@iamnotdou/ccp 0.1.0

package/dist/hcs/publisher.js

@@ -0,0 +1,126 @@
+import { Client, TopicMessageSubmitTransaction, TopicCreateTransaction, TopicId, PrivateKey, AccountId, } from "@hashgraph/sdk";
+import { hederaConfig } from "../config.js";
+let hederaClient = null;
+let topicId = null;
+function getClient() {
+    if (!hederaClient) {
+        hederaClient =
+            hederaConfig.network === "testnet" ? Client.forTestnet() : Client.forMainnet();
+        // Prefer ED25519 (DER) key for native Hedera operations (HCS)
+        if (hederaConfig.hcsAccountId && hederaConfig.hcsPrivateKeyDer) {
+            hederaClient.setOperator(AccountId.fromString(hederaConfig.hcsAccountId), PrivateKey.fromStringDer(hederaConfig.hcsPrivateKeyDer));
+        }
+        else if (hederaConfig.accountId && hederaConfig.privateKey) {
+            const rawKey = hederaConfig.privateKey.startsWith("0x")
+                ? hederaConfig.privateKey.slice(2)
+                : hederaConfig.privateKey;
+            hederaClient.setOperator(AccountId.fromString(hederaConfig.accountId), PrivateKey.fromStringECDSA(rawKey));
+        }
+    }
+    return hederaClient;
+}
+/**
+ * Create a new HCS topic for CCP events.
+ * Call once during setup.
+ */
+export async function createCCPTopic() {
+    const client = getClient();
+    const tx = new TopicCreateTransaction().setTopicMemo("CCP Protocol Events — Containment Certificate Protocol");
+    const response = await tx.execute(client);
+    const receipt = await response.getReceipt(client);
+    const newTopicId = receipt.topicId.toString();
+    console.log(`  [HCS] Created CCP topic: ${newTopicId}`);
+    topicId = TopicId.fromString(newTopicId);
+    return newTopicId;
+}
+/**
+ * Set the topic ID (if already created).
+ */
+export function setTopicId(id) {
+    topicId = TopicId.fromString(id);
+}
+/**
+ * Publish a CCP event to the HCS topic.
+ * Events are timestamped by Hedera consensus with guaranteed ordering.
+ */
+export async function publishEvent(event) {
+    if (!topicId) {
+        if (hederaConfig.hcsTopicId) {
+            topicId = TopicId.fromString(hederaConfig.hcsTopicId);
+        }
+        else {
+            console.warn("  [HCS] No topic ID set. Skipping event publish.");
+            return "";
+        }
+    }
+    const client = getClient();
+    const message = JSON.stringify(event);
+    const tx = new TopicMessageSubmitTransaction().setTopicId(topicId).setMessage(message);
+    const response = await tx.execute(client);
+    const receipt = await response.getReceipt(client);
+    const seqNum = receipt.topicSequenceNumber?.toString() || "?";
+    console.log(`  [HCS] Published ${event.type} (seq: ${seqNum})`);
+    return seqNum;
+}
+// ─── Convenience publishers ───
+export async function publishCertificatePublished(certHash, agent, operator, certClass, containmentBound) {
+    return publishEvent({
+        type: "CERTIFICATE_PUBLISHED",
+        certHash,
+        agent,
+        operator,
+        class: certClass,
+        containmentBound,
+        timestamp: Date.now(),
+    });
+}
+export async function publishAttestationSigned(certHash, auditor, certClass) {
+    return publishEvent({
+        type: "ATTESTATION_SIGNED",
+        certHash,
+        auditor,
+        class: certClass,
+        timestamp: Date.now(),
+    });
+}
+export async function publishAgentTransaction(agent, to, value, ledgerCosigned, periodSpent, periodLimit) {
+    return publishEvent({
+        type: "AGENT_TRANSACTION",
+        agent,
+        to,
+        value,
+        ledgerCosigned,
+        periodSpent,
+        periodLimit,
+        timestamp: Date.now(),
+    });
+}
+export async function publishTransactionBlocked(agent, value, reason, periodSpent, periodLimit) {
+    return publishEvent({
+        type: "TRANSACTION_BLOCKED",
+        agent,
+        value,
+        reason,
+        periodSpent,
+        periodLimit,
+        timestamp: Date.now(),
+    });
+}
+export async function publishChallengeSubmitted(challengeId, certHash, challenger) {
+    return publishEvent({
+        type: "CHALLENGE_SUBMITTED",
+        challengeId,
+        certHash,
+        agent: challenger,
+        timestamp: Date.now(),
+    });
+}
+export async function publishChallengeResolved(challengeId, certHash, upheld) {
+    return publishEvent({
+        type: upheld ? "CHALLENGE_UPHELD" : "CHALLENGE_REJECTED",
+        challengeId,
+        certHash,
+        timestamp: Date.now(),
+    });
+}
+//# sourceMappingURL=publisher.js.map

