@occa/sdk 0.4.0 → 0.5.0

package/dist/instructions.d.ts

@@ -12,7 +12,9 @@ declare const INSTRUCTION_DISCRIMINATOR: {
     readonly updateDeploymentStatus: Buffer<ArrayBuffer>;
     readonly retireDeployment: Buffer<ArrayBuffer>;
     readonly setReceivingAddress: Buffer<ArrayBuffer>;
+    readonly setAgentReceivingAddress: Buffer<ArrayBuffer>;
     readonly commitDailyAnchor: Buffer<ArrayBuffer>;
+    readonly commitTrace: Buffer<ArrayBuffer>;
 };
 interface CreateCompanyParams {
     /** User wallet — signer + bound into the PDA seed. Sole authority for
@@ -157,6 +159,20 @@ interface SetReceivingAddressParams {
 declare function buildSetReceivingAddressInstruction(params: SetReceivingAddressParams): {
     instruction: TransactionInstruction;
 };
+interface SetAgentReceivingAddressParams {
+    /** AgentIdentity PDA whose personal receiving wallet is being set. */
+    identityPda: PublicKey;
+    /** User wallet — must equal `identity.owner`. */
+    owner: PublicKey;
+    /** New personal receiving address (passive destination for funds
+     *  disbursed to this agent). Pass `PublicKey.default` to clear. NEVER a
+     *  signer — it never authorizes any on-chain action. */
+    newReceivingAddress: PublicKey;
+    programId?: PublicKey;
+}
+declare function buildSetAgentReceivingAddressInstruction(params: SetAgentReceivingAddressParams): {
+    instruction: TransactionInstruction;
+};
 declare const TREASURY_INSTRUCTION_DISCRIMINATOR: {
     readonly setPolicy: Buffer<ArrayBuffer>;
     readonly disburseDiscretionary: Buffer<ArrayBuffer>;
@@ -438,5 +454,54 @@ interface CommitDailyAnchorParams {
 declare function buildCommitDailyAnchorInstruction(params: CommitDailyAnchorParams): {
     instruction: TransactionInstruction;
 };
+interface CommitTraceParams {
+    deploymentPda: PublicKey;
+    companyPda: PublicKey;
+    /** Anchor Wallet — must equal `operations.signer` (kind=Anchor). */
+    anchorSigner: PublicKey;
+    /** Anchor-kind OperationsAccount for this company (in TREASURY program,
+     *  read-only here). Caller derives via `deriveOperationsPda(company,
+     *  OPERATIONS_KIND.Anchor)`. */
+    operationsPda: PublicKey;
+    /** 32-byte hash of the task creation params — globally unique, becomes
+     *  part of the TraceAnchor PDA seed. */
+    taskId: Uint8Array | Buffer;
+    /** Link to the deliverable (article URL, PR, etc). Max
+     *  `MAX_RESULT_URI_LEN` bytes. */
+    resultUri: string;
+    /** SHA-256 of the deliverable content at completion (32 bytes). */
+    contentHash: Uint8Array | Buffer;
+    /** Rubric quality score, 0..=`MAX_QUALITY_SCORE`. */
+    qualityScore: number;
+    /** Version of the scoring rubric that produced `qualityScore`. */
+    rubricVersion: number;
+    /** SHA-256 of the off-chain verification report (32 bytes). */
+    evidenceHash: Uint8Array | Buffer;
+    /** Unix seconds the deliverable was completed off-chain. Must be > 0 and
+     *  not in the future. */
+    completedAt: bigint;
+    /** Rent payer (typically the operator hot wallet). */
+    payer: PublicKey;
+    programId?: PublicKey;
+}
+/**
+ * Build a `commit_trace` instruction — Anchor-class single-tx commit of one
+ * completed, VERIFIED deliverable. Signed by the Anchor Wallet bound to the
+ * company's Anchor-kind OperationsAccount (same authority as
+ * `commit_daily_anchor`).
+ *
+ * Only deliverables that passed the off-chain verification gate should be
+ * committed — the on-chain `verdict` is always Passed. Caller is
+ * responsible for:
+ *   1. Computing `contentHash` (SHA-256 of the deliverable)
+ *   2. Running the verification gate + scoring rubric off-chain
+ *   3. Computing `evidenceHash` (SHA-256 of the verification report)
+ *
+ * The verdict byte is fixed on-chain; it is not a caller arg.
+ */
+declare function buildCommitTraceInstruction(params: CommitTraceParams): {
+    instruction: TransactionInstruction;
+    traceAnchorPda: PublicKey;
+};
 
-export { type AssetBudget, type CloseOperationsParams, type CommitDailyAnchorParams, type CreateCompanyParams, type CreateDeploymentParams, type DisburseDiscretionaryParams, type DisbursePrivilegedParams, type DisburseRoutineParams, INSTRUCTION_DISCRIMINATOR, type InitProtocolFeeAccountParams, type RegisterAgentIdentityParams, type RegisterCompanyOperationsParams, type RetireDeploymentParams, type RevokeOperationsParams, type SetPolicyParams, type SetReceivingAddressParams, TREASURY_INSTRUCTION_DISCRIMINATOR, type UpdateAgentIdentityMetadataParams, type UpdateCompanyMetadataParams, type UpdateCompanyStatusParams, type UpdateDeploymentMetadataParams, type UpdateDeploymentStatusParams, type UpdateOperationsCapabilityParams, buildCloseOperationsInstruction, buildCommitDailyAnchorInstruction, buildCreateCompanyInstruction, buildCreateDeploymentInstruction, buildDisburseDiscretionaryInstruction, buildDisbursePrivilegedInstruction, buildDisburseRoutineInstruction, buildInitProtocolFeeAccountInstruction, buildRegisterAgentIdentityInstruction, buildRegisterCompanyOperationsInstruction, buildRetireDeploymentInstruction, buildRevokeOperationsInstruction, buildSetPolicyInstruction, buildSetReceivingAddressInstruction, buildUpdateAgentIdentityMetadataInstruction, buildUpdateCompanyMetadataInstruction, buildUpdateCompanyStatusInstruction, buildUpdateDeploymentMetadataInstruction, buildUpdateDeploymentStatusInstruction, buildUpdateOperationsCapabilityInstruction };
+export { type AssetBudget, type CloseOperationsParams, type CommitDailyAnchorParams, type CommitTraceParams, type CreateCompanyParams, type CreateDeploymentParams, type DisburseDiscretionaryParams, type DisbursePrivilegedParams, type DisburseRoutineParams, INSTRUCTION_DISCRIMINATOR, type InitProtocolFeeAccountParams, type RegisterAgentIdentityParams, type RegisterCompanyOperationsParams, type RetireDeploymentParams, type RevokeOperationsParams, type SetAgentReceivingAddressParams, type SetPolicyParams, type SetReceivingAddressParams, TREASURY_INSTRUCTION_DISCRIMINATOR, type UpdateAgentIdentityMetadataParams, type UpdateCompanyMetadataParams, type UpdateCompanyStatusParams, type UpdateDeploymentMetadataParams, type UpdateDeploymentStatusParams, type UpdateOperationsCapabilityParams, buildCloseOperationsInstruction, buildCommitDailyAnchorInstruction, buildCommitTraceInstruction, buildCreateCompanyInstruction, buildCreateDeploymentInstruction, buildDisburseDiscretionaryInstruction, buildDisbursePrivilegedInstruction, buildDisburseRoutineInstruction, buildInitProtocolFeeAccountInstruction, buildRegisterAgentIdentityInstruction, buildRegisterCompanyOperationsInstruction, buildRetireDeploymentInstruction, buildRevokeOperationsInstruction, buildSetAgentReceivingAddressInstruction, buildSetPolicyInstruction, buildSetReceivingAddressInstruction, buildUpdateAgentIdentityMetadataInstruction, buildUpdateCompanyMetadataInstruction, buildUpdateCompanyStatusInstruction, buildUpdateDeploymentMetadataInstruction, buildUpdateDeploymentStatusInstruction, buildUpdateOperationsCapabilityInstruction };

