@ashlar-blue/x402-trust 0.3.0 → 0.5.0

package/README.md

@@ -49,22 +49,38 @@ grammar below.
 The rest of this document is the building blocks `checkService` sits on, for
 callers who want the lower-level surface.
 
-## The Open Catalog, self-hostable (staged for 0.2.0)
-
-Two further modules ship the catalog itself as a reference implementation —
-the "anyone can rebuild this from public data" claim, made executable:
-
-- **`open-catalog`** — the catalog engine: mirror the CDP Bazaar via its own
-  public API (with attribution), crawl `discovery` records breadth-first with
-  per-operator frontier-diversity bounds, and serve a provenance-tagged,
-  sha256-digested snapshot. Run it yourself and you are an independent
-  observer, not a mirror of ours.
-- **`catalog-mcp`** — a transport-free MCP server core for that catalog:
-  stateless protocol revision 2026-07-28 primary, sessionless legacy
-  `initialize` shim, four read tools, a signable Server Card, and evidence
-  (snapshot digest + on-chain anchor) carried in BOTH `_meta` and readable
-  content. Wire it to any HTTP framework in ~20 lines; every dependency is
-  injected.
+## Model Context Protocol (MCP) Server
+
+Connect any autonomous AI coding agent (Claude Desktop, Cursor, Antigravity, VS Code, or custom AI agents) directly to the x402 trust and discovery mesh via standard MCP over `stdio`:
+
+```bash
+# Run standalone MCP server
+npx @ashlar-blue/x402-trust mcp
+```
+
+### Claude Desktop / Cursor MCP Configuration:
+```json
+{
+  "mcpServers": {
+    "x402-trust": {
+      "command": "npx",
+      "args": ["-y", "@ashlar-blue/x402-trust", "mcp"],
+      "env": {
+        "X402_NETWORK": "coston2"
+      }
+    }
+  }
+}
+```
+
+### Supported MCP Tools:
+- `x402_check_service`: Resolves DNS TXT (`_x402`) and `/.well-known/x402` to return a hardened `safeToPay` decision with full reasons.
+- `x402_verify_attestation_entry`: Offline RFC 6962 Merkle verification of Intel TDX / AMD SEV TEE hardware quote measurements against a signed directory root.
+- `x402_verify_transcript_inclusion`: Offline RFC 6962 Merkle verification of agent-to-agent session audit entries against a signed transcript root.
+- `x402_verify_reconcile_row`: Offline verification of EIP-3009 / XRPL settlement reconciliation rows against a signed census root.
+- `x402_catalog_search`: Filter and search the decentralized catalog of active x402 endpoints across discovery and bazaar-mirror lanes.
+- `x402_catalog_get`: Retrieve complete provenance records and re-derivation recipes for any resource URL or hostname.
+- `x402_catalog_stats`: Inspect network-wide node counts, active chains, and on-chain Coston2/Flare Merkle anchor hashes.
 
 ## Zero dependencies
 
@@ -83,9 +99,9 @@ npm install @ashlar-blue/x402-trust
 ```ts
 import { resolveX402 } from '@ashlar-blue/x402-trust';
 
-const r = await resolveX402('flareclaw.app');
+const r = await resolveX402('ashlar.blue');
 
-r.via;              // 'dns-txt' — found via _x402.flareclaw.app
+r.via;              // 'dns-txt' — found via _x402.ashlar.blue
 r.manifest.facilitator.baseUrl;
 r.liveKinds;        // fetched from /supported — authoritative over the manifest
 r.kindsMatchLive;   // false = the operator's manifest is stale
@@ -95,7 +111,7 @@ r.attestationUsable // false = treat any TEE claim as absent
 Runs in Node out of the box. In a browser or a worker, inject a DNS resolver (DoH) and it works unchanged:
 
