@framers/agentos-ext-anchor-providers 1.1.0

package/dist/register.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @file register.ts
+ * @description Registers all anchor provider factories with the core AgentOS factory.
+ * Call `registerExtensionProviders()` once at startup to enable config-driven
+ * provider creation via `createAnchorProvider()`.
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+/**
+ * Register all anchor provider factories with the core AgentOS provider registry.
+ * Call once at application startup, before creating any AnchorProvider via config.
+ *
+ * Safe to call multiple times — subsequent calls are no-ops.
+ *
+ * @example
+ * ```typescript
+ * import { registerExtensionProviders } from '@framers/agentos-ext-anchor-providers';
+ * import { createAnchorProvider } from '@framers/agentos';
+ *
+ * // Register at startup
+ * registerExtensionProviders();
+ *
+ * // Now config-driven creation works:
+ * const provider = createAnchorProvider({
+ *   type: 'rekor',
+ *   options: { serverUrl: 'https://rekor.sigstore.dev' },
+ * });
+ * ```
+ */
+export declare function registerExtensionProviders(): void;
+//# sourceMappingURL=register.d.ts.map

package/dist/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgBH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAwBjD"}

package/dist/register.js

@@ -0,0 +1,47 @@
+/**
+ * @file register.ts
+ * @description Registers all anchor provider factories with the core AgentOS factory.
+ * Call `registerExtensionProviders()` once at startup to enable config-driven
+ * provider creation via `createAnchorProvider()`.
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+import { registerAnchorProviderFactory } from '@framers/agentos';
+import { WormSnapshotProvider } from './providers/WormSnapshotProvider.js';
+import { RekorProvider } from './providers/RekorProvider.js';
+import { OpenTimestampsProvider } from './providers/OpenTimestampsProvider.js';
+import { EthereumProvider } from './providers/EthereumProvider.js';
+import { SolanaProvider } from './providers/SolanaProvider.js';
+let registered = false;
+/**
+ * Register all anchor provider factories with the core AgentOS provider registry.
+ * Call once at application startup, before creating any AnchorProvider via config.
+ *
+ * Safe to call multiple times — subsequent calls are no-ops.
+ *
+ * @example
+ * ```typescript
+ * import { registerExtensionProviders } from '@framers/agentos-ext-anchor-providers';
+ * import { createAnchorProvider } from '@framers/agentos';
+ *
+ * // Register at startup
+ * registerExtensionProviders();
+ *
+ * // Now config-driven creation works:
+ * const provider = createAnchorProvider({
+ *   type: 'rekor',
+ *   options: { serverUrl: 'https://rekor.sigstore.dev' },
+ * });
+ * ```
+ */
+export function registerExtensionProviders() {
+    if (registered)
+        return;
+    registerAnchorProviderFactory('worm-snapshot', (opts) => new WormSnapshotProvider(opts));
+    registerAnchorProviderFactory('rekor', (opts) => new RekorProvider(opts));
+    registerAnchorProviderFactory('opentimestamps', (opts) => new OpenTimestampsProvider(opts));
+    registerAnchorProviderFactory('ethereum', (opts) => new EthereumProvider(opts));
+    registerAnchorProviderFactory('solana', (opts) => new SolanaProvider(opts));
+    registered = true;
+}
+//# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAE/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAG/D,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,0BAA0B;IACxC,IAAI,UAAU;QAAE,OAAO;IAEvB,6BAA6B,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CACtD,IAAI,oBAAoB,CAAC,IAA6C,CAAC,CACxE,CAAC;IAEF,6BAA6B,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAC9C,IAAI,aAAa,CAAC,IAAsC,CAAC,CAC1D,CAAC;IAEF,6BAA6B,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE,CACvD,IAAI,sBAAsB,CAAC,IAA+C,CAAC,CAC5E,CAAC;IAEF,6BAA6B,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CACjD,IAAI,gBAAgB,CAAC,IAAyC,CAAC,CAChE,CAAC;IAEF,6BAA6B,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAC/C,IAAI,cAAc,CAAC,IAAuC,CAAC,CAC5D,CAAC;IAEF,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @file types.ts
+ * @description Shared types for anchor provider implementations.
+ */
+/**
+ * Base configuration shared by all anchor providers.
+ */
+export interface BaseProviderConfig {
+    /** Request timeout in milliseconds. Default: 30000. */
+    timeoutMs?: number;
+    /** Number of retries on transient failures. Default: 3. */
+    retries?: number;
+    /** Base delay between retries in milliseconds. Default: 1000. */
+    retryDelayMs?: number;
+}
+/**
+ * Resolve a base config with defaults.
+ */
+export declare function resolveBaseConfig(config?: Partial<BaseProviderConfig>): Required<BaseProviderConfig>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAMpG"}