package/dist/instructions.js

@@ -3,6 +3,7 @@ import {
   TREASURY_INSTRUCTION_DISCRIMINATOR,
   buildCloseOperationsInstruction,
   buildCommitDailyAnchorInstruction,
+  buildCommitTraceInstruction,
   buildCreateCompanyInstruction,
   buildCreateDeploymentInstruction,
   buildDisburseDiscretionaryInstruction,
@@ -13,6 +14,7 @@ import {
   buildRegisterCompanyOperationsInstruction,
   buildRetireDeploymentInstruction,
   buildRevokeOperationsInstruction,
+  buildSetAgentReceivingAddressInstruction,
   buildSetPolicyInstruction,
   buildSetReceivingAddressInstruction,
   buildUpdateAgentIdentityMetadataInstruction,
@@ -21,14 +23,15 @@ import {
   buildUpdateDeploymentMetadataInstruction,
   buildUpdateDeploymentStatusInstruction,
   buildUpdateOperationsCapabilityInstruction
-} from "./chunk-N7LNBSDD.js";
-import "./chunk-X6FBCGHU.js";
-import "./chunk-YCSBYRSH.js";
+} from "./chunk-YC33EXHO.js";
+import "./chunk-QZSQEGLT.js";
+import "./chunk-BR62YC5F.js";
 export {
   INSTRUCTION_DISCRIMINATOR,
   TREASURY_INSTRUCTION_DISCRIMINATOR,
   buildCloseOperationsInstruction,
   buildCommitDailyAnchorInstruction,
+  buildCommitTraceInstruction,
   buildCreateCompanyInstruction,
   buildCreateDeploymentInstruction,
   buildDisburseDiscretionaryInstruction,
@@ -39,6 +42,7 @@ export {
   buildRegisterCompanyOperationsInstruction,
   buildRetireDeploymentInstruction,
   buildRevokeOperationsInstruction,
+  buildSetAgentReceivingAddressInstruction,
   buildSetPolicyInstruction,
   buildSetReceivingAddressInstruction,
   buildUpdateAgentIdentityMetadataInstruction,

package/dist/pda.cjs

@@ -27,6 +27,7 @@ __export(pda_exports, {
   deriveOperationsPda: () => deriveOperationsPda,
   derivePolicyPda: () => derivePolicyPda,
   deriveProtocolFeePda: () => deriveProtocolFeePda,
+  deriveTraceAnchorPda: () => deriveTraceAnchorPda,
   deriveTreasuryPda: () => deriveTreasuryPda,
   u32LeBytes: () => u32LeBytes
 });
@@ -47,12 +48,14 @@ var POLICY_SEED = Buffer.from("policy");
 var PROTOCOL_FEES_SEED = Buffer.from("protocol_fees");
 var OPERATIONS_SEED = Buffer.from("operations");
 var DAILY_ANCHOR_SEED = Buffer.from("daily_anchor");
+var TRACE_SEED = Buffer.from("trace");
 var SOL_PSEUDO_MINT = new import_web3.PublicKey(new Uint8Array(32));
 var ACCOUNT_DISCRIMINATOR = {
   AgentIdentity: Buffer.from([11, 149, 31, 27, 186, 76, 241, 72]),
   CompanyAccount: Buffer.from([37, 215, 171, 200, 8, 141, 69, 96]),
   Deployment: Buffer.from([66, 90, 104, 89, 183, 130, 64, 178]),
-  DailyAnchorAccount: Buffer.from([218, 106, 107, 94, 194, 48, 111, 254])
+  DailyAnchorAccount: Buffer.from([218, 106, 107, 94, 194, 48, 111, 254]),
+  TraceAnchorAccount: Buffer.from([159, 101, 186, 98, 211, 217, 119, 232])
 };
 var TREASURY_ACCOUNT_DISCRIMINATOR = {
   TreasuryAccount: Buffer.from([204, 140, 18, 173, 90, 152, 134, 123]),
@@ -131,6 +134,16 @@ function deriveDailyAnchorPda(deploymentPda, dayUnix, programId = REGISTRY_PROGR
   );
   return { pda, bump };
 }
+function deriveTraceAnchorPda(taskId, programId = REGISTRY_PROGRAM_ID) {
+  if (taskId.length !== 32) {
+    throw new RangeError(`taskId must be 32 bytes, got ${taskId.length}`);
+  }
+  const [pda, bump] = import_web32.PublicKey.findProgramAddressSync(
+    [TRACE_SEED, Buffer.from(taskId)],
+    programId
+  );
+  return { pda, bump };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   deriveAgentIdentityPda,
@@ -140,6 +153,7 @@ function deriveDailyAnchorPda(deploymentPda, dayUnix, programId = REGISTRY_PROGR
   deriveOperationsPda,
   derivePolicyPda,
   deriveProtocolFeePda,
+  deriveTraceAnchorPda,
   deriveTreasuryPda,
   u32LeBytes
 });