 ```ts
-await resolveX402('flareclaw.app', { resolveTxt: myDohResolver, fetchImpl: fetch });
+await resolveX402('ashlar.blue', { resolveTxt: myDohResolver, fetchImpl: fetch });
 ```
 
 ### What it refuses to do
@@ -184,15 +200,46 @@ import { encodeEvidenceRef, parseEvidenceRef, sameEvidence, canonicalJson } from
 const ref = encodeEvidenceRef({
   alg: 'sha256',
   hex: '...',
-  ref: 'https://api.flareclaw.app/evidence/<digest>.json',
+  ref: 'https://api.ashlar.blue/evidence/<digest>.json',
 });
 // "x402ev/1; digest=sha256:...; ref=https://..."
 ```
 
 Verify one by fetching the artifact, canonicalizing it ([RFC 8785 JCS](https://www.rfc-editor.org/rfc/rfc8785)), hashing, and comparing to the digest. A fetched artifact that **mismatches** its digest is evidence-invalid and must be a hard negative; an artifact that is merely **unreachable** should down-weight the record, not revoke it. Link rot and tampering are different failures.
 
+## ISDA Common Domain Model (CDM) & Securities Bridge
+
+Parse institutional derivatives and securities lifecycle events (Variation Margin, Bond Coupons, Swap Settlements, Equity DvP) directly into conformant x402 HTTP 402 payment challenges and deterministic SCITT accounting statements with SHA-256 pre-image binding:
+
+```ts
+import {
+  parseIsdaCdmEvent,
+  buildIsdaX402Challenge,
+  buildIsdaScittStatement,
+  verifyIsdaSettlement
+} from '@ashlar-blue/x402-trust';
+
+// 1. Parse and validate an incoming ISDA trade lifecycle event
+const event = parseIsdaCdmEvent(rawPayload);
+
+// 2. Generate an x402 HTTP 402 payment challenge for RLUSD / XRPL / Flare
+const challenge = buildIsdaX402Challenge(event, {
+  facilityUrl: 'https://api.ashlar.blue/settle/isda',
+  payToAddress: '0x2222222222222222222222222222222222222222',
+  assetNetwork: 'xrpl:mainnet'
+});
+
+// 3. Emit a canonical SCITT accounting statement bound to the event
+const statement = buildIsdaScittStatement(event);
+
+// 4. Verify on-chain settlement receipt against the accounting statement
+const verdict = verifyIsdaSettlement(statement, onchainReceipt);
+if (!verdict.valid) throw new Error(verdict.error);
+```
+
 ## Status
 
-`0.2.0`. Both extensions are open pull requests, not ratified standards — the wire formats may change in response to review, and this package tracks them. It is published because a specification with an installable implementation is a proposal with users attached, and one without is a PDF. Requires Node ≥20 (the manifest signer validates UTF-16 well-formedness via `String.prototype.isWellFormed`).
+`0.5.0`. Zero-dependency institutional trust and discovery layer for autonomous AI agents and institutional clearing. Published on npm as `@ashlar-blue/x402-trust`. Requires Node ≥20.
 