package/dist/types.js

@@ -0,0 +1,15 @@
+/**
+ * @file types.ts
+ * @description Shared types for anchor provider implementations.
+ */
+/**
+ * Resolve a base config with defaults.
+ */
+export function resolveBaseConfig(config) {
+    return {
+        timeoutMs: config?.timeoutMs ?? 30_000,
+        retries: config?.retries ?? 3,
+        retryDelayMs: config?.retryDelayMs ?? 1_000,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoC;IACpE,OAAO;QACL,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,MAAM;QACtC,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC;QAC7B,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,KAAK;KAC5C,CAAC;AACJ,CAAC"}

package/dist/utils/http-client.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @file http-client.ts
+ * @description Shared HTTP fetch wrapper with retry and timeout for anchor providers.
+ */
+export interface HttpRequestOptions {
+    /** Request timeout in milliseconds. */
+    timeoutMs?: number;
+    /** Number of retries on transient failures (5xx, network errors). */
+    retries?: number;
+    /** Base delay between retries in milliseconds (exponential backoff). */
+    retryDelayMs?: number;
+}
+/**
+ * Fetch with exponential backoff retry on transient failures.
+ *
+ * @param url - The URL to fetch.
+ * @param init - Standard RequestInit options.
+ * @param options - Retry and timeout configuration.
+ * @returns The fetch Response.
+ * @throws On non-transient errors or after all retries exhausted.
+ */
+export declare function fetchWithRetry(url: string, init?: RequestInit, options?: HttpRequestOptions): Promise<Response>;
+//# sourceMappingURL=http-client.d.ts.map

package/dist/utils/http-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../../src/utils/http-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,WAAgB,EACtB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CA2CnB"}

package/dist/utils/http-client.js

@@ -0,0 +1,53 @@
+/**
+ * @file http-client.ts
+ * @description Shared HTTP fetch wrapper with retry and timeout for anchor providers.
+ */
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_RETRIES = 3;
+const DEFAULT_RETRY_DELAY_MS = 1_000;
+/**
+ * Fetch with exponential backoff retry on transient failures.
+ *
+ * @param url - The URL to fetch.
+ * @param init - Standard RequestInit options.
+ * @param options - Retry and timeout configuration.
+ * @returns The fetch Response.
+ * @throws On non-transient errors or after all retries exhausted.
+ */
+export async function fetchWithRetry(url, init = {}, options) {
+    const maxRetries = options?.retries ?? DEFAULT_RETRIES;
+    const baseDelay = options?.retryDelayMs ?? DEFAULT_RETRY_DELAY_MS;
+    const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    let lastError;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            const controller = new AbortController();
+            const timeout = setTimeout(() => controller.abort(), timeoutMs);
+            const response = await fetch(url, {
+                ...init,
+                signal: controller.signal,
+            });
+            clearTimeout(timeout);
+            // Don't retry client errors (4xx), only server errors (5xx)
+            if (response.ok || (response.status >= 400 && response.status < 500)) {
+                return response;
+            }
+            // Server error — retry
+            lastError = new Error(`HTTP ${response.status}: ${response.statusText}`);
+        }
+        catch (err) {
+            lastError = err instanceof Error ? err : new Error(String(err));
+            // Don't retry aborted requests (timeout)
+            if (lastError.name === 'AbortError') {
+                lastError = new Error(`Request timed out after ${timeoutMs}ms`);
+            }
+        }
+        // Exponential backoff before next retry
+        if (attempt < maxRetries) {
+            const delay = baseDelay * Math.pow(2, attempt);
+            await new Promise(resolve => setTimeout(resolve, delay));
+        }
+    }
+    throw lastError ?? new Error('Request failed after all retries');
+}
+//# sourceMappingURL=http-client.js.map