package/dist/pda.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/pda.ts","../src/constants.ts"],"sourcesContent":["import { PublicKey } from \"@solana/web3.js\";\nimport {\n  AGENT_IDENTITY_SEED,\n  COMPANY_SEED,\n  DAILY_ANCHOR_SEED,\n  DEPLOYMENT_SEED,\n  OPERATIONS_SEED,\n  POLICY_SEED,\n  PROTOCOL_FEES_SEED,\n  REGISTRY_PROGRAM_ID,\n  TREASURY_PROGRAM_ID,\n  TREASURY_SEED,\n  type OperationsKind,\n} from \"./constants\";\n\n/**\n * Encode a u32 as little-endian 4 bytes (matches Anchor / Borsh on-chain\n * representation when using a u32 in a PDA seed).\n */\nexport function u32LeBytes(value: number): Buffer {\n  if (!Number.isInteger(value) || value < 0 || value > 0xff_ff_ff_ff) {\n    throw new RangeError(`u32 out of range: ${value}`);\n  }\n  const buf = Buffer.alloc(4);\n  buf.writeUInt32LE(value, 0);\n  return buf;\n}\n\n/**\n * CompanyAccount PDA.\n *\n *   seeds = [\"company\", owner, nonce_le_u32]\n *\n * Wallet-bound seed: a wallet's companies can be enumerated directly\n * from chain by probing `(owner, nonce=0..N)`. The owner is also the\n * sole authority for state-changing ix on this account.\n */\nexport function deriveCompanyPda(\n  owner: PublicKey,\n  nonce: number,\n  programId: PublicKey = REGISTRY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [COMPANY_SEED, owner.toBuffer(), u32LeBytes(nonce)],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * AgentIdentity PDA.\n *\n *   seeds = [\"agent_identity\", agent_pubkey]\n *\n * `agent_pubkey` is a stable identity key chosen by the caller (typically\n * a fresh keypair generated client-side). Identity is independent of any\n * company — the same identity may be deployed multiple times across the\n * same owner's companies.\n */\nexport function deriveAgentIdentityPda(\n  agentPubkey: PublicKey,\n  programId: PublicKey = REGISTRY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [AGENT_IDENTITY_SEED, agentPubkey.toBuffer()],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * Deployment PDA.\n *\n *   seeds = [\"deployment\", company_pda, deployment_index_le_u32]\n *\n * `deployment_index` is a per-company u32 counter. Maintained by the\n * caller — pick the next free index. Same `agent_identity` may have\n * multiple deployments under the same company (e.g. retired then\n * re-deployed); each deployment gets its own index.\n */\nexport function deriveDeploymentPda(\n  companyPda: PublicKey,\n  deploymentIndex: number,\n  programId: PublicKey = REGISTRY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [DEPLOYMENT_SEED, companyPda.toBuffer(), u32LeBytes(deploymentIndex)],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * TreasuryAccount PDA — owned by Treasury program.\n *\n *   seeds = [\"treasury\", company_pda]\n *\n * Initialized atomically with PolicyAccount via Registry's `create_company`\n * CPI to `treasury::init_treasury` (design doc §6).\n */\nexport function deriveTreasuryPda(\n  companyPda: PublicKey,\n  programId: PublicKey = TREASURY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [TREASURY_SEED, companyPda.toBuffer()],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * PolicyAccount PDA — owned by Treasury program.\n *\n *   seeds = [\"policy\", company_pda]\n *\n * Initialized atomically with TreasuryAccount via the same `create_company`\n * CPI flow.\n */\nexport function derivePolicyPda(\n  companyPda: PublicKey,\n  programId: PublicKey = TREASURY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [POLICY_SEED, companyPda.toBuffer()],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * ProtocolFeeAccount PDA — owned by Treasury program. Singleton: one\n * per program deployment, collects the Agent Operating Fee from every\n * intra-company agent disbursement.\n *\n *   seeds = [\"protocol_fees\"]\n */\nexport function deriveProtocolFeePda(\n  programId: PublicKey = TREASURY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [PROTOCOL_FEES_SEED],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * OperationsAccount PDA — owned by Treasury program. One per\n * (company, kind) pair, so Disbursement and Anchor capabilities never\n * share a key.\n *\n *   seeds = [\"operations\", company_pda, kind_byte]\n *\n * `kind_byte` is the single-byte discriminator from `OPERATIONS_KIND`\n * (Disbursement=0, Anchor=1). Order MUST NOT change once any account\n * exists.\n */\nexport function deriveOperationsPda(\n  companyPda: PublicKey,\n  kind: OperationsKind,\n  programId: PublicKey = TREASURY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [OPERATIONS_SEED, companyPda.toBuffer(), Buffer.from([kind])],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/** Encode an i64 as little-endian 8 bytes (matches Anchor / Borsh). */\nfunction i64LeBytes(value: bigint): Buffer {\n  const buf = Buffer.alloc(8);\n  buf.writeBigInt64LE(value, 0);\n  return buf;\n}\n\n/**\n * DailyAnchorAccount PDA — owned by Registry program. One per\n * (deployment, UTC day) — captures the Merkle root over that day's\n * task hashes.\n *\n *   seeds = [\"daily_anchor\", deployment_pda, day_unix_le_i64]\n *\n * `dayUnix` must be aligned to 00:00:00 UTC (multiple of 86400). The\n * on-chain handler enforces alignment; passing an unaligned value will\n * fail with a constraint error.