 MIT.
+

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+// GENERATED from src/x402/cli.ts by scripts/sdk/sync-sdk.ts — do not edit here.
+// The canonical module is the one FlareClaw runs in production; this is a copy so
+// that what we publish and what we run cannot diverge. Edit the canonical file.
+/**
+ * @ashlar-blue/x402-trust CLI & MCP Server Runner.
+ *
+ * Usage:
+ *   npx @ashlar-blue/x402-trust mcp
+ *   npx x402-mcp
+ */
+import { startStdioMcpServer, MCP_SERVER_INFO } from './mcp-server.js';
+import * as path from 'node:path';
+const args = process.argv.slice(2);
+const command = args[0] || 'mcp';
+if (args.includes('--version') || args.includes('-v')) {
+    console.log(`${MCP_SERVER_INFO.name} v${MCP_SERVER_INFO.version}`);
+    process.exit(0);
+}
+if (args.includes('--help') || args.includes('-h')) {
+    console.log(`
+Ashlar Blue x402 Trust Layer CLI & Model Context Protocol (MCP) Server
+
+Commands:
+  mcp             Start the MCP server over stdio (default)
+  --version, -v   Show version
+  --help, -h      Show this help message
+
+Environment Variables:
+  X402_CATALOG_PATH   Path to x402 catalog state JSON (optional)
+
+Documentation:
+  https://ashlar.blue
+  https://github.com/correntelabs/ashlar-blue
+`);
+    process.exit(0);
+}
+if (command === 'mcp') {
+    const catalogPath = process.env.X402_CATALOG_PATH || path.resolve(process.cwd(), 'data/x402-catalog.json');
+    startStdioMcpServer(catalogPath);
+}
+else {
+    console.error(`Unknown command: ${command}. Run with --help for available options.`);
+    process.exit(1);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,gFAAgF;AAChF,kFAAkF;AAClF,gFAAgF;AAGhF;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;AAEjC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,IAAI,KAAK,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcf,CAAC,CAAC;IACC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;IACpB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAC3G,mBAAmB,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;KAAM,CAAC;IACJ,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,0CAA0C,CAAC,CAAC;IACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/index.d.ts

@@ -6,10 +6,12 @@ export * from './facilitator-config.js';
 export * from './open-catalog.js';
 export * from './catalog-mcp.js';
 export * from './reconcile.js';
+export * from './isda-cdm.js';
 export * from './manifest-sig.js';
 export * from './merkle-transcript.js';
 export * from './attested-directory.js';
 export * from './census-reconcile.js';
 export * from './directory-classify.js';
 export * from './trust-sdk.js';
+export * from './mcp-server.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC"}

package/dist/index.js

@@ -9,10 +9,12 @@ export * from './facilitator-config.js';
 export * from './open-catalog.js';
 export * from './catalog-mcp.js';
 export * from './reconcile.js';
+export * from './isda-cdm.js';
 export * from './manifest-sig.js';
 export * from './merkle-transcript.js';
 export * from './attested-directory.js';
 export * from './census-reconcile.js';
 export * from './directory-classify.js';
 export * from './trust-sdk.js';
+export * from './mcp-server.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAEhF,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAEhF,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC"}