package/dist/utils/http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.js","sourceRoot":"","sources":["../../src/utils/http-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,OAAoB,EAAE,EACtB,OAA4B;IAE5B,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,IAAI,eAAe,CAAC;IACvD,MAAM,SAAS,GAAG,OAAO,EAAE,YAAY,IAAI,sBAAsB,CAAC;IAClE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,kBAAkB,CAAC;IAE3D,IAAI,SAA4B,CAAC;IAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YAEhE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,GAAG,IAAI;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,OAAO,CAAC,CAAC;YAEtB,4DAA4D;YAC5D,IAAI,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;gBACrE,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,uBAAuB;YACvB,SAAS,GAAG,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAEhE,yCAAyC;YACzC,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACpC,SAAS,GAAG,IAAI,KAAK,CAAC,2BAA2B,SAAS,IAAI,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACnE,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,4 @@
+export { fetchWithRetry } from './http-client.js';
+export type { HttpRequestOptions } from './http-client.js';
+export { canonicalizeAnchor, hashCanonicalAnchor } from './serialization.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,3 @@
+export { fetchWithRetry } from './http-client.js';
+export { canonicalizeAnchor, hashCanonicalAnchor } from './serialization.js';
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/utils/serialization.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @file serialization.ts
+ * @description Deterministic serialization for anchor records before external publishing.
+ */
+import type { AnchorRecord } from '@framers/agentos';
+/**
+ * Serialize an AnchorRecord to a canonical JSON string with sorted keys.
+ * Ensures all providers hash/publish the same byte representation.
+ */
+export declare function canonicalizeAnchor(anchor: AnchorRecord): string;
+/**
+ * Compute a SHA-256 hex digest of the canonical anchor representation.
+ * Used by providers as the hash to publish externally.
+ */
+export declare function hashCanonicalAnchor(anchor: AnchorRecord): Promise<string>;
+//# sourceMappingURL=serialization.d.ts.map

package/dist/utils/serialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialization.d.ts","sourceRoot":"","sources":["../../src/utils/serialization.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAW/D;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAG/E"}

package/dist/utils/serialization.js

@@ -0,0 +1,30 @@
+/**
+ * @file serialization.ts
+ * @description Deterministic serialization for anchor records before external publishing.
+ */
+import { createHash } from 'crypto';
+/**
+ * Serialize an AnchorRecord to a canonical JSON string with sorted keys.
+ * Ensures all providers hash/publish the same byte representation.
+ */
+export function canonicalizeAnchor(anchor) {
+    const canonical = {
+        eventCount: anchor.eventCount,
+        id: anchor.id,
+        merkleRoot: anchor.merkleRoot,
+        sequenceFrom: anchor.sequenceFrom,
+        sequenceTo: anchor.sequenceTo,
+        signature: anchor.signature,
+        timestamp: anchor.timestamp,
+    };
+    return JSON.stringify(canonical);
+}
+/**
+ * Compute a SHA-256 hex digest of the canonical anchor representation.
+ * Used by providers as the hash to publish externally.
+ */
+export async function hashCanonicalAnchor(anchor) {
+    const canonical = canonicalizeAnchor(anchor);
+    return createHash('sha256').update(canonical, 'utf8').digest('hex');
+}
+//# sourceMappingURL=serialization.js.map

package/dist/utils/serialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialization.js","sourceRoot":"","sources":["../../src/utils/serialization.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,MAAM,SAAS,GAAG;QAChB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAoB;IAC5D,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC"}

