@hyperscale0/hsx 1.0.134 → 1.0.199

package/src/std-bundle.ts

@@ -9,8 +9,8 @@ export const BUNDLED_STD_FILES: ReadonlyMap<string, string> = new Map<string, st
   ["insurance.hsx", "header insurance\n\n// Economics: Company commission is earning; refunds reverse its captured transfer.\n// Outside broker commissions are pass-through. Adapter-owned premium and claim\n// accounts lack an authored source party, so their moves remain unclassified.\n\n// Expose cover.create, activate and cancel separately. The adapter names a\n// registered boundary adapter (conformance_boundary in sandbox). covers is an\n// optional link to a sibling attachment; the attached object is already the\n// insured thing. claim_limit is the sum insured: approved and paid claims on one\n// cover, across every claim attachment, never total more. Activation binds adapter;\n// each slice needs a separately created unique period and an active cover to collect.\n// Collection debits holder for insurerPremium to the insurer and commission to\n// broker as two moves. Broker defaults to programOperator; bind a declared business\n// for a distinct agency. The two amounts sum to premium. Zero portions are allowed.\n// Cover.cancel invokes refund only on paid slices, before each startsAt. It returns\n// insurerPremium from insurer and commission from broker to holder. Active or\n// expired periods are excluded; insufficient recipient funds refuse the reversal.\n// Slice refund is parent-owned, not a public alias. Expose cover.cancel instead.\n// Claims require active cover. Expose claim.create, approve, deny and pay as needed.\n// Inspector approves OR denies from submitted. After approval only pay or clock\n// expiry can consume the reservation; deny is never available after approval.\n// Inspector is a bound party, not necessarily staff. These are ledger transfers;\n// outside settlement needs the boundary protocol, not a claim of provider success.\n\n// Cost: each slice collection or refund declares two transfers. Claim approval\n// reserves once; pay posts once and expiry voids once. Cover cancellation adds\n// bounded slice invocations. Run hsx cost for composed counts, not provider prices.\n\ninstrument cover(holder: party, adapter: text, commission: percent = 0%, broker: party = programOperator, covers: ref?, premium: money = runtime, claim_limit: money = runtime) {\n  summary: \"Recurring cover bound to an outside insurer across an ADL boundary.\"\n  fields { covers: ref<covers>?, holder: account of holder, insurer: account(adapter(adapter), cash, \"premium\"), expiresAt: date, claimLimit: money = claim_limit }\n  lifecycle { states: [pending, active, cancelled, expired], initial: pending }\n  action create { actor: { party: holder } }\n  action activate {\n    from: pending, to: active, actor: { party: programOperator }\n    subject { adapter: adapter }\n  }\n  action cancel {\n    from: active, to: cancelled, actor: { party: holder }\n    invoke: [{ selection: { instrument: slice, reference: \"cover\", anchor: self.id, states: [paid], limit: 366 }, action: refund, input: {} }]\n  }\n  action expire { from: active, to: expired, actor: clock, due: { at: self.expiresAt } }\n  records {\n    slice: {\n      summary: \"A whole premium period, collected once and refundable only before it starts.\"\n      fields {\n        cover: ref<parent>, premium: money = premium, startsAt: date, endsAt: date\n        commission: money = rate(self.premium, commission)\n        insurerPremium: money = subtract(self.premium, self.commission), commissionReceipt: text?\n      }\n      lifecycle { states: [pending, paid, active, expired, refunded], initial: pending }\n      action create {\n        requires self.startsAt < self.endsAt\n        requires unique \"premium_period\" on [self.cover, self.startsAt, self.endsAt]\n      }\n      action collect {\n        allowZero: true\n        requires self.premium > \"0\"\n        from: pending, to: paid, actor: { party: holder }\n        requires self.cover in [active]\n        moves self.insurerPremium from holder to self.cover.insurer\n        moves self.commission from holder to broker capture \"commissionReceipt\" economics { recipient: broker, company: { purpose: earning, sourceParty: holder }, participant: { purpose: pass_through, sourceParty: holder } }\n      }\n      action start { from: paid, to: active, actor: clock, due: { at: self.startsAt } }\n      action expire { from: active, to: expired, actor: clock, due: { at: self.endsAt } }\n      action refund {\n        allowZero: true\n        requires self.premium > \"0\"\n        from: paid, to: refunded, actor: { parent: parent }, deadline: { at: self.startsAt }\n        moves self.insurerPremium from self.cover.insurer to holder\n        moves self.commission from broker to holder economics { recipient: broker, company: { purpose: earning, sourceParty: broker, reversalOf: self.commissionReceipt }, participant: { purpose: pass_through, sourceParty: broker } }\n      }\n    }\n  }\n}\n\ninstrument claim(cover: ref<insurance.cover>, inspector: party) {\n  summary: \"A claim decision reserves one claim payment before settlement.