Initial commit: Elydora Go SDK

Go SDK for Elydora agent operations, cryptographic signing, and audit trail integration.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

operations.go

@@ -0,0 +1,91 @@
+package elydora
+
+import "fmt"
+
+// CreateOperation builds a signed EOR from the given parameters.
+// It generates a UUIDv7 operation ID, a nonce, computes the payload hash and chain hash,
+// and signs the entire record with the client's private key.
+func (c *Client) CreateOperation(params *CreateOperationParams) (*EOR, error) {
+	if params == nil {
+		return nil, fmt.Errorf("elydora: params must not be nil")
+	}
+
+	operationID, err := generateUUIDv7()
+	if err != nil {
+		return nil, fmt.Errorf("elydora: generate operation id: %w", err)
+	}
+
+	nonce, err := generateNonce()
+	if err != nil {
+		return nil, fmt.Errorf("elydora: generate nonce: %w", err)
+	}
+
+	issuedAt := nowUnixMs()
+
+	payloadHash, err := computePayloadHash(params.Payload)
+	if err != nil {
+		return nil, fmt.Errorf("elydora: compute payload hash: %w", err)
+	}
+
+	prevChainHash := params.PrevChainHash
+	if prevChainHash == "" {
+		prevChainHash = "GENESIS"
+	}
+
+	kid := params.KID
+	if kid == "" && c.agentID != "" {
+		kid = c.agentID + "-key-1"
+	}
+
+	eor := &EOR{
+		OpVersion:      "1.0",
+		OperationID:    operationID,
+		OrgID:          c.orgID,
+		AgentID:        c.agentID,
+		IssuedAt:       issuedAt,
+		TTLMs:          int64(c.ttlMs),
+		Nonce:          nonce,
+		OperationType:  params.OperationType,
+		Subject:        params.Subject,
+		Action:         params.Action,
+		Payload:        params.Payload,
+		PayloadHash:    payloadHash,
+		PrevChainHash:  prevChainHash,
+		AgentPubkeyKID: kid,
+	}
+
+	signature, err := signEOR(eor, c.privateKey)
+	if err != nil {
+		return nil, fmt.Errorf("elydora: sign eor: %w", err)
+	}
+	eor.Signature = signature
+
+	return eor, nil
+}
+
+// SubmitOperation submits a signed EOR to the Elydora API.
+func (c *Client) SubmitOperation(eor *EOR) (*SubmitOperationResponse, error) {
+	var result SubmitOperationResponse
+	if err := c.doPost("/operations", eor, &result); err != nil {
+		return nil, err
+	}
+	return &result, nil
+}
+
+// GetOperation retrieves an operation by ID.
+func (c *Client) GetOperation(operationID string) (*GetOperationResponse, error) {
+	var result GetOperationResponse
+	if err := c.doGet(fmt.Sprintf("/operations/%s", operationID), &result); err != nil {
+		return nil, err
+	}
+	return &result, nil
+}
+
+// VerifyOperation verifies the integrity of an operation.
+func (c *Client) VerifyOperation(operationID string) (*VerifyOperationResponse, error) {
+	var result VerifyOperationResponse
+	if err := c.doGet(fmt.Sprintf("/operations/%s/verify", operationID), &result); err != nil {
+		return nil, err
+	}
+	return &result, nil
+}