package/manifest.json

@@ -0,0 +1,100 @@
+{
+  "$schema": "https://agentos.sh/schemas/extension-manifest-v1.json",
+  "id": "com.framers.provenance.anchor-providers",
+  "name": "Provenance Anchor Providers",
+  "version": "1.0.0",
+  "description": "External anchor providers for the AgentOS provenance system — WORM storage, transparency logs, and blockchain timestamping",
+  "author": {
+    "name": "Frame.dev",
+    "email": "support@frame.dev",
+    "url": "https://github.com/framersai"
+  },
+  "license": "MIT",
+  "keywords": [
+    "provenance",
+    "anchor",
+    "blockchain",
+    "ethereum",
+    "opentimestamps",
+    "rekor",
+    "sigstore",
+    "worm",
+    "s3-object-lock",
+    "transparency-log",
+    "tamper-evidence"
+  ],
+  "agentosVersion": "^0.1.0",
+  "categories": ["provenance", "enterprise"],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/framersai/agentos-extensions"
+  },
+  "extensions": [
+    {
+      "kind": "provenance",
+      "id": "wormSnapshotProvider",
+      "displayName": "WORM Snapshot Provider",
+      "description": "S3 Object Lock / WORM storage for compliance-grade anchor archival",
+      "entry": "./dist/providers/WormSnapshotProvider.js",
+      "proofLevel": "externally-archived"
+    },
+    {
+      "kind": "provenance",
+      "id": "rekorProvider",
+      "displayName": "Rekor Transparency Log Provider",
+      "description": "Sigstore Rekor transparency log for publicly auditable anchor records",
+      "entry": "./dist/providers/RekorProvider.js",
+      "proofLevel": "publicly-auditable"
+    },
+    {
+      "kind": "provenance",
+      "id": "openTimestampsProvider",
+      "displayName": "OpenTimestamps Provider",
+      "description": "Bitcoin-anchored timestamping via the OpenTimestamps protocol",
+      "entry": "./dist/providers/OpenTimestampsProvider.js",
+      "proofLevel": "publicly-timestamped"
+    },
+    {
+      "kind": "provenance",
+      "id": "ethereumProvider",
+      "displayName": "Ethereum On-Chain Anchor Provider",
+      "description": "Ethereum on-chain anchor with transaction receipt and finalized block proof",
+      "entry": "./dist/providers/EthereumProvider.js",
+      "proofLevel": "publicly-timestamped"
+    },
+    {
+      "kind": "provenance",
+      "id": "solanaProvider",
+      "displayName": "Solana On-Chain Anchor Provider",
+      "description": "Solana on-chain anchor via the Wunderland program (content hash + manifest hash)",
+      "entry": "./dist/providers/SolanaProvider.js",
+      "proofLevel": "publicly-timestamped"
+    }
+  ],
+  "configuration": {
+    "properties": {
+      "provider.type": {
+        "type": "string",
+        "enum": ["none", "worm-snapshot", "rekor", "opentimestamps", "ethereum", "solana", "composite"],
+        "default": "none",
+        "description": "Which anchor provider to use for external publishing"
+      },
+      "provider.endpoint": {
+        "type": "string",
+        "description": "Provider endpoint URL (e.g., Rekor server, Ethereum RPC)"
+      },
+      "provider.timeoutMs": {
+        "type": "number",
+        "default": 30000,
+        "description": "Request timeout in milliseconds"
+      },
+      "provider.retries": {
+        "type": "number",
+        "default": 3,
+        "minimum": 0,
+        "maximum": 10,
+        "description": "Number of retries on transient failures"
+      }
+    }
+  }
+}