package/dist/isda-cdm.d.ts

@@ -0,0 +1,83 @@
+import type { X402Challenge } from './types.js';
+export interface IsdaCdmTradeEvent {
+    tradeId: string;
+    eventType: 'VARIATION_MARGIN' | 'INITIAL_MARGIN' | 'SWAP_SETTLEMENT' | 'BOND_COUPON' | 'EQUITY_DVP';
+    payer: string;
+    receiver: string;
+    notionalAmount: string;
+    settlementCurrency: string;
+    isinOrCusip?: string;
+    effectiveDate: string;
+    enclaveMeasurement?: string;
+}
+export interface IsdaX402ChallengeOptions {
+    facilityUrl: string;
+    assetNetwork: string;
+    payToAddress: string;
+    expirationSeconds?: number;
+}
+export interface IsdaScittStatement {
+    statementType: string;
+    tradeId: string;
+    eventType: string;
+    grossAmount: string;
+    currency: string;
+    payer: string;
+    receiver: string;
+    isinOrCusip: string;
+    timestamp: number;
+    enclaveMeasurement: string;
+    statementDigest: string;
+}
+export interface IsdaSettlementReceipt {
+    transactionHash: string;
+    payer: string;
+    receiver: string;
+    settledAmount: string;
+    currency: string;
+    status: 'CONFIRMED' | 'FAILED';
+}
+/**
+ * Parses a raw ISDA CDM JSON string or object payload into a validated IsdaCdmTradeEvent.
+ */
+export declare function parseIsdaCdmEvent(rawPayload: unknown): IsdaCdmTradeEvent;
+/**
+ * Constructs a standard x402 Challenge from an ISDA CDM Trade Event.
+ */
+export declare function buildIsdaX402Challenge(event: IsdaCdmTradeEvent, opts: IsdaX402ChallengeOptions): X402Challenge;
+/**
+ * Builds a deterministic SCITT Signed Accounting Statement payload for an ISDA trade settlement.
+ */
+export declare function buildIsdaScittStatement(event: IsdaCdmTradeEvent, settlementTimestamp?: number): IsdaScittStatement;
+/**
+ * Verifies an on-chain settlement receipt against a canonical ISDA SCITT statement.
+ */
+export declare function verifyIsdaSettlement(statement: IsdaScittStatement, receipt: IsdaSettlementReceipt): {
+    valid: boolean;
+    error?: string;
+};
+export interface DvpSettlementResult {
+    tradeId: string;
+    status: 'SETTLED' | 'REFUSED_FAILED_LEG' | 'REFUSED_EXPIRED';
+    assetLeg: {
+        assetIdentifier: string;
+        from: string;
+        to: string;
+        quantity: string;
+        status: 'TRANSFERRED' | 'PENDING';
+    };
+    cashLeg: {
+        currency: string;
+        from: string;
+        to: string;
+        amount: string;
+        status: 'SETTLED' | 'PENDING';
+    };
+    enclaveProofDigest: string;
+    settlementTimestamp: number;
+}
+/**
+ * Simulates atomic Delivery-vs-Payment (DvP) trade execution inside a secure TEE enclave.
+ */
+export declare function executeDvpSettlement(event: IsdaCdmTradeEvent, assetQuantity: string, assetConfirmed: boolean, cashConfirmed: boolean, enclaveMeasurement?: string): DvpSettlementResult;
+//# sourceMappingURL=isda-cdm.d.ts.map

package/dist/isda-cdm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isda-cdm.d.ts","sourceRoot":"","sources":["../src/isda-cdm.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,aAAa,GAAG,YAAY,CAAC;IACpG,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,OAAO,GAAG,iBAAiB,CAgDxE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,wBAAwB,GAC7B,aAAa,CAwBf;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,iBAAiB,EACxB,mBAAmB,GAAE,MAAsC,GAC1D,kBAAkB,CAqBpB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,kBAAkB,EAC7B,OAAO,EAAE,qBAAqB,GAC7B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAkBpC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;IAC7D,QAAQ,EAAE;QACR,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;KAC/B,CAAC;IACF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,iBAAiB,EACxB,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,OAAO,EACvB,aAAa,EAAE,OAAO,EACtB,kBAAkB,SAA4E,GAC7F,mBAAmB,CAiDrB"}