\"\n  fields { cover: ref<cover>, amount: money, expiresAt: date, evidence: text, reservation: text? }\n  lifecycle { states: [submitted, approved, paid, denied, expired], initial: submitted }\n  invariants sum \"amount\" of { instrument: all(insurance.claim), reference: \"cover\", anchor: self.cover, states: [approved, paid], limit: 366 } <= self.cover.claimLimit\n  action create { requires self.cover in [active] }\n  action approve {\n    from: submitted, to: approved\n    actor: { party: inspector }\n    deadline: { at: self.expiresAt }\n    moves reserve self.amount from self.cover.insurer to self.cover.holder capture \"reservation\"\n  }\n  action pay { from: approved, to: paid, actor: { party: inspector }, deadline: { at: self.expiresAt }, moves post self.reservation }\n  action deny { from: submitted, to: denied, actor: { party: inspector } }\n  action expire { from: approved, to: expired, actor: clock, due: { at: self.expiresAt }, moves void self.reservation }\n}\n"],
   ["lending.hsx", "header lending\n\n// Economics: Funding and commitment returns are principal. Distribution tax is\n// pass-through; own-account fee and claim allocations are internal. Mixed\n// principal/profit distributions and unbound source owners remain unclassified.\n\n// Round target is plan.principal from runtime subject.price, not its credit limit.\n// The operator opens the round and closes it before closesAt. Expose\n// round.create and close plus commitment.create and withdraw. A commitment\n// debits the bound investor's original active wallet before closesAt. Investor cap\n// aggregates by investor across wallets. A round still open at closesAt fails,\n// even when fully committed, and refunds those original wallets.\n// Closing needs the exact target; it funds plan.capital and does not disburse the\n// loan. Expose plan.disburse separately after signing and limit approval.\n// Distribution.create needs a recorded settlement matching the plan. Only the\n// payout consumes it: distribute_cash or distribute_loss claims the settlement\n// and marks it distributed, so the plan's unwind_paid keeps that profit, while an\n// abandoned distribution leaves the settlement refundable.\n// Prepare cash or loss first, then create shares against funded commitments of\n// that round. Distribution needs pending share weights equal to the round target.\n// Cash fee is a percentage of retained profit, VAT a percentage of that fee.\n// Principal plus retained profit less fee and VAT goes to weighted wallets;\n// floored residual goes to residual_to. Loss mode moves claim balances, not cash.\n// Child share execution is parent-owned. No report or clock proves outside payout.\n\n// Cost: round.create declares one owned account. Close transfers its balance\n// and invokes commitments; failure invokes their refunds. Distribution adds moves\n// and bounded share invocations. Run hsx cost for counts after policy selection.\n\ninstrument round(borrower: party, plan: ref<financing.installments> = object(financing.installments), operator: party = programOperator, minimum_ticket: money = 100 SAR, investor_cap: percent = 20%, commitments: ref<lending.commitment> = object(lending.commitment)) {\n  summary: \"A threshold funding round; failed rounds return each original wallet contribution.\"\n  fields {\n    borrower: account of borrower, plan: ref<plan>, price: money = self.plan.principal, closesAt: date\n    minimumTicket: money = minimum_ticket, maximumTicket: money = rate(self.price, investor_cap)\n    held: account of self\n  }\n  lifecycle { states: [open, funded, failed], initial: open }\n  action create { actor: { party: operator }, requires unique \"funding_plan\" on [self.plan]; requires self.borrower == self.plan.borrower }\n  action close {\n    from: open, to: funded, actor: { party: operator }\n    requires sum \"amount\" of { instrument: commitments, reference: \"round\", anchor: self.id, states: [committed], limit: 366 } == self.price\n    requires self.held.balance == self.price\n    moves self.price from self.held to self.plan.capital economics { purpose: principal, sourceParty: programOperator }\n    invoke: [{ selection: { instrument: commitments, reference: \"round\", anchor: self.id, states: [committed], limit: 366 }, action: fund, input: {} }]\n  }\n  action fail {\n    from: open, to: failed, actor: clock, due: { at: self.closesAt }\n    invoke: [{ selection: { instrument: commitments, reference: \"round\", anchor: self.id, states: [committed], limit: 366 }, action: refund, input: {} }]\n  }\n}\n\ninstrument commitment(round: ref<lending.round>, wallet: ref<wallet.balance>, investor: party = party(person)) {\n  summary: \"One investor's original-wallet contribution, capped cumulatively within the round.