package/dist/hcs/publisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publisher.js","sourceRoot":"","sources":["../../src/hcs/publisher.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,6BAA6B,EAC7B,sBAAsB,EACtB,OAAO,EACP,UAAU,EACV,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA8B5C,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,IAAI,OAAO,GAAmB,IAAI,CAAC;AAEnC,SAAS,SAAS;IAChB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY;YACV,YAAY,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAEjF,8DAA8D;QAC9D,IAAI,YAAY,CAAC,YAAY,IAAI,YAAY,CAAC,gBAAgB,EAAE,CAAC;YAC/D,YAAY,CAAC,WAAW,CACtB,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,EAC/C,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,gBAAgB,CAAC,CACxD,CAAC;QACJ,CAAC;aAAM,IAAI,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;gBACrD,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC;YAC5B,YAAY,CAAC,WAAW,CACtB,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,EAC5C,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,MAAM,EAAE,GAAG,IAAI,sBAAsB,EAAE,CAAC,YAAY,CAAC,wDAAwD,CAAC,CAAC;IAE/G,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAQ,CAAC,QAAQ,EAAE,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,8BAA8B,UAAU,EAAE,CAAC,CAAC;IAExD,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAe;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YACjE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEtC,MAAM,EAAE,GAAG,IAAI,6BAA6B,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAEvF,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,CAAC,IAAI,UAAU,MAAM,GAAG,CAAC,CAAC;IAEhE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iCAAiC;AAEjC,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAgB,EAChB,KAAa,EACb,QAAgB,EAChB,SAAiB,EACjB,gBAAwB;IAExB,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,uBAAuB;QAC7B,QAAQ;QACR,KAAK;QACL,QAAQ;QACR,KAAK,EAAE,SAAS;QAChB,gBAAgB;QAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,QAAgB,EAAE,OAAe,EAAE,SAAiB;IACjG,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ;QACR,OAAO;QACP,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,EAAU,EACV,KAAa,EACb,cAAuB,EACvB,WAAmB,EACnB,WAAmB;IAEnB,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,mBAAmB;QACzB,KAAK;QACL,EAAE;QACF,KAAK;QACL,cAAc;QACd,WAAW;QACX,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAa,EACb,KAAa,EACb,MAAc,EACd,WAAmB,EACnB,WAAmB;IAEnB,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,qBAAqB;QAC3B,KAAK;QACL,KAAK;QACL,MAAM;QACN,WAAW;QACX,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,QAAgB,EAChB,UAAkB;IAElB,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,qBAAqB;QAC3B,WAAW;QACX,QAAQ;QACR,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,WAAmB,EACnB,QAAgB,EAChB,MAAe;IAEf,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,oBAAoB;QACxD,WAAW;QACX,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/hedera/mirrorNode.js

@@ -0,0 +1,75 @@
+import { hederaConfig } from "../config.js";
+const MIRROR_BASE = hederaConfig.network === "testnet"
+    ? "https://testnet.mirrornode.hedera.com"
+    : "https://mainnet.mirrornode.hedera.com";
+/**
+ * Query contract state via Mirror Node REST API.
+ */
+export async function getContractInfo(contractAddress) {
+    const res = await fetch(`${MIRROR_BASE}/api/v1/contracts/${contractAddress}`);
+    return res.json();
+}
+/**
+ * Get token balance for an account.
+ */
+export async function getAccountTokens(accountId) {
+    const res = await fetch(`${MIRROR_BASE}/api/v1/accounts/${accountId}/tokens`);
+    return res.json();
+}
+/**
+ * Get transaction history for a contract.
+ */
+export async function getContractTransactions(contractAddress, limit = 25) {
+    const res = await fetch(`${MIRROR_BASE}/api/v1/contracts/${contractAddress}/results?limit=${limit}&order=desc`);
+    return res.json();
+}
+/**
+ * Get all messages from an HCS topic (certificate event history).
+ */
+export async function getTopicMessages(topicId, limit = 100) {
+    const res = await fetch(`${MIRROR_BASE}/api/v1/topics/${topicId}/messages?limit=${limit}&order=asc`);
+    const data = (await res.json());
+    return data.messages.map((msg) => ({
+        timestamp: msg.consensus_timestamp,
+        sequenceNumber: msg.sequence_number,
+        content: JSON.parse(Buffer.from(msg.message, "base64").toString("utf8")),
+    }));
+}
+/**
+ * Print a formatted event timeline from HCS.
+ */
+export async function printEventTimeline(topicId) {
+    console.log("\n═══ CCP Event Timeline (HCS) ═══\n");
+    const messages = await getTopicMessages(topicId);
+    for (const msg of messages) {
+        const event = msg.content;
+        const time = new Date(parseFloat(msg.timestamp) * 1000).toISOString();
+        switch (event.type) {
+            case "CERTIFICATE_PUBLISHED":
+                console.log(`  ${time} | CERT PUBLISHED | agent=${event.agent?.slice(0, 10)}... class=${event.class}`);
+                break;
+            case "ATTESTATION_SIGNED":
+                console.log(`  ${time} | ATTESTED       | auditor=${event.auditor?.slice(0, 10)}... class=${event.class}`);
+                break;
+            case "AGENT_TRANSACTION":
+                console.log(`  ${time} | TX EXECUTED    | to=${event.to?.slice(0, 10)}... value=${event.value} cosigned=${event.ledgerCosigned}`);
+                break;
+            case "TRANSACTION_BLOCKED":
+                console.log(`  ${time} | TX BLOCKED     | value=${event.value} reason=${event.reason}`);
+                break;
+            case "CHALLENGE_SUBMITTED":
+                console.log(`  ${time} | CHALLENGED     | id=${event.challengeId}`);
+                break;
+            case "CHALLENGE_UPHELD":
+                console.log(`  ${time} | SLASH          | challenge=${event.challengeId} UPHELD`);
+                break;
+            case "CHALLENGE_REJECTED":
+                console.log(`  ${time} | REJECTED       | challenge=${event.challengeId} frivolous`);
+                break;
+            default:
+                console.log(`  ${time} | ${event.type}`);
+        }
+    }
+    console.log("\n═══════════════════════════════\n");
+}
+//# sourceMappingURL=mirrorNode.js.map