\n */\nexport function deriveDailyAnchorPda(\n  deploymentPda: PublicKey,\n  dayUnix: bigint,\n  programId: PublicKey = REGISTRY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [DAILY_ANCHOR_SEED, deploymentPda.toBuffer(), i64LeBytes(dayUnix)],\n    programId,\n  );\n  return { pda, bump };\n}\n","import { PublicKey } from \"@solana/web3.js\";\n\n// Registry program ID. The vanity-grinded program keypair lives at\n// `occa-programs/programs/registry/registry-keypair.json` (gitignored,\n// sibling repo). Public key is committed here so clients (server +\n// web) can derive PDAs without loading the keypair.\n//\n// NOTE: this is the devnet program ID. Mainnet will likely have a\n// different program ID — when that day comes, swap via env or config.\nexport const REGISTRY_PROGRAM_ID_BASE58 =\n  \"occaTHMv5eYG5aZ85jimxTvHkBfsDCvndXC6J2k8kxr\";\n\nexport const REGISTRY_PROGRAM_ID = new PublicKey(REGISTRY_PROGRAM_ID_BASE58);\n\n// Treasury program ID — devnet. Registry's `create_company` CPIs into\n// `treasury::init_treasury` to atomically initialize the company's\n// TreasuryAccount + PolicyAccount PDAs (per design doc §6).\nexport const TREASURY_PROGRAM_ID_BASE58 =\n  \"occaxyVLnurdjedWCBPrvDCCto8wGYadtTZ3nAmcVzh\";\n\nexport const TREASURY_PROGRAM_ID = new PublicKey(TREASURY_PROGRAM_ID_BASE58);\n\n// PDA seed prefixes. Must match `occa-programs/programs/registry/src/lib.rs` exactly.\nexport const COMPANY_SEED = Buffer.from(\"company\");\nexport const AGENT_IDENTITY_SEED = Buffer.from(\"agent_identity\");\nexport const DEPLOYMENT_SEED = Buffer.from(\"deployment\");\n// Treasury PDA seeds (owned by treasury program). Must match\n// `occa-programs/programs/treasury/src/lib.rs`.\nexport const TREASURY_SEED = Buffer.from(\"treasury\");\nexport const POLICY_SEED = Buffer.from(\"policy\");\nexport const PROTOCOL_FEES_SEED = Buffer.from(\"protocol_fees\");\nexport const OPERATIONS_SEED = Buffer.from(\"operations\");\n// DailyAnchor PDA seed (owned by registry program). Seeds:\n// [\"daily_anchor\", deployment_pda, day_unix_le_i64_8bytes].\nexport const DAILY_ANCHOR_SEED = Buffer.from(\"daily_anchor\");\n\n// OperationsKind discriminator byte — must match the Rust enum order in\n// `treasury/src/lib.rs`. Used as the 3rd seed byte of an OperationsAccount\n// PDA and as a u8 wire arg to `register_company_operations`.\nexport const OPERATIONS_KIND = {\n  /** Disbursement Wallet — operator-held only, signs `disburse_routine`. */\n  Disbursement: 0,\n  /** Anchor Wallet — operator+OCCA shared, signs `commit_daily_anchor`. */\n  Anchor: 1,\n} as const;\nexport type OperationsKind =\n  (typeof OPERATIONS_KIND)[keyof typeof OPERATIONS_KIND];\n\n// SOL has no real SPL mint — lamports live directly on accounts. The\n// treasury program uses the default (all-zero) pubkey as the SOL marker\n// in accepted-asset lists and disbursement mint args.\nexport const SOL_PSEUDO_MINT = new PublicKey(new Uint8Array(32));\n\n// On-chain bounds — must match `occa-programs/programs/registry/src/lib.rs`.\nexport const MAX_NAME_LEN = 64;\nexport const MAX_LOCALE_LEN = 8;\nexport const MAX_ROLE_LEN = 32;\nexport const MAX_METADATA_URI_LEN = 200;\nexport const MAX_REPUTATION_URI_LEN = 200;\n\n// Status encodings — must match the on-chain constants.\nexport const COMPANY_STATUS = {\n  Active: 0,\n  Paused: 1,\n} as const;\nexport type CompanyStatus =\n  (typeof COMPANY_STATUS)[keyof typeof COMPANY_STATUS];\n\nexport const DEPLOYMENT_STATUS = {\n  Active: 0,\n  Paused: 1,\n  /** Terminal — retired deployments cannot be reactivated. */\n  Retired: 2,\n} as const;\nexport type DeploymentStatus =\n  (typeof DEPLOYMENT_STATUS)[keyof typeof DEPLOYMENT_STATUS];\n\n// Account discriminators (Anchor sha256(\"account:<Name>\")[..8]).\nexport const ACCOUNT_DISCRIMINATOR = {\n  AgentIdentity: Buffer.from([11, 149, 31, 27, 186, 76, 241, 72]),\n  CompanyAccount: Buffer.from([37, 215, 171, 200, 8, 141, 69, 96]),\n  Deployment: Buffer.from([66, 90, 104, 89, 183, 130, 64, 178]),\n  DailyAnchorAccount: Buffer.from([218, 106, 107, 94, 194, 48, 111, 254]),\n} as const;\n\n// Treasury program account discriminators — from\n// `occa-programs/target/idl/treasury.json`.\nexport const TREASURY_ACCOUNT_DISCRIMINATOR = {\n  TreasuryAccount: Buffer.from([204, 140, 18, 173, 90, 152, 134, 123]),\n  PolicyAccount: Buffer.from([218, 201, 183, 164, 156, 127, 81, 175]),\n  ProtocolFeeAccount: Buffer.from([5, 171, 24, 9, 150, 135, 135, 201]),\n  OperationsAccount: Buffer.from([185, 55, 148, 90, 151, 227, 104, 158]),\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAAA,eAA0B;;;ACA1B,kBAA0B;AASnB,IAAM,6BACX;AAEK,IAAM,sBAAsB,IAAI,sBAAU,0BAA0B;AAKpE,IAAM,6BACX;AAEK,IAAM,sBAAsB,IAAI,sBAAU,0BAA0B;AAGpE,IAAM,eAAe,OAAO,KAAK,SAAS;AAC1C,IAAM,sBAAsB,OAAO,KAAK,gBAAgB;AACxD,IAAM,kBAAkB,OAAO,KAAK,YAAY;AAGhD,IAAM,gBAAgB,OAAO,KAAK,UAAU;AAC5C,IAAM,cAAc,OAAO,KAAK,QAAQ;AACxC,IAAM,qBAAqB,OAAO,KAAK,eAAe;AACtD,IAAM,kBAAkB,OAAO,KAAK,YAAY;AAGhD,IAAM,oBAAoB,OAAO,KAAK,cAAc;AAiBpD,IAAM,kBAAkB,IAAI,sBAAU,IAAI,WAAW,EAAE,CAAC;AA2BxD,IAAM,wBAAwB;AAAA,EACnC,eAAe,OAAO,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;AAAA,EAC9D,gBAAgB,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC;AAAA,EAC/D,YAAY,OAAO,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC;AAAA,EAC5D,oBAAoB,OAAO,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC;AACxE;AAIO,IAAM,iCAAiC;AAAA,EAC5C,iBAAiB,OAAO,KAAK,CAAC,KAAK,KAAK,IAAI,KAAK,IAAI,KAAK,KAAK,GAAG,CAAC;AAAA,EACnE,eAAe,OAAO,KAAK,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC;AAAA,EAClE,oBAAoB,OAAO,