package/package.json

@@ -0,0 +1,103 @@
+{
+  "name": "@framers/agentos-ext-anchor-providers",
+  "version": "1.1.0",
+  "description": "External anchor providers for AgentOS provenance — blockchain, WORM storage, and transparency log integrations",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./manifest.json": "./manifest.json",
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint src --ext .ts",
+    "typecheck": "tsc --noEmit",
+    "docs": "typedoc --out docs src/index.ts",
+    "clean": "rimraf dist"
+  },
+  "keywords": [
+    "agentos",
+    "extension",
+    "provenance",
+    "anchor",
+    "blockchain",
+    "ethereum",
+    "opentimestamps",
+    "rekor",
+    "sigstore",
+    "worm",
+    "s3-object-lock",
+    "transparency-log"
+  ],
+  "author": {
+    "name": "Framers AI",
+    "email": "team@frame.dev",
+    "url": "https://frame.dev"
+  },
+  "contributors": [
+    {
+      "name": "Johnny Dunn",
+      "email": "johnnyfived@protonmail.com",
+      "url": "https://github.com/jddunn"
+    }
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/framersai/agentos-extensions.git",
+    "directory": "registry/curated/provenance/anchor-providers"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "@framers/agentos": "^0.1.0",
+    "@aws-sdk/client-s3": "^3.0.0",
+    "@solana/web3.js": "^1.0.0",
+    "bs58": "^5.0.0",
+    "ethers": "^6.0.0",
+    "opentimestamps": "^0.4.0",
+    "sigstore": "^2.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@aws-sdk/client-s3": {
+      "optional": true
+    },
+    "@solana/web3.js": {
+      "optional": true
+    },
+    "bs58": {
+      "optional": true
+    },
+    "ethers": {
+      "optional": true
+    },
+    "opentimestamps": {
+      "optional": true
+    },
+    "sigstore": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@framers/agentos": "^0.1.0",
+    "@types/node": "^20.12.12",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
+    "@vitest/coverage-v8": "^1.6.0",
+    "eslint": "^9.11.0",
+    "rimraf": "^5.0.7",
+    "typedoc": "^0.25.13",
+    "typescript": "^5.4.5",
+    "vitest": "^1.6.0"
+  }
+}

package/src/index.ts

@@ -0,0 +1,59 @@
+/**
+ * @file index.ts
+ * @description Main entry point for @framers/agentos-ext-anchor-providers.
+ *
+ * External anchor providers for the AgentOS provenance system:
+ * - **WormSnapshotProvider** — S3 Object Lock / WORM storage (externally-archived)
+ * - **RekorProvider** — Sigstore Rekor transparency log (publicly-auditable)
+ * - **OpenTimestampsProvider** — Bitcoin-anchored timestamping (publicly-timestamped)
+ * - **EthereumProvider** — Ethereum on-chain anchor (publicly-timestamped)
+ * - **SolanaProvider** — Solana on-chain anchor (publicly-timestamped)
+ *
+ * ## Quick Start
+ *
+ * ### Option 1: Config-driven (via registry)
+ * ```typescript
+ * import { registerExtensionProviders } from '@framers/agentos-ext-anchor-providers';
+ * import { createAnchorProvider } from '@framers/agentos';
+ *
+ * registerExtensionProviders();
+ * const provider = createAnchorProvider({ type: 'rekor' });
+ * ```
+ *
+ * ### Option 2: Direct construction
+ * ```typescript
+ * import { RekorProvider } from '@framers/agentos-ext-anchor-providers';
+ *
+ * const provider = new RekorProvider({ serverUrl: 'https://rekor.sigstore.dev' });
+ * ```
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+
+// Registry
+export { registerExtensionProviders } from './register.js';
+
+// Providers
+export { WormSnapshotProvider } from './providers/WormSnapshotProvider.js';
+export type { WormSnapshotProviderConfig } from './providers/WormSnapshotProvider.js';
+
+export { RekorProvider } from './providers/RekorProvider.js';
+export type { RekorProviderConfig } from './providers/RekorProvider.js';
+
+export { OpenTimestampsProvider } from './providers/OpenTimestampsProvider.js';
+export type { OpenTimestampsProviderConfig } from './providers/OpenTimestampsProvider.js';
+
+export { EthereumProvider } from './providers/EthereumProvider.js';
+export type { EthereumProviderConfig } from './providers/EthereumProvider.js';
+
+export { SolanaProvider } from './providers/SolanaProvider.js';
+export type { SolanaProviderConfig } from './providers/SolanaProvider.js';
+
+// Shared types
+export type { BaseProviderConfig } from './types.js';
+export { resolveBaseConfig } from './types.js';
+
+// Utilities
+export { fetchWithRetry } from './utils/http-client.js';
+export type { HttpRequestOptions } from './utils/http-client.js';
+export { canonicalizeAnchor, hashCanonicalAnchor } from './utils/serialization.js';