\"\n  fields { round: ref<round>, wallet: ref<wallet>, investor: account of investor, amount: money, loss: account(investor, claim, \"loss\") }\n  lifecycle { states: [committed, funded, withdrawn, refunded], initial: committed }\n  invariants sum \"amount\" of { instrument: all(lending.commitment), reference: \"round\", anchor: self.round, states: [committed, funded], limit: 366, where: { investor: { field: self.investor } } } <= self.round.maximumTicket\n  invariants sum \"amount\" of { instrument: all(lending.commitment), reference: \"round\", anchor: self.round, states: [committed, funded], limit: 366 } <= self.round.price\n  action create {\n    actor: { party: investor }\n    requires self.round in [open]\n    requires self.wallet in [active]\n    requires self.wallet.holder == self.investor\n    requires self.amount >= self.round.minimumTicket\n    deadline: { at: self.round.closesAt }\n    moves self.amount from self.wallet.held to self.round.held economics { purpose: principal, sourceParty: programOperator }\n  }\n  action fund { from: committed, to: funded, actor: { parent: round } }\n  action withdraw {\n    from: committed, to: withdrawn, actor: { party: investor }\n    requires self.round in [open]\n    deadline: { at: self.round.closesAt }\n    moves self.amount from self.round.held to self.wallet.held economics { purpose: principal, sourceParty: programOperator }\n  }\n  action refund {\n    from: committed, to: refunded, actor: { parent: round }\n    moves self.amount from self.round.held to self.wallet.held economics { purpose: principal, sourceParty: programOperator }\n  }\n}\n\ninstrument distribution(round: ref<lending.round>, receipt: ref, commitments: ref<lending.commitment> = object(lending.commitment), mode: enum(cash, loss) = cash, residual_to: party = programOperator, operator: party = programOperator, fee: percent = 1%, tax: percent = 15%) {\n  summary: \"Frozen weighted shares, floored once, with residual assigned to the chosen party.\"\n  fields {\n    round: ref<round>, source: ref<receipt>, mode: enum(cash, loss) = mode\n    principal: money?, profit: money?, grossTotal: money?, charge: money?, vat: money?, net: money?\n    held: account of self, losses: account(self, claim), residualLoss: account(residual_to, claim, \"loss\")\n  }\n  lifecycle { states: [pending, cash_ready, loss_ready, distributed], initial: pending }\n  action create {\n    requires self.round in [funded]; requires self.source in [recorded]; requires self.source.plan == self.round.plan\n  }\n  action prepare_cash {\n    from: pending, to: cash_ready\n    requires self.mode == \"cash\"; requires self.source.kind == \"cash\"; requires self.source in [recorded]\n    calculate: [\n      { target: \"principal\", op: \"sum\", values: [{ field: self.source.principal }] }\n      { target: \"profit\", op: \"sum\", values: [{ field: self.source.retainedProfit }] }\n      { target: \"charge\", op: \"rate\", base: { field: self.profit }, bps: { literal: fee }, rounding: \"floor\" }\n      { target: \"vat\", op: \"rate\", base: { field: self.charge }, bps: { literal: tax }, rounding: \"floor\" }\n      { target: \"grossTotal\", op: \"sum\", values: [{ field: self.principal }, { field: self.profit }] }\n      { target: \"net\", op: \"subtract\", base: { field: self.grossTotal }, subtract: [{ field: self.charge }, { field: self.vat }] }\n    ]\n  }\n  action prepare_loss {\n    from: pending, to: loss_ready\n    requires self.mode == \"loss\"; requires self.source.kind == \"loss\"; requires self.source in [recorded]\n    calculate: [{ target: \"net\", op: \"sum\", values: [{ field: self.source.loss }] }]\n  }\n  action distribute_cash { allowZero: true,\n    from: cash_ready, to: distributed, actor: { party: operator }\n    requires self.source in [recorded]; requires unique \"settlement_consumption\" on [self.source.plan, self.source.identity]\n    requires sum \"weight\" of { instrument: share, reference: \"distribution\", anchor: self.id, states: [pending], limit: 366 } == self.round.price\n    moves self.principal from self.source.capital to self.held; moves self.profit from self.source.profitIncome to self.held; moves self.charge from self.held to programOperator economics { purpose: internal, sourceParty: programOperator }; moves self.vat from self.held to programTax economics { purpose: pass_through, sourceParty: programOperator }\n    invoke: [{ reference: self.source, action: distribute, input: {} }, { selection: { instrument: share, reference: \"distribution\", anchor: self.id, states: [pending], limit: 366 }, action: cash, input: {} }, { reference: self.id, action: residual_cash, input: {} }]\n  }\n  action residual_cash { allowZero: true,\n    from: distributed, to: distributed, actor: { parent: current() }\n    moves self.held.balance from self.held to residual_to\n  }\n  action distribute_loss { allowZero: true,\n    from: loss_ready, to: distributed, actor: { party: operator }\n    requires self.source in [recorded]; requires unique \"settlement_consumption\" on [self.source.plan, self.source.identity]\n    requires sum \"weight\" of { instrument: share, reference: \"distribution\", anchor: self.id, states: [pending], limit: 366 } == self.round.price\n    moves self.net from self.source.lossAccount to self.losses\n    invoke: [{ reference: self.source, action: distribute, input: {} }, { selection: { instrument: share, reference: \"distribution\", anchor: self.id, states: [pending], limit: 366 }, action: loss, input: {} }, { reference: self.id, action: residual_loss, input: {} }]\n  }\n  action residual_loss { allowZero: true,\n    from: distributed, to: distributed, actor: { parent: current() }\n    moves self.losses.balance from self.losses to self.residualLoss economics { purpose: internal, sourceParty: programOperator }\n  }\n  records {\n    share: {\n      fields {\n        distribution: ref<parent>, commitment: ref<commitments>\n        weight: money = self.commitment.amount\n        gross: money = ratio(self.distribution.net, self.weight, self.distribution.round.price)\n      }\n      lifecycle { states: [pending, paid], initial: pending }\n      action create { requires self.distribution in [cash_ready, loss_ready]; requires self.commitment in [funded]; requires unique \"distribution_weight\" on [self.distribution, self.commitment]; requires self.commitment.round == self.distribution.round }\n      action cash { allowZero: true,\n        from: pending, to: paid, actor: { parent: parent }\n        moves self.gross from self.distribution.held to self.commitment.wallet.held\n      }\n      action loss { allowZero: true, from: pending, to: paid, actor: { parent: parent }, moves self.gross from self.distribution.losses to self.commitment.loss economics { purpose: internal, sourceParty: programOperator } }\n    }\n  }\n}\n"],
   ["marketplace.hsx", "header marketplace\n\n// Economics: Deposit funding, escrow credit and returns are principal. Retention is\n// earning for the company or passes the buyer's cash through to a bound outside recipient.\n\n// Listing, order and reservation are separate agreements. Expose their create\n// and decision actions individually. Order fulfillment does not move escrow cash;\n// only the fulfiller marks it, the Product operator unless the seller is bound.\n// Pair an order with escrow.hold and expose its fund, deliver, accept, dispute,\n// verify_return and refund aliases. Refund needs disputed -> return_verified,\n// with payee evidence, then returns the full price to payer; accept pays payee.\n// A reservation holds its own deposit. Activate requires an active listing and\n// no placed order. Only a declared converter may invoke credit. A financing\n// plan on the same hold credits it when the lender disburses. Credit consumes the\n// deposit once, credits at most the contribution, and returns excess to buyer.\n// Expose cancel, seller_cancel or operator_cancel for the intended actors.\n// Buyer cancel and expiry use configured refund percentages; seller/operator\n// cancellation return the whole reservation balance. Converted money is in escrow,\n// so subsequent return verification and refund use the escrow aliases.\n\n// Cost: listing and order actions declare no transfers. Reservation.create\n// declares one owned account; activate declares one deposit transfer. Cancellation\n// and credit split that balance into moves. Run hsx cost for the composed counts.\n\ninstrument listing(seller: party) {\n  revisioned: true\n  summary: \"A seller's offer and its asking price.\"\n  fields { seller: account of seller, title: text, price: money }\n  lifecycle { states: [draft, active, withdrawn, sold], initial: draft }\n  action create { actor: { party: seller } }\n  action publish {\n    from: draft, to: active, actor: { party: seller }\n  }\n  action withdraw { from: active, to: withdrawn, actor: { party: seller }, requires count of { instrument: all(marketplace.reservation), reference: \"listing\", anchor: self.id, states: [active], limit: 366 } == 0 }\n  action sell { from: active, to: sold, actor: { party: seller }, requires count of { instrument: all(marketplace.reservation), reference: \"listing\", anchor: self.id, states: [active], limit: 366 } == 0 }\n}\n\ninstrument order(listing: ref<marketplace.listing>, buyer: party, fulfiller: party = programOperator) {\n  revisioned: true\n  summary: \"A buyer's order for one listing at its declared price.