package/dist/isda-cdm.js

@@ -0,0 +1,182 @@
+// GENERATED from src/x402/isda-cdm.ts by scripts/sdk/sync-sdk.ts — do not edit here.
+// The canonical module is the one FlareClaw runs in production; this is a copy so
+// that what we publish and what we run cannot diverge. Edit the canonical file.
+/**
+ * ISDA Common Domain Model (CDM) & Securities x402 Bridge
+ *
+ * Provides zero-dependency mapping between ISDA CDM trade lifecycle events
+ * (Variation Margin calls, Interest Rate Swap payoffs, Bond Coupon distributions)
+ * and x402 payment challenges + SCITT audit statements.
+ */
+import { createHash } from 'node:crypto';
+/**
+ * Parses a raw ISDA CDM JSON string or object payload into a validated IsdaCdmTradeEvent.
+ */
+export function parseIsdaCdmEvent(rawPayload) {
+    let obj;
+    if (typeof rawPayload === 'string') {
+        try {
+            obj = JSON.parse(rawPayload);
+        }
+        catch {
+            throw new TypeError('Invalid JSON string for ISDA CDM payload');
+        }
+    }
+    else if (typeof rawPayload === 'object' && rawPayload !== null) {
+        obj = rawPayload;
+    }
+    else {
+        throw new TypeError('Invalid ISDA CDM payload: expected an object or JSON string');
+    }
+    if (typeof obj.tradeId !== 'string' || !obj.tradeId) {
+        throw new TypeError('Missing required ISDA fields: invalid tradeId');
+    }
+    const validTypes = ['VARIATION_MARGIN', 'INITIAL_MARGIN', 'SWAP_SETTLEMENT', 'BOND_COUPON', 'EQUITY_DVP'];
+    if (typeof obj.eventType !== 'string' || !validTypes.includes(obj.eventType)) {
+        throw new TypeError(`Invalid ISDA CDM payload: eventType must be one of ${validTypes.join(', ')}`);
+    }
+    if (typeof obj.payer !== 'string' || typeof obj.receiver !== 'string') {
+        throw new TypeError('Invalid ISDA CDM payload: payer and receiver must be valid string identifiers');
+    }
+    if (typeof obj.notionalAmount !== 'string' || typeof obj.settlementCurrency !== 'string') {
+        throw new TypeError('Invalid ISDA CDM payload: notionalAmount and settlementCurrency must be strings');
+    }
+    const num = parseFloat(obj.notionalAmount);
+    if (isNaN(num) || num <= 0) {
+        throw new TypeError('Invalid notional amount: must be positive numeric string');
+    }
+    return {
+        tradeId: obj.tradeId,
+        eventType: obj.eventType,
+        payer: obj.payer,
+        receiver: obj.receiver,
+        notionalAmount: obj.notionalAmount,
+        settlementCurrency: obj.settlementCurrency,
+        isinOrCusip: typeof obj.isinOrCusip === 'string' ? obj.isinOrCusip : 'N/A',
+        effectiveDate: typeof obj.effectiveDate === 'string' ? obj.effectiveDate : new Date().toISOString(),
+        enclaveMeasurement: typeof obj.enclaveMeasurement === 'string' ? obj.enclaveMeasurement : '',
+    };
+}
+/**
+ * Constructs a standard x402 Challenge from an ISDA CDM Trade Event.
+ */
+export function buildIsdaX402Challenge(event, opts) {
+    return {
+        x402Version: 1,
+        error: `Payment required for ISDA CDM event ${event.eventType} (${event.tradeId})`,
+        accepts: [
+            {
+                scheme: 'exact',
+                network: opts.assetNetwork,
+                amount: event.notionalAmount,
+                maxAmountRequired: event.notionalAmount,
+                resource: opts.facilityUrl,
+                description: `ISDA Settlement: ${event.eventType} for ${event.isinOrCusip || event.tradeId}`,
+                mimeType: 'application/json',
+                payTo: opts.payToAddress,
+                maxTimeoutSeconds: 300,
+                asset: opts.payToAddress,
+                extra: {
+                    name: event.settlementCurrency,
+                    version: '1',
+                    assetTransferMethod: 'eip3009'
+                }
+            }
+        ]
+    };
+}
+/**
+ * Builds a deterministic SCITT Signed Accounting Statement payload for an ISDA trade settlement.
+ */