package/dist/hedera/mirrorNode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mirrorNode.js","sourceRoot":"","sources":["../../src/hedera/mirrorNode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,GACf,YAAY,CAAC,OAAO,KAAK,SAAS;IAChC,CAAC,CAAC,uCAAuC;IACzC,CAAC,CAAC,uCAAuC,CAAC;AAE9C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,eAAuB;IAC3D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,qBAAqB,eAAe,EAAE,CAAC,CAAC;IAC9E,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IACtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,oBAAoB,SAAS,SAAS,CAAC,CAAC;IAC9E,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,eAAuB,EAAE,KAAK,GAAG,EAAE;IAC/E,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,WAAW,qBAAqB,eAAe,kBAAkB,KAAK,aAAa,CACvF,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAK,GAAG,GAAG;IACjE,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,WAAW,kBAAkB,OAAO,mBAAmB,KAAK,YAAY,CAC5E,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAM7B,CAAC;IAEF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACjC,SAAS,EAAE,GAAG,CAAC,mBAAmB;QAClC,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;KACzE,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAe;IACtD,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEjD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAEtE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,uBAAuB;gBAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,6BAA6B,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvG,MAAM;YACR,KAAK,oBAAoB;gBACvB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,+BAA+B,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC3G,MAAM;YACR,KAAK,mBAAmB;gBACtB,OAAO,CAAC,GAAG,CACT,KAAK,IAAI,0BAA0B,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,KAAK,CAAC,KAAK,aAAa,KAAK,CAAC,cAAc,EAAE,CACrH,CAAC;gBACF,MAAM;YACR,KAAK,qBAAqB;gBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,6BAA6B,KAAK,CAAC,KAAK,WAAW,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBACxF,MAAM;YACR,KAAK,qBAAqB;gBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,0BAA0B,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBACpE,MAAM;YACR,KAAK,kBAAkB;gBACrB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,iCAAiC,KAAK,CAAC,WAAW,SAAS,CAAC,CAAC;gBAClF,MAAM;YACR,KAAK,oBAAoB;gBACvB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,iCAAiC,KAAK,CAAC,WAAW,YAAY,CAAC,CAAC;gBACrF,MAAM;YACR;gBACE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;AACrD,CAAC"}