\"\n  fields { listing: ref<listing>, buyer: account of buyer, price: money, reservations: integer?, ownReservations: integer?, blockingQuotes: integer?, ownBlockingQuotes: integer? }\n  lifecycle { states: [quoted, placed, fulfilled, cancelled], initial: quoted }\n  action create {\n    actor: { party: buyer }\n    requires self.listing in [active]\n    calculate: [\n      { target: blockingQuotes, op: aggregate, selection: { instrument: all(marketplace.reservation), reference: \"listing\", anchor: self.listing, states: [active], limit: 366, where: { quotePolicy: { literal: \"blocked\" } } }, measure: count }\n      { target: ownBlockingQuotes, op: aggregate, selection: { instrument: all(marketplace.reservation), reference: \"listing\", anchor: self.listing, states: [active], limit: 366, where: { quotePolicy: { literal: \"blocked\" }, buyer: { field: self.buyer } } }, measure: count }\n    ]\n    requires self.blockingQuotes == self.ownBlockingQuotes\n    requires self.price == self.listing.price\n  }\n  action commit {\n    from: [quoted, placed], to: placed\n    requires self.listing in [active]\n    calculate: [\n      { target: reservations, op: aggregate, selection: { instrument: all(marketplace.reservation), reference: \"listing\", anchor: self.listing, states: [active], limit: 366 }, measure: count }\n      { target: ownReservations, op: aggregate, selection: { instrument: all(marketplace.reservation), reference: \"listing\", anchor: self.listing, states: [active], limit: 366, where: { buyer: { field: self.buyer } } }, measure: count }\n    ]\n    requires self.reservations == self.ownReservations\n    requires count of { instrument: current(), reference: \"listing\", anchor: self.listing, states: [placed, fulfilled], limit: 366 } <= 1\n  }\n  invariants count of { instrument: current(), reference: \"listing\", anchor: self.listing, states: [placed, fulfilled], limit: 366 } <= 1\n  action fulfill { from: placed, to: fulfilled, actor: { party: fulfiller } }\n  action cancel { from: [quoted, placed], to: cancelled, actor: { party: buyer } }\n}\n\ninstrument reservation(listing: ref<marketplace.listing>, funds: ref<escrow.hold>, converters: ref[], buyer: party, seller: party, expires_after: duration = 48h, deposit: money = 1000 SAR, cancellation_refund: percent = 100%, expiry_refund: percent = 100%, retained_to: party = programOperator, operator: party = programOperator, competing_quotes: enum(allowed, blocked) = allowed) {\n  revisioned: true\n  summary: \"Exclusive timed listing hold with explicit deposit credit and refund.\"\n  fields {\n    listing: ref<listing>, funds: ref<funds>, buyer: account of buyer, seller: account of seller, price: money, terms: text\n    held: account of self, quotePolicy: enum(allowed, blocked) = competing_quotes, deposit: money = deposit, proposalExpiresAt: date = after(self.createdAt, expires_after), expiresAt: date?\n    credit: money?, refund: money?, retained: money?, dispositionAt: date?, reason: text?\n  }\n  lifecycle { states: [proposed, active, converted, cancelled, expired], initial: proposed }\n  invariants count of { instrument: current(), reference: \"listing\", anchor: self.listing, states: [active], limit: 366 } <= 1\n  action create { actor: { party: buyer }, requires self.listing in [active]; requires self.seller == self.listing.seller; requires self.price == self.listing.price }\n  action activate {\n    from: proposed, to: active, actor: { party: buyer }, deadline: { at: self.proposalExpiresAt }\n    calculate: [{ target: expiresAt, op: shift, date: { field: self.now }, milliseconds: { literal: expires_after }, direction: after }]\n    requires self.listing in [active]; requires self.price == self.listing.price\n    requires count of { instrument: all(marketplace.order), reference: \"listing\", anchor: self.listing, states: [placed, fulfilled], limit: 366 } == 0\n    moves self.deposit from self.buyer to self.held economics { purpose: principal, sourceParty: buyer }\n  }\n  action convert_cash {\n    from: active, to: active, actor: { party: buyer }, deadline: { at: self.expiresAt }\n    invoke: [{ reference: self.funds, action: fund, input: {} }]\n  }\n  action credit { allowZero: true,\n    from: active, to: converted, actor: { parent: converters }, deadline: { at: self.expiresAt }\n    input { funds: ref<funds>, contribution: money }\n    requires input.funds == self.funds; requires input.funds in [pending, funded]; requires input.funds.payer == self.buyer; requires input.funds.price == self.price\n    requires input.contribution <= self.price\n    calculate: [{ target: credit, op: minimum, values: [{ field: self.held.balance }, { field: input.contribution }] }, { target: refund, op: subtract, base: { field: self.held.balance }, subtract: [{ field: self.credit }] }]\n    set: { dispositionAt: { field: self.now } }\n    moves self.credit from self.held to input.funds.held economics { purpose: principal, sourceParty: programOperator }\n    moves self.refund from self.held to self.buyer economics { purpose: principal, sourceParty: programOperator }\n  }\n  action cancel { allowZero: true,\n    from: active, to: cancelled, actor: { party: buyer }, input { reason: text }\n    calculate: [{ target: refund, op: rate, base: { field: self.held.balance }, bps: { literal: cancellation_refund }, rounding: floor }, { target: retained, op: subtract, base: { field: self.held.balance }, subtract: [{ field: self.refund }] }]\n    set: { reason: { field: input.reason }, dispositionAt: { field: self.now } }\n    moves self.refund from self.held to self.buyer economics { purpose: principal, sourceParty: programOperator }; moves self.retained from self.held to retained_to economics { recipient: retained_to, company: { purpose: earning, sourceParty: buyer }, participant: { purpose: pass_through, sourceParty: programOperator } }\n  }\n  action seller_cancel {\n    from: active, to: cancelled, actor: { party: seller }, input { reason: text }\n    set: { reason: { field: input.reason }, dispositionAt: { field: self.now } }\n    moves self.held.balance from self.held to self.buyer economics { purpose: principal, sourceParty: programOperator }\n  }\n  action operator_cancel {\n    from: active, to: cancelled, actor: { party: operator }, input { reason: text }\n    set: { reason: { field: input.reason }, dispositionAt: { field: self.now } }\n    moves self.held.balance from self.held to self.buyer economics { purpose: principal, sourceParty: programOperator }\n  }\n  action withdraw { from: proposed, to: cancelled, actor: { party: buyer } }\n  action expire { allowZero: true,\n    from: active, to: expired, actor: clock, due: { at: self.expiresAt }\n    calculate: [{ target: refund, op: rate, base: { field: self.held.balance }, bps: { literal: expiry_refund }, rounding: floor }, { target: retained, op: subtract, base: { field: self.held.balance }, subtract: [{ field: self.refund }] }]\n    set: { dispositionAt: { field: self.now } }\n    moves self.refund from self.held to self.buyer economics { purpose: principal, sourceParty: programOperator }; moves self.retained from self.held to retained_to economics { recipient: retained_to, company: { purpose: earning, sourceParty: buyer }, participant: { purpose: pass_through, sourceParty: programOperator } }\n  }\n  action expire_proposal { from: proposed, to: expired, actor: clock, due: { at: self.proposalExpiresAt } }\n}\n"],
-  ["money.hsx", "header money\n\n// Economics: Held funding and returns are principal. Release to the company realizes\n// earnings; release to another participant passes the payer's cash through. Generic transfers, splits,\n// schedules, swaps, boundary payouts and metered fees retain no assumed purpose.\n\n// Expose each attachment's create and caller actions explicitly. A transfer or\n// split pays once; a hold exposes fund, release and refund separately. Release\n// pays payee and refund returns payer. A hold has no dispute or damage decision.\n// The payee proposes a schedule, which creates its count occurrences, and only\n// the payer activates or cancels it. Each due occurrence pays only while the\n// schedule is active. A due time promises no retry.\n// A pool accepts whole contributions only up to its remaining target and at most\n// 366 paid records. Expose pay to release the exact target. Clock failure refunds\n// original contributors; excess acceptance and partial contribution are absent.\n// A swap reserves both legs before exchange or voids reservations on expiry.\n// Payout instruct reserves across the selected adapter; confirm/reject require\n// matching terminal instruction evidence. An acknowledgement cannot settle it.\n// Metered bill charges a unique usage identity at the fixed unit price, only\n// under an active mandate the payer created: bills stop at its expiresAt, and at\n// most 366 billed events across every metered attachment on the mandate may sum\n// their payer debit, buyer fee and tax included, to its limit. The payer revokes\n// it to stop billing. Only the payee cancels its own unbilled usage.\n\n// Cost: transfer.pay declares one transfer. Hold.create declares one owned account;\n// fund, release and refund each declare one transfer. Schedules and pools add bounded\n// child invocations. Run hsx cost on the composed program for counts, not SAR prices.\n\ninstrument transfer(payer: party, payee: party, amount: money = runtime) {\n  summary: \"One transfer between the bound parties.\"\n  fields { amount: money = amount }\n  lifecycle { states: [pending, paid, cancelled], initial: pending }\n  action create { actor: { party: payer }, requires self.amount > \"0\" }\n  action pay {\n    from: pending, to: paid, actor: { party: payer }\n    moves self.amount from payer to payee\n  }\n  action cancel { from: pending, to: cancelled, actor: { party: payer } }\n}\n\ninstrument hold(payer: party, payee: party, amount: money = runtime) {\n  summary: \"Hold the declared amount until release or refund.