+export function buildIsdaScittStatement(event, settlementTimestamp = Math.floor(Date.now() / 1000)) {
+    const base = {
+        statementType: 'https://x402.org/schemas/v1/isda-settlement',
+        tradeId: event.tradeId,
+        eventType: event.eventType,
+        grossAmount: event.notionalAmount,
+        currency: event.settlementCurrency,
+        payer: event.payer,
+        receiver: event.receiver,
+        isinOrCusip: event.isinOrCusip || 'N/A',
+        timestamp: settlementTimestamp,
+        enclaveMeasurement: event.enclaveMeasurement || '',
+    };
+    const rawBytes = JSON.stringify(base);
+    const digest = `sha256:${createHash('sha256').update(rawBytes, 'utf8').digest('hex')}`;
+    return {
+        ...base,
+        statementDigest: digest,
+    };
+}
+/**
+ * Verifies an on-chain settlement receipt against a canonical ISDA SCITT statement.
+ */
+export function verifyIsdaSettlement(statement, receipt) {
+    if (receipt.status !== 'CONFIRMED') {
+        return { valid: false, error: 'Settlement receipt status is not CONFIRMED' };
+    }
+    if (receipt.payer.toLowerCase() !== statement.payer.toLowerCase()) {
+        return { valid: false, error: `Payer mismatch: expected ${statement.payer}, got ${receipt.payer}` };
+    }
+    if (receipt.receiver.toLowerCase() !== statement.receiver.toLowerCase()) {
+        return { valid: false, error: `Receiver mismatch: expected ${statement.receiver}, got ${receipt.receiver}` };
+    }
+    if (receipt.currency !== statement.currency) {
+        return { valid: false, error: `Currency mismatch: expected ${statement.currency}, got ${receipt.currency}` };
+    }
+    if (receipt.settledAmount !== statement.grossAmount) {
+        return { valid: false, error: `Settled amount mismatch: expected ${statement.grossAmount}, got ${receipt.settledAmount}` };
+    }
+    return { valid: true };
+}
+/**
+ * Simulates atomic Delivery-vs-Payment (DvP) trade execution inside a secure TEE enclave.
+ */
+export function executeDvpSettlement(event, assetQuantity, assetConfirmed, cashConfirmed, enclaveMeasurement = 'sha256:d0e0af6c00aede25451ce3a67df4a45d0d964c7b9196dc725dd310723eb8a49f') {
+    const timestamp = Math.floor(Date.now() / 1000);
+    if (!assetConfirmed || !cashConfirmed) {
+        return {
+            tradeId: event.tradeId,
+            status: 'REFUSED_FAILED_LEG',
+            assetLeg: {
+                assetIdentifier: event.isinOrCusip || 'N/A',
+                from: event.receiver, // Asset seller
+                to: event.payer, // Asset buyer
+                quantity: assetQuantity,
+                status: assetConfirmed ? 'TRANSFERRED' : 'PENDING',
+            },
+            cashLeg: {
+                currency: event.settlementCurrency,
+                from: event.payer,
+                to: event.receiver,
+                amount: event.notionalAmount,
+                status: cashConfirmed ? 'SETTLED' : 'PENDING',
+            },
+            enclaveProofDigest: 'sha256:0000000000000000000000000000000000000000000000000000000000000000',
+            settlementTimestamp: timestamp,
+        };
+    }
+    const rawProof = `${event.tradeId}:${event.isinOrCusip}:${event.notionalAmount}:${enclaveMeasurement}:${timestamp}`;
+    const proofDigest = `sha256:${createHash('sha256').update(rawProof, 'utf8').digest('hex')}`;
+    return {
+        tradeId: event.tradeId,
+        status: 'SETTLED',
+        assetLeg: {
+            assetIdentifier: event.isinOrCusip || 'N/A',
+            from: event.receiver,
+            to: event.payer,
+            quantity: assetQuantity,
+            status: 'TRANSFERRED',
+        },
+        cashLeg: {
+            currency: event.settlementCurrency,
+            from: event.payer,
+            to: event.receiver,
+            amount: event.notionalAmount,
+            status: 'SETTLED',
+        },
+        enclaveProofDigest: proofDigest,
+        settlementTimestamp: timestamp,
+    };
+}
+//# sourceMappingURL=isda-cdm.js.map