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,KAAK,KAAK,KAAK,GAAG,CAAC;AAAA,EACnE,mBAAmB,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,GAAG,CAAC;AACvE;;;ADzEO,SAAS,WAAW,OAAuB;AAChD,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,YAAe;AAClE,UAAM,IAAI,WAAW,qBAAqB,KAAK,EAAE;AAAA,EACnD;AACA,QAAM,MAAM,OAAO,MAAM,CAAC;AAC1B,MAAI,cAAc,OAAO,CAAC;AAC1B,SAAO;AACT;AAWO,SAAS,iBACd,OACA,OACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,cAAc,MAAM,SAAS,GAAG,WAAW,KAAK,CAAC;AAAA,IAClD;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAYO,SAAS,uBACd,aACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,qBAAqB,YAAY,SAAS,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAYO,SAAS,oBACd,YACA,iBACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,iBAAiB,WAAW,SAAS,GAAG,WAAW,eAAe,CAAC;AAAA,IACpE;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAUO,SAAS,kBACd,YACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,eAAe,WAAW,SAAS,CAAC;AAAA,IACrC;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAUO,SAAS,gBACd,YACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,aAAa,WAAW,SAAS,CAAC;AAAA,IACnC;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AASO,SAAS,qBACd,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,kBAAkB;AAAA,IACnB;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAaO,SAAS,oBACd,YACA,MACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,iBAAiB,WAAW,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AAAA,IAC5D;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAGA,SAAS,WAAW,OAAuB;AACzC,QAAM,MAAM,OAAO,MAAM,CAAC;AAC1B,MAAI,gBAAgB,OAAO,CAAC;AAC5B,SAAO;AACT;AAaO,SAAS,qBACd,eACA,SACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,mBAAmB,cAAc,SAAS,GAAG,WAAW,OAAO,CAAC;AAAA,IACjE;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;","names":["import_web3"]}
+{"version":3,"sources":["../src/pda.ts","../src/constants.ts"],"sourcesContent":["import { PublicKey } from \"@solana/web3.js\";\nimport {\n  AGENT_IDENTITY_SEED,\n  COMPANY_SEED,\n  DAILY_ANCHOR_SEED,\n  DEPLOYMENT_SEED,\n  OPERATIONS_SEED,\n  POLICY_SEED,\n  PROTOCOL_FEES_SEED,\n  REGISTRY_PROGRAM_ID,\n  TRACE_SEED,\n  TREASURY_PROGRAM_ID,\n  TREASURY_SEED,\n  type OperationsKind,\n} from \"./constants\";\n\n/**\n * Encode a u32 as little-endian 4 bytes (matches Anchor / Borsh on-chain\n * representation when using a u32 in a PDA seed).\n */\nexport function u32LeBytes(value: number): Buffer {\n  if (!Number.isInteger(value) || value < 0 || value > 0xff_ff_ff_ff) {\n    throw new RangeError(`u32 out of range: ${value}`);\n  }\n  const buf = Buffer.alloc(4);\n  buf.writeUInt32LE(value, 0);\n  return buf;\n}\n\n/**\n * CompanyAccount PDA.\n *\n *   seeds = [\"company\", owner, nonce_le_u32]\n *\n * Wallet-bound seed: a wallet's companies can be enumerated directly\n * from chain by probing `(owner, nonce=0..N)`. The owner is also the\n * sole authority for state-changing ix on this account.\n */\nexport function deriveCompanyPda(\n  owner: PublicKey,\n  nonce: number,\n  programId: PublicKey = REGISTRY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [COMPANY_SEED, owner.toBuffer(), u32LeBytes(nonce)],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * AgentIdentity PDA.\n *\n *   seeds = [\"agent_identity\", agent_pubkey]\n *\n * `agent_pubkey` is a stable identity key chosen by the caller (typically\n * a fresh keypair generated client-side). Identity is independent of any\n * company — the same identity may be deployed multiple times across the\n * same owner's companies.\n */\nexport function deriveAgentIdentityPda(\n  agentPubkey: PublicKey,\n  programId: PublicKey = REGISTRY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [AGENT_IDENTITY_SEED, agentPubkey.toBuffer()],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * Deployment PDA.\n *\n *   seeds = [\"deployment\", company_pda, deployment_index_le_u32]\n *\n * `deployment_index` is a per-company u32 counter. Maintained by the\n * caller — pick the next free index. Same `agent_identity` may have\n * multiple deployments under the same company (e.g. retired then\n * re-deployed); each deployment gets its own index.\n */\nexport function deriveDeploymentPda(\n  companyPda: PublicKey,\n  deploymentIndex: number,\n  programId: PublicKey = REGISTRY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [DEPLOYMENT_SEED, companyPda.toBuffer(), u32LeBytes(deploymentIndex)],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * TreasuryAccount PDA — owned by Treasury program.\n *\n *   seeds = [\"treasury\", company_pda]\n *\n * Initialized atomically with PolicyAccount via Registry's `create_company`\n * CPI to `treasury::init_treasury` (design doc §6).\n */\nexport function deriveTreasuryPda(\n  companyPda: PublicKey,\n  programId: PublicKey = TREASURY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [TREASURY_SEED, companyPda.toBuffer()],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * PolicyAccount PDA — owned by Treasury program.\n *\n *   seeds = [\"policy\", company_pda]\n *\n * Initialized atomically with TreasuryAccount via the same `create_company`\n * CPI flow.\n */\nexport function derivePolicyPda(\n  companyPda: PublicKey,\n  programId: PublicKey = TREASURY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [POLICY_SEED, companyPda.toBuffer()],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * ProtocolFeeAccount PDA — owned by Treasury program. Singleton: one\n * per program deployment, collects the Agent Operating Fee from every\n * intra-company agent disbursement.