\"\n  fields { payer: account of payer, payee: account of payee, amount: money = amount, price: money = self.amount, held: account of self }\n  lifecycle { states: [pending, funded, released, refunded, cancelled], initial: pending }\n  action create { }\n  action fund {\n    from: pending, to: funded, actor: { party: payer }\n    moves self.amount from payer to self.held economics { purpose: principal, sourceParty: payer }\n  }\n  action confirm {\n    from: pending, to: funded\n    requires self.held.balance == self.amount\n  }\n  action release {\n    from: funded, to: released, actor: { party: payer }\n    moves self.amount from self.held to payee economics { recipient: payee, company: { purpose: earning, sourceParty: payer }, participant: { purpose: pass_through, sourceParty: programOperator } }\n  }\n  action refund {\n    from: funded, to: refunded, actor: { party: payee }\n    moves self.amount from self.held to payer economics { purpose: principal, sourceParty: programOperator }\n  }\n  action cancel { from: pending, to: cancelled }\n}\n\ninstrument split(payer: party, amount: money = runtime, shares: split = { programOperator: 100% }) {\n  summary: \"Split one amount; the last declared recipient receives the rounding remainder.\"\n  fields { amount: money = amount }\n  lifecycle { states: [pending, paid, cancelled], initial: pending }\n  action create {}\n  action pay { allowZero: true, requires self.amount > \"0\"; from: pending, to: paid, actor: { party: payer }, moves self.amount from payer shares shares }\n  action cancel { from: pending, to: cancelled }\n}\n\ninstrument schedule(payer: party, payee: party, amount: money = runtime, count: integer(1, 366) = 12) {\n  summary: \"A finite schedule whose dated pieces sum exactly to the declared total.\"\n  fields { amount: money = amount, count: integer = count, dates: list(date, count) }\n  lifecycle { states: [draft, active, complete, cancelled], initial: draft }\n  action create {\n    actor: { party: payee }\n    invoke: [{ range: { count: { literal: count }, maximum: count, bind: position }, instrument: occurrence, action: create, input: { schedule: { field: self.id }, position: { field: position } } }]\n  }\n  action activate { from: draft, to: active, actor: { party: payer } }\n  action complete {\n    from: active, to: complete\n    requires count of { instrument: occurrence, reference: \"schedule\", anchor: self.id, states: [pending], limit: 366 } == 0\n  }\n  action cancel { from: [draft, active], to: cancelled, actor: { party: payer } }\n  records {\n    occurrence: {\n      fields {\n        schedule: ref<parent>, position: integer(1, count), dueAt: date = at(self.schedule.dates, self.position)\n        base: money = divide(self.schedule.amount, count)\n        allocated: money = multiply(self.base, count)\n        remainder: money = subtract(self.schedule.amount, self.allocated)\n        first: integer = divide(1, self.position)\n        adjustment: money = multiply(self.remainder, self.first)\n        amount: money = sum(self.base, self.adjustment)\n      }\n      lifecycle { states: [pending, paid, cancelled], initial: pending }\n      action create { actor: { parent: parent }, input { schedule: ref<parent>, position: integer(1, count) }, requires unique \"scheduled_position\" on [self.schedule, self.position] }\n      action pay { allowZero: true, from: pending, to: paid, actor: clock, due: { at: self.dueAt }, requires self.schedule in [active], moves self.amount from payer to payee }\n      action cancel { from: pending, to: cancelled, requires self.schedule in [cancelled] }\n    }\n  }\n}\n\ninstrument pool(payer: party, payee: party, target: money, closes: date) {\n  summary: \"Contributions fund one threshold or return to their original contributor.\"\n  fields { target: money = target, closesAt: date = closes, held: account of self }\n  lifecycle { states: [open, paid, failed], initial: open }\n  action create { }\n  action pay {\n    from: open, to: paid, actor: { party: payee }\n    requires self.held.balance == self.target\n    moves self.target from self.held to payee economics { recipient: payee, company: { purpose: earning, sourceParty: payer }, participant: { purpose: pass_through, sourceParty: programOperator } }\n  }\n  action fail {\n    from: open, to: failed, actor: clock, due: { at: self.closesAt }\n    requires self.held.balance < self.target\n    invoke: [{ selection: { instrument: contribution, reference: \"pool\", anchor: self.id, states: [paid], limit: 366 }, action: refund, input: {} }]\n  }\n  records {\n    contribution: {\n      fields { pool: ref<parent>, payer: account of payer, amount: money, remaining: money? }\n      lifecycle { states: [pending, paid, refunded], initial: pending }\n      invariants count of { instrument: current(), reference: \"pool\", anchor: self.pool, states: [paid], limit: 366 } <= 366\n      action create { requires self.pool in [open] }\n      action pay { from: pending, to: paid, actor: { party: payer }, deadline: { at: self.pool.closesAt }, requires self.pool in [open], calculate: [{ target: remaining, op: subtract, base: { field: self.pool.target }, subtract: [{ field: self.pool.held.balance }] }], requires self.amount <= self.remaining, moves self.amount from self.payer to self.pool.held economics { purpose: principal, sourceParty: payer } }\n      action refund { from: paid, to: refunded, actor: { parent: parent }, moves self.amount from self.pool.held to self.payer economics { purpose: principal, sourceParty: programOperator } }\n    }\n  }\n}\n\ninstrument swap(first: party, second: party, first_amount: money, second_amount: money, expires: date) {\n  summary: \"Two reservations settle together or both return.