package/dist/isda-cdm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isda-cdm.js","sourceRoot":"","sources":["../src/isda-cdm.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,kFAAkF;AAClF,gFAAgF;AAEhF;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6CzC;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAmB;IACnD,IAAI,GAA4B,CAAC;IAEjC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACjE,GAAG,GAAG,UAAqC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IAC1G,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,sDAAsD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,SAAS,CAAC,+EAA+E,CAAC,CAAC;IACvG,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,iFAAiF,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAC;IAClF,CAAC;IAED,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAA2C;QAC1D,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK;QAC1E,aAAa,EAAE,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnG,kBAAkB,EAAE,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE;KAC7F,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAwB,EACxB,IAA8B;IAE9B,OAAO;QACL,WAAW,EAAE,CAAC;QACd,KAAK,EAAE,uCAAuC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,GAAG;QAClF,OAAO,EAAE;YACP;gBACE,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,IAAI,CAAC,YAAY;gBAC1B,MAAM,EAAE,KAAK,CAAC,cAAc;gBAC5B,iBAAiB,EAAE,KAAK,CAAC,cAAc;gBACvC,QAAQ,EAAE,IAAI,CAAC,WAAW;gBAC1B,WAAW,EAAE,oBAAoB,KAAK,CAAC,SAAS,QAAQ,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE;gBAC5F,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE,IAAI,CAAC,YAAY;gBACxB,iBAAiB,EAAE,GAAG;gBACtB,KAAK,EAAE,IAAI,CAAC,YAAY;gBACxB,KAAK,EAAE;oBACL,IAAI,EAAE,KAAK,CAAC,kBAAkB;oBAC9B,OAAO,EAAE,GAAG;oBACZ,mBAAmB,EAAE,SAAS;iBAC/B;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAwB,EACxB,sBAA8B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAE3D,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,6CAA6C;QAC5D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,cAAc;QACjC,QAAQ,EAAE,KAAK,CAAC,kBAAkB;QAClC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK;QACvC,SAAS,EAAE,mBAAmB;QAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;KACnD,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAEvF,OAAO;QACL,GAAG,IAAI;QACP,eAAe,EAAE,MAAM;KACxB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAA6B,EAC7B,OAA8B;IAE9B,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,SAAS,CAAC,KAAK,SAAS,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QACxE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,SAAS,CAAC,QAAQ,SAAS,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,SAAS,CAAC,QAAQ,SAAS,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,SAAS,CAAC,WAAW,SAAS,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;IAC7H,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAuBD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAwB,EACxB,aAAqB,EACrB,cAAuB,EACvB,aAAsB,EACtB,kBAAkB,GAAG,yEAAyE;IAE9F,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAEhD,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE;gBACR,eAAe,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK;gBAC3C,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,eAAe;gBACrC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAO,cAAc;gBACpC,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;aACnD;YACD,OAAO,EAAE;gBACP,QAAQ,EAAE,KAAK,CAAC,kBAAkB;gBAClC,IAAI,EAAE,KAAK,CAAC,KAAK;gBACjB,EAAE,EAAE,KAAK,CAAC,QAAQ;gBAClB,MAAM,EAAE,KAAK,CAAC,cAAc;gBAC5B,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aAC9C;YACD,kBAAkB,EAAE,yEAAyE;YAC7F,mBAAmB,EAAE,SAAS;SAC/B,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,cAAc,IAAI,kBAAkB,IAAI,SAAS,EAAE,CAAC;IACpH,MAAM,WAAW,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAE5F,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE;YACR,eAAe,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK;YAC3C,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,aAAa;SACtB;QACD,OAAO,EAAE;YACP,QAAQ,EAAE,KAAK,CAAC,kBAAkB;YAClC,IAAI,EAAE,KAAK,CAAC,KAAK;YACjB,EAAE,EAAE,KAAK,CAAC,QAAQ;YAClB,MAAM,EAAE,KAAK,CAAC,cAAc;YAC5B,MAAM,EAAE,SAAS;SAClB;QACD,kBAAkB,EAAE,WAAW;QAC/B,mBAAmB,EAAE,SAAS;KAC/B,CAAC;AACJ,CAAC"}