\n *\n *   seeds = [\"protocol_fees\"]\n */\nexport function deriveProtocolFeePda(\n  programId: PublicKey = TREASURY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [PROTOCOL_FEES_SEED],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * OperationsAccount PDA — owned by Treasury program. One per\n * (company, kind) pair, so Disbursement and Anchor capabilities never\n * share a key.\n *\n *   seeds = [\"operations\", company_pda, kind_byte]\n *\n * `kind_byte` is the single-byte discriminator from `OPERATIONS_KIND`\n * (Disbursement=0, Anchor=1). Order MUST NOT change once any account\n * exists.\n */\nexport function deriveOperationsPda(\n  companyPda: PublicKey,\n  kind: OperationsKind,\n  programId: PublicKey = TREASURY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [OPERATIONS_SEED, companyPda.toBuffer(), Buffer.from([kind])],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/** Encode an i64 as little-endian 8 bytes (matches Anchor / Borsh). */\nfunction i64LeBytes(value: bigint): Buffer {\n  const buf = Buffer.alloc(8);\n  buf.writeBigInt64LE(value, 0);\n  return buf;\n}\n\n/**\n * DailyAnchorAccount PDA — owned by Registry program. One per\n * (deployment, UTC day) — captures the Merkle root over that day's\n * task hashes.\n *\n *   seeds = [\"daily_anchor\", deployment_pda, day_unix_le_i64]\n *\n * `dayUnix` must be aligned to 00:00:00 UTC (multiple of 86400). The\n * on-chain handler enforces alignment; passing an unaligned value will\n * fail with a constraint error.\n */\nexport function deriveDailyAnchorPda(\n  deploymentPda: PublicKey,\n  dayUnix: bigint,\n  programId: PublicKey = REGISTRY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [DAILY_ANCHOR_SEED, deploymentPda.toBuffer(), i64LeBytes(dayUnix)],\n    programId,\n  );\n  return { pda, bump };\n}\n\n/**\n * TraceAnchorAccount PDA — owned by Registry program. One per completed,\n * verified deliverable (article, PR, etc).\n *\n *   seeds = [\"trace\", task_id_32bytes]\n *\n * `taskId` is a 32-byte hash of the task creation params. Collision on the\n * same `taskId` means the task is already anchored — a re-commit fails\n * naturally (Anchor `init` rejects).\n */\nexport function deriveTraceAnchorPda(\n  taskId: Uint8Array,\n  programId: PublicKey = REGISTRY_PROGRAM_ID,\n): { pda: PublicKey; bump: number } {\n  if (taskId.length !== 32) {\n    throw new RangeError(`taskId must be 32 bytes, got ${taskId.length}`);\n  }\n  const [pda, bump] = PublicKey.findProgramAddressSync(\n    [TRACE_SEED, Buffer.from(taskId)],\n    programId,\n  );\n  return { pda, bump };\n}\n","import { PublicKey } from \"@solana/web3.js\";\n\n// Registry program ID. The vanity-grinded program keypair lives at\n// `occa-programs/programs/registry/registry-keypair.json` (gitignored,\n// sibling repo). Public key is committed here so clients (server +\n// web) can derive PDAs without loading the keypair.\n//\n// NOTE: this is the devnet program ID. Mainnet will likely have a\n// different program ID — when that day comes, swap via env or config.\nexport const REGISTRY_PROGRAM_ID_BASE58 =\n  \"occaTHMv5eYG5aZ85jimxTvHkBfsDCvndXC6J2k8kxr\";\n\nexport const REGISTRY_PROGRAM_ID = new PublicKey(REGISTRY_PROGRAM_ID_BASE58);\n\n// Treasury program ID — devnet. Registry's `create_company` CPIs into\n// `treasury::init_treasury` to atomically initialize the company's\n// TreasuryAccount + PolicyAccount PDAs (per design doc §6).\nexport const TREASURY_PROGRAM_ID_BASE58 =\n  \"occaxyVLnurdjedWCBPrvDCCto8wGYadtTZ3nAmcVzh\";\n\nexport const TREASURY_PROGRAM_ID = new PublicKey(TREASURY_PROGRAM_ID_BASE58);\n\n// PDA seed prefixes. Must match `occa-programs/programs/registry/src/lib.rs` exactly.\nexport const COMPANY_SEED = Buffer.from(\"company\");\nexport const AGENT_IDENTITY_SEED = Buffer.from(\"agent_identity\");\nexport const DEPLOYMENT_SEED = Buffer.from(\"deployment\");\n// Treasury PDA seeds (owned by treasury program). Must match\n// `occa-programs/programs/treasury/src/lib.rs`.\nexport const TREASURY_SEED = Buffer.from(\"treasury\");\nexport const POLICY_SEED = Buffer.from(\"policy\");\nexport const PROTOCOL_FEES_SEED = Buffer.from(\"protocol_fees\");\nexport const OPERATIONS_SEED = Buffer.from(\"operations\");\n// DailyAnchor PDA seed (owned by registry program). Seeds:\n// [\"daily_anchor\", deployment_pda, day_unix_le_i64_8bytes].\nexport const DAILY_ANCHOR_SEED = Buffer.from(\"daily_anchor\");\n// TraceAnchor PDA seed (owned by registry program). Seeds:\n// [\"trace\", task_id_32bytes]. One per completed, verified deliverable.\nexport const TRACE_SEED = Buffer.from(\"trace\");\n\n// OperationsKind discriminator byte — must match the Rust enum order in\n// `treasury/src/lib.rs`. Used as the 3rd seed byte of an OperationsAccount\n// PDA and as a u8 wire arg to `register_company_operations`.\nexport const OPERATIONS_KIND = {\n  /** Disbursement Wallet — operator-held only, signs `disburse_routine`. */\n  Disbursement: 0,\n  /**\n   * Anchor Wallet — operator+OCCA shared, signs `commit_daily_anchor`\n   * and `commit_trace`.\n   */\n  Anchor: 1,\n} as const;\nexport type OperationsKind =\n  (typeof OPERATIONS_KIND)[keyof typeof OPERATIONS_KIND];\n\n// SOL has no real SPL mint — lamports live directly on accounts. The\n// treasury program uses the default (all-zero) pubkey as the SOL marker\n// in accepted-asset lists and disbursement mint args.