package/dist/ledger/cosigner.js

@@ -0,0 +1,79 @@
+import { encodePacked, keccak256 } from "viem";
+import { privateKeyToAccount } from "viem/accounts";
+import { publicClient, getWalletClient } from "../client.js";
+import { SpendingLimitABI } from "../contracts/index.js";
+import { keys } from "../config.js";
+/**
+ * Generate a Ledger co-signature for a transaction above the cosign threshold.
+ * The SpendingLimit contract verifies: keccak256(to, value, chainId, spendingLimit)
+ */
+export async function ledgerCosign(request) {
+    const txHash = keccak256(encodePacked(["address", "uint256", "uint256", "address"], [request.to, request.value, BigInt(request.chainId), request.spendingLimitAddress]));
+    // In production: send txHash to Ledger device via DMK
+    // Ledger displays Clear Signing JSON showing:
+    //   "Co-sign Agent Transaction (above threshold)"
+    //   Recipient: <to>
+    //   Amount: <value> USDC
+    //   Period Spent: <current> / <limit>
+    // Operator physically approves on device.
+    // For demo: sign with the ledger private key
+    const account = privateKeyToAccount(keys.ledger);
+    const signature = await account.signMessage({ message: { raw: txHash } });
+    console.log(`  [Ledger] Co-signed transaction: ${request.value} to ${request.to}`);
+    return signature;
+}
+/**
+ * Sign a CCP certificate hash with the operator's Ledger device.
+ * This produces a hardware-attested operator signature.
+ */
+export async function ledgerSignCertificate(certHash) {
+    // In production: send certHash to Ledger device
+    // Clear Signing displays:
+    //   "Publish CCP Certificate"
+    //   Agent: <agent ENS name>
+    //   Class: C2
+    //   Containment Bound: $50,000 USDC
+    //   Expires: <date>
+    const account = privateKeyToAccount(keys.operator);
+    const signature = await account.signMessage({ message: { raw: certHash } });
+    console.log(`  [Ledger] Operator signed certificate: ${certHash.slice(0, 18)}...`);
+    return signature;
+}
+/**
+ * Sign a CCP certificate hash as an auditor attestation with Ledger.
+ * Hardware-attested audit signature.
+ */
+export async function ledgerSignAttestation(certHash) {
+    // Clear Signing displays:
+    //   "Attest CCP Certificate"
+    //   Agent: <agent ENS name>
+    //   Class: C2
+    //   Containment Bound: $50,000 USDC
+    //   Your Stake: $1,500 USDC
+    const account = privateKeyToAccount(keys.auditor);
+    const signature = await account.signMessage({ message: { raw: certHash } });
+    console.log(`  [Ledger] Auditor signed attestation: ${certHash.slice(0, 18)}...`);
+    return signature;
+}
+/**
+ * Execute a transaction through SpendingLimit with Ledger co-signature.
+ */
+export async function executeWithLedgerCosign(to, value, spendingLimitAddress) {
+    const cosig = await ledgerCosign({
+        to,
+        value,
+        spendingLimitAddress,
+        chainId: 296, // Hedera testnet
+    });
+    const agentWallet = getWalletClient(keys.agent);
+    const txHash = await agentWallet.writeContract({
+        address: spendingLimitAddress,
+        abi: SpendingLimitABI,
+        functionName: "executeWithCosign",
+        args: [to, value, "0x", cosig],
+    });
+    await publicClient.waitForTransactionReceipt({ hash: txHash });
+    console.log(`  [Agent] Executed with Ledger co-sign: ${txHash}`);
+    return txHash;
+}
+//# sourceMappingURL=cosigner.js.map

package/dist/ledger/cosigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cosigner.js","sourceRoot":"","sources":["../../src/ledger/cosigner.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,YAAY,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAkB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAa,IAAI,EAAE,MAAM,cAAc,CAAC;AA0B/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAsB;IACvD,MAAM,MAAM,GAAG,SAAS,CACtB,YAAY,CACV,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAC5C,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CACnF,CACF,CAAC;IAEF,sDAAsD;IACtD,8CAA8C;IAC9C,kDAAkD;IAClD,oBAAoB;IACpB,yBAAyB;IACzB,sCAAsC;IACtC,0CAA0C;IAE1C,6CAA6C;IAC7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAE1E,OAAO,CAAC,GAAG,CAAC,qCAAqC,OAAO,CAAC,KAAK,OAAO,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAc;IACxD,gDAAgD;IAChD,0BAA0B;IAC1B,8BAA8B;IAC9B,4BAA4B;IAC5B,cAAc;IACd,oCAAoC;IACpC,oBAAoB;IAEpB,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAE5E,OAAO,CAAC,GAAG,CAAC,2CAA2C,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAc;IACxD,0BAA0B;IAC1B,6BAA6B;IAC7B,4BAA4B;IAC5B,cAAc;IACd,oCAAoC;IACpC,4BAA4B;IAE5B,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAE5E,OAAO,CAAC,GAAG,CAAC,0CAA0C,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAW,EACX,KAAa,EACb,oBAA6B;IAE7B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;QAC/B,EAAE;QACF,KAAK;QACL,oBAAoB;QACpB,OAAO,EAAE,GAAG,EAAE,iBAAiB;KAChC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC;QAC7C,OAAO,EAAE,oBAAoB;QAC7B,GAAG,EAAE,gBAAgB;QACrB,YAAY,EAAE,mBAAmB;QACjC,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;KAC/B,CAAC,CAAC;IACH,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/D,OAAO,CAAC,GAAG,CAAC,2CAA2C,MAAM,EAAE,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC"}