\"\n  fields { firstAmount: money = first_amount, secondAmount: money = second_amount, expiresAt: date = expires, firstReceipt: text?, secondReceipt: text? }\n  lifecycle { states: [pending, first_ready, second_ready, both_ready, exchanged, cancelled], initial: pending }\n  action create {}\n  action fund_first { from: pending, to: first_ready, actor: { party: first }, deadline: { at: self.expiresAt }, moves reserve self.firstAmount from first to second capture \"firstReceipt\" }\n  action fund_second { from: first_ready, to: both_ready, actor: { party: second }, deadline: { at: self.expiresAt }, moves reserve self.secondAmount from second to first capture \"secondReceipt\" }\n  action start_second { from: pending, to: second_ready, actor: { party: second }, deadline: { at: self.expiresAt }, moves reserve self.secondAmount from second to first capture \"secondReceipt\" }\n  action finish_first { from: second_ready, to: both_ready, actor: { party: first }, deadline: { at: self.expiresAt }, moves reserve self.firstAmount from first to second capture \"firstReceipt\" }\n  action expire_second { from: second_ready, to: cancelled, actor: clock, due: { at: self.expiresAt }, moves void self.secondReceipt }\n  action exchange { from: both_ready, to: exchanged, actor: { party: first }, moves post self.firstReceipt; moves post self.secondReceipt }\n  action cancel { from: pending, to: cancelled }\n  action expire_first { from: first_ready, to: cancelled, actor: clock, due: { at: self.expiresAt }, moves void self.firstReceipt }\n  action expire_both { from: both_ready, to: cancelled, actor: clock, due: { at: self.expiresAt }, moves void self.firstReceipt; moves void self.secondReceipt }\n}\n\ninstrument payout(payer: party, payee: party, adapter: text, max_age: duration, amount: money = runtime) {\n  summary: \"Reserve funds until matching terminal boundary evidence permits posting.\"\n  fields { amount: money = amount, receipt: text? }\n  lifecycle { states: [pending, instructed, settled, rejected], initial: pending }\n  action create {}\n  action instruct {\n    from: pending, to: instructed, actor: { party: payer }\n    moves reserve self.amount from payer to payee capture \"receipt\" boundary adapter\n  }\n  action confirm {\n    from: instructed, to: settled\n    requires evidence self.id family boundary check outcome result confirmed maxAge max_age instruction self.receipt\n    moves post self.receipt\n  }\n  action reject {\n    from: instructed, to: rejected\n    requires evidence self.id family boundary check outcome result rejected maxAge max_age instruction self.receipt\n    moves void self.receipt\n  }\n}\n\ninstrument mandate(payer: party, payee: party) {\n  summary: \"A payer's permission for one payee to charge up to a total until it expires.\"\n  fields { payer: account of payer, payee: account of payee, limit: money, expiresAt: date }\n  lifecycle { states: [active, revoked], initial: active }\n  action create { actor: { party: payer }, requires self.limit > \"0\" }\n  action revoke { from: active, to: revoked, actor: { party: payer } }\n}\n\ninstrument metered(payer: party, payee: party, unit_price: money, units: integer = 1, fee: fee = { seller: 0% }, mandate: ref<money.mandate> = object(money.mandate)) {\n  summary: \"A unique usage event priced once at the fixed unit price.\"\n  fields { usageIdentity: text, mandate: ref<mandate>, payer: account of payer, payee: account of payee, unitPrice: money = unit_price, units: integer = units, amount: money = multiply(self.unitPrice, self.units) }\n  lifecycle { states: [recorded, billed, cancelled], initial: recorded }\n  invariants sum \"bill_move1_debit\" of { instrument: all(money.metered), reference: \"mandate\", anchor: self.mandate, states: [billed], limit: 366 } <= self.mandate.limit\n  action create { requires unique \"usage_event\" on [self.usageIdentity]; requires self.mandate.payer == self.payer; requires self.mandate.payee == self.payee }\n  action bill { allowZero: true, requires self.amount > \"0\"; from: recorded, to: billed, actor: { party: payee }, deadline: { at: self.mandate.expiresAt }, requires self.mandate in [active], moves self.amount from payer to payee fee fee }\n  action cancel { from: recorded, to: cancelled, actor: { party: payee } }\n}\n"],
-  ["reporting.hsx", "header reporting\n\n// Attach portfolio to one or more financing plans. Its only lifecycle action is\n// create; reports use the declared report request/read roles, not a money action.\