\nexport const SOL_PSEUDO_MINT = new PublicKey(new Uint8Array(32));\n\n// On-chain bounds — must match `occa-programs/programs/registry/src/lib.rs`.\nexport const MAX_NAME_LEN = 64;\nexport const MAX_LOCALE_LEN = 8;\nexport const MAX_ROLE_LEN = 32;\nexport const MAX_METADATA_URI_LEN = 200;\nexport const MAX_REPUTATION_URI_LEN = 200;\nexport const MAX_RESULT_URI_LEN = 200;\nexport const MAX_QUALITY_SCORE = 100;\n\n// TraceAnchorAccount.verdict encoding — only Passed deliverables are\n// anchored (failed/unverified work never reaches the chain).\nexport const TRACE_VERDICT = {\n  Passed: 1,\n} as const;\nexport type TraceVerdict = (typeof TRACE_VERDICT)[keyof typeof TRACE_VERDICT];\n\n// Status encodings — must match the on-chain constants.\nexport const COMPANY_STATUS = {\n  Active: 0,\n  Paused: 1,\n} as const;\nexport type CompanyStatus =\n  (typeof COMPANY_STATUS)[keyof typeof COMPANY_STATUS];\n\nexport const DEPLOYMENT_STATUS = {\n  Active: 0,\n  Paused: 1,\n  /** Terminal — retired deployments cannot be reactivated. */\n  Retired: 2,\n} as const;\nexport type DeploymentStatus =\n  (typeof DEPLOYMENT_STATUS)[keyof typeof DEPLOYMENT_STATUS];\n\n// Account discriminators (Anchor sha256(\"account:<Name>\")[..8]).\nexport const ACCOUNT_DISCRIMINATOR = {\n  AgentIdentity: Buffer.from([11, 149, 31, 27, 186, 76, 241, 72]),\n  CompanyAccount: Buffer.from([37, 215, 171, 200, 8, 141, 69, 96]),\n  Deployment: Buffer.from([66, 90, 104, 89, 183, 130, 64, 178]),\n  DailyAnchorAccount: Buffer.from([218, 106, 107, 94, 194, 48, 111, 254]),\n  TraceAnchorAccount: Buffer.from([159, 101, 186, 98, 211, 217, 119, 232]),\n} as const;\n\n// Treasury program account discriminators — from\n// `occa-programs/target/idl/treasury.json`.\nexport const TREASURY_ACCOUNT_DISCRIMINATOR = {\n  TreasuryAccount: Buffer.from([204, 140, 18, 173, 90, 152, 134, 123]),\n  PolicyAccount: Buffer.from([218, 201, 183, 164, 156, 127, 81, 175]),\n  ProtocolFeeAccount: Buffer.from([5, 171, 24, 9, 150, 135, 135, 201]),\n  OperationsAccount: Buffer.from([185, 55, 148, 90, 151, 227, 104, 158]),\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAAA,eAA0B;;;ACA1B,kBAA0B;AASnB,IAAM,6BACX;AAEK,IAAM,sBAAsB,IAAI,sBAAU,0BAA0B;AAKpE,IAAM,6BACX;AAEK,IAAM,sBAAsB,IAAI,sBAAU,0BAA0B;AAGpE,IAAM,eAAe,OAAO,KAAK,SAAS;AAC1C,IAAM,sBAAsB,OAAO,KAAK,gBAAgB;AACxD,IAAM,kBAAkB,OAAO,KAAK,YAAY;AAGhD,IAAM,gBAAgB,OAAO,KAAK,UAAU;AAC5C,IAAM,cAAc,OAAO,KAAK,QAAQ;AACxC,IAAM,qBAAqB,OAAO,KAAK,eAAe;AACtD,IAAM,kBAAkB,OAAO,KAAK,YAAY;AAGhD,IAAM,oBAAoB,OAAO,KAAK,cAAc;AAGpD,IAAM,aAAa,OAAO,KAAK,OAAO;AAoBtC,IAAM,kBAAkB,IAAI,sBAAU,IAAI,WAAW,EAAE,CAAC;AAoCxD,IAAM,wBAAwB;AAAA,EACnC,eAAe,OAAO,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;AAAA,EAC9D,gBAAgB,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC;AAAA,EAC/D,YAAY,OAAO,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC;AAAA,EAC5D,oBAAoB,OAAO,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC;AAAA,EACtE,oBAAoB,OAAO,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,GAAG,CAAC;AACzE;AAIO,IAAM,iCAAiC;AAAA,EAC5C,iBAAiB,OAAO,KAAK,CAAC,KAAK,KAAK,IAAI,KAAK,IAAI,KAAK,KAAK,GAAG,CAAC;AAAA,EACnE,eAAe,OAAO,KAAK,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC;AAAA,EAClE,oBAAoB,OAAO,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,KAAK,KAAK,KAAK,GAAG,CAAC;AAAA,EACnE,mBAAmB,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,GAAG,CAAC;AACvE;;;ADxFO,SAAS,WAAW,OAAuB;AAChD,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,YAAe;AAClE,UAAM,IAAI,WAAW,qBAAqB,KAAK,EAAE;AAAA,EACnD;AACA,QAAM,MAAM,OAAO,MAAM,CAAC;AAC1B,MAAI,cAAc,OAAO,CAAC;AAC1B,SAAO;AACT;AAWO,SAAS,iBACd,OACA,OACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,cAAc,MAAM,SAAS,GAAG,WAAW,KAAK,CAAC;AAAA,IAClD;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAYO,SAAS,uBACd,aACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,qBAAqB,YAAY,SAAS,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAYO,SAAS,oBACd,YACA,iBACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,iBAAiB,WAAW,SAAS,GAAG,WAAW,eAAe,CAAC;AAAA,IACpE;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAUO,SAAS,kBACd,YACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,eAAe,WAAW,SAAS,CAAC;AAAA,IACrC;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAUO,SAAS,gBACd,YACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,aAAa,WAAW,SAAS,CAAC;AAAA,IACnC;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AASO,SAAS,qBACd,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,kBAAkB;AAAA,IACnB;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAaO,SAAS,oBACd,YACA,MACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,iBAAiB,WAAW,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AAAA,IAC5D;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAGA,SAAS,WAAW,OAAuB;AACzC,QAAM,MAAM,OAAO,MAAM,CAAC;AAC1B,MAAI,gBAAgB,OAAO,CAAC;AAC5B,SAAO;AACT;AAaO,SAAS,qBACd,eACA,SACA,YAAuB,qBACW;AAClC,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,mBAAmB,cAAc,SAAS,GAAG,WAAW,OAAO,CAAC;AAAA,IACjE;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;AAYO,SAAS,qBACd,QACA,YAAuB,qBACW;AAClC,MAAI,OAAO,WAAW,IAAI;AACxB,UAAM,IAAI,WAAW,gCAAgC,OAAO,MAAM,EAAE;AAAA,EACtE;AACA,QAAM,CAAC,KAAK,IAAI,IAAI,uBAAU;AAAA,IAC5B,CAAC,YAAY,OAAO,KAAK,MAAM,CAAC;AAAA,IAChC;AAAA,EACF;AACA,SAAO,EAAE,KAAK,KAAK;AACrB;","names":["import_web3"]}