package/src/providers/EthereumProvider.ts

@@ -0,0 +1,87 @@
+/**
+ * @file EthereumProvider.ts
+ * @description Ethereum on-chain anchor provider.
+ * Publishes anchor Merkle roots as calldata in Ethereum transactions.
+ *
+ * Proof level: `publicly-timestamped`
+ * Required peer dependency: `ethers`
+ *
+ * @module @framers/agentos-ext-anchor-providers
+ */
+
+import type { AnchorProvider, AnchorRecord, AnchorProviderResult, ProofLevel } from '@framers/agentos';
+import type { BaseProviderConfig } from '../types.js';
+import { resolveBaseConfig } from '../types.js';
+import { hashCanonicalAnchor } from '../utils/serialization.js';
+
+export interface EthereumProviderConfig extends BaseProviderConfig {
+  /** JSON-RPC endpoint URL. */
+  rpcUrl: string;
+  /** Contract address for anchor storage (optional — can use raw calldata tx). */
+  contractAddress?: string;
+  /** Private key hex for signing transactions. */
+  signerPrivateKey?: string;
+  /** Chain ID. Default: 1 (mainnet). */
+  chainId?: number;
+  /** Gas limit override. Default: auto-estimate. */
+  gasLimit?: number;
+}
+
+export class EthereumProvider implements AnchorProvider {
+  readonly id = 'ethereum';
+  readonly name = 'Ethereum On-Chain Anchor';
+  readonly proofLevel: ProofLevel = 'publicly-timestamped';
+
+  private readonly config: EthereumProviderConfig;
+  private readonly baseConfig: Required<BaseProviderConfig>;
+
+  constructor(config: EthereumProviderConfig) {
+    this.config = {
+      chainId: 1,
+      ...config,
+    };
+    this.baseConfig = resolveBaseConfig(config);
+  }
+
+  async publish(anchor: AnchorRecord): Promise<AnchorProviderResult> {
+    // TODO: Implement using ethers.js or viem
+    //
+    // Implementation outline:
+    //   1. Compute SHA-256 of canonical anchor: hashCanonicalAnchor(anchor)
+    //   2. Create ethers.JsonRpcProvider(this.config.rpcUrl)
+    //   3. Create ethers.Wallet(this.config.signerPrivateKey, provider)
+    //   4. If contractAddress is set:
+    //      - ABI-encode call to `anchor(bytes32 merkleRoot)` on the contract
+    //      - Send contract transaction
+    //   5. If no contractAddress (raw calldata):
+    //      - Send self-transfer with 0x + anchorHash as calldata
+    //   6. Wait for transaction receipt (1 confirmation)
+    //   7. Return { success: true, externalRef: `eth:${chainId}:${txHash}`,
+    //              metadata: { blockNumber, blockHash, gasUsed, chainId } }
+    try {
+      const _hash = await hashCanonicalAnchor(anchor);
+      throw new Error(
+        'EthereumProvider is not yet implemented. ' +
+        'Install ethers.js and implement the Ethereum on-chain anchor integration.',
+      );
+    } catch (e: unknown) {
+      return {
+        providerId: this.id,
+        success: false,
+        error: e instanceof Error ? e.message : String(e),
+      };
+    }
+  }
+
+  async verify(anchor: AnchorRecord): Promise<boolean> {
+    // TODO: Parse txHash from externalRef, fetch transaction receipt,
+    //   decode calldata, compare with anchor hash
+    if (!anchor.externalRef) return false;
+    console.warn('[EthereumProvider] verify() is not yet implemented');
+    return false;
+  }
+
+  async dispose(): Promise<void> {
+    // TODO: Disconnect provider if persistent connection was established
+  }
+}