
+        console.warn('[WormSnapshotProvider] verify() is not yet implemented');
+        return false;
+    }
+}
+//# sourceMappingURL=WormSnapshotProvider.js.map

package/dist/providers/WormSnapshotProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WormSnapshotProvider.js","sourceRoot":"","sources":["../../src/providers/WormSnapshotProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAe/D,MAAM,OAAO,oBAAoB;IACtB,EAAE,GAAG,eAAe,CAAC;IACrB,IAAI,GAAG,gCAAgC,CAAC;IACxC,UAAU,GAAe,qBAAqB,CAAC;IAEvC,MAAM,CAA6B;IACnC,UAAU,CAA+B;IAE1D,YAAY,MAAkC;QAC5C,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,qBAAqB;YAChC,aAAa,EAAE,GAAG;YAClB,aAAa,EAAE,YAAY;YAC3B,GAAG,MAAM;SACV,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,2CAA2C;QAC3C,EAAE;QACF,0BAA0B;QAC1B,uEAAuE;QACvE,+CAA+C;QAC/C,iDAAiD;QACjD,uBAAuB;QACvB,oCAAoC;QACpC,0DAA0D;QAC1D,8BAA8B;QAC9B,yCAAyC;QACzC,mDAAmD;QACnD,wDAAwD;QACxD,sEAAsE;QACtE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,+CAA+C;gBAC/C,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,kFAAkF;QAClF,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}