package/dist/pda.d.cts

@@ -112,5 +112,19 @@ declare function deriveDailyAnchorPda(deploymentPda: PublicKey, dayUnix: bigint,
     pda: PublicKey;
     bump: number;
 };
+/**
+ * TraceAnchorAccount PDA — owned by Registry program. One per completed,
+ * verified deliverable (article, PR, etc).
+ *
+ *   seeds = ["trace", task_id_32bytes]
+ *
+ * `taskId` is a 32-byte hash of the task creation params. Collision on the
+ * same `taskId` means the task is already anchored — a re-commit fails
+ * naturally (Anchor `init` rejects).
+ */
+declare function deriveTraceAnchorPda(taskId: Uint8Array, programId?: PublicKey): {
+    pda: PublicKey;
+    bump: number;
+};
 
-export { deriveAgentIdentityPda, deriveCompanyPda, deriveDailyAnchorPda, deriveDeploymentPda, deriveOperationsPda, derivePolicyPda, deriveProtocolFeePda, deriveTreasuryPda, u32LeBytes };
+export { deriveAgentIdentityPda, deriveCompanyPda, deriveDailyAnchorPda, deriveDeploymentPda, deriveOperationsPda, derivePolicyPda, deriveProtocolFeePda, deriveTraceAnchorPda, deriveTreasuryPda, u32LeBytes };

package/dist/pda.d.ts

@@ -112,5 +112,19 @@ declare function deriveDailyAnchorPda(deploymentPda: PublicKey, dayUnix: bigint,
     pda: PublicKey;
     bump: number;
 };
+/**
+ * TraceAnchorAccount PDA — owned by Registry program. One per completed,
+ * verified deliverable (article, PR, etc).
+ *
+ *   seeds = ["trace", task_id_32bytes]
+ *
+ * `taskId` is a 32-byte hash of the task creation params. Collision on the
+ * same `taskId` means the task is already anchored — a re-commit fails
+ * naturally (Anchor `init` rejects).
+ */
+declare function deriveTraceAnchorPda(taskId: Uint8Array, programId?: PublicKey): {
+    pda: PublicKey;
+    bump: number;
+};
 
-export { deriveAgentIdentityPda, deriveCompanyPda, deriveDailyAnchorPda, deriveDeploymentPda, deriveOperationsPda, derivePolicyPda, deriveProtocolFeePda, deriveTreasuryPda, u32LeBytes };
+export { deriveAgentIdentityPda, deriveCompanyPda, deriveDailyAnchorPda, deriveDeploymentPda, deriveOperationsPda, derivePolicyPda, deriveProtocolFeePda, deriveTraceAnchorPda, deriveTreasuryPda, u32LeBytes };

package/dist/pda.js

@@ -6,10 +6,11 @@ import {
   deriveOperationsPda,
   derivePolicyPda,
   deriveProtocolFeePda,
+  deriveTraceAnchorPda,
   deriveTreasuryPda,
   u32LeBytes
-} from "./chunk-X6FBCGHU.js";
-import "./chunk-YCSBYRSH.js";
+} from "./chunk-QZSQEGLT.js";
+import "./chunk-BR62YC5F.js";
 export {
   deriveAgentIdentityPda,
   deriveCompanyPda,
@@ -18,6 +19,7 @@ export {
   deriveOperationsPda,
   derivePolicyPda,
   deriveProtocolFeePda,
+  deriveTraceAnchorPda,
   deriveTreasuryPda,
   u32LeBytes
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@occa/sdk",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "OCCA on-chain protocol SDK — PDA helpers, instruction builders, and types for the OCCA Registry + Treasury programs on Solana.",
   "license": "MIT",
   "author": "OCCA",

package/src/constants.ts

@@ -33,6 +33,9 @@ export const OPERATIONS_SEED = Buffer.from("operations");
 // DailyAnchor PDA seed (owned by registry program). Seeds:
 // ["daily_anchor", deployment_pda, day_unix_le_i64_8bytes].
 export const DAILY_ANCHOR_SEED = Buffer.from("daily_anchor");
+// TraceAnchor PDA seed (owned by registry program). Seeds:
+// ["trace", task_id_32bytes]. One per completed, verified deliverable.
+export const TRACE_SEED = Buffer.from("trace");
 
 // OperationsKind discriminator byte — must match the Rust enum order in
 // `treasury/src/lib.rs`. Used as the 3rd seed byte of an OperationsAccount
@@ -40,7 +43,10 @@ export const DAILY_ANCHOR_SEED = Buffer.from("daily_anchor");
 export const OPERATIONS_KIND = {
   /** Disbursement Wallet — operator-held only, signs `disburse_routine`. */
   Disbursement: 0,
-  /** Anchor Wallet — operator+OCCA shared, signs `commit_daily_anchor`. */
+  /**
+   * Anchor Wallet — operator+OCCA shared, signs `commit_daily_anchor`
+   * and `commit_trace`.
+   */
   Anchor: 1,
 } as const;
 export type OperationsKind =
@@ -57,6 +63,15 @@ export const MAX_LOCALE_LEN = 8;
 export const MAX_ROLE_LEN = 32;
 export const MAX_METADATA_URI_LEN = 200;
 export const MAX_REPUTATION_URI_LEN = 200;
+export const MAX_RESULT_URI_LEN = 200;
+export const MAX_QUALITY_SCORE = 100;
+
+// TraceAnchorAccount.verdict encoding — only Passed deliverables are
+// anchored (failed/unverified work never reaches the chain).
+export const TRACE_VERDICT = {
+  Passed: 1,
+} as const;
+export type TraceVerdict = (typeof TRACE_VERDICT)[keyof typeof TRACE_VERDICT];
 
 // Status encodings — must match the on-chain constants.
 export const COMPANY_STATUS = {
@@ -81,6 +96,7 @@ export const ACCOUNT_DISCRIMINATOR = {
   CompanyAccount: Buffer.from([37, 215, 171, 200, 8, 141, 69, 96]),
   Deployment: Buffer.from([66, 90, 104, 89, 183, 130, 64, 178]),
   DailyAnchorAccount: Buffer.from([218, 106, 107, 94, 194, 48, 111, 254]),
+  TraceAnchorAccount: Buffer.from([159, 101, 186, 98, 211, 217, 119, 232]),
 } as const;
 
 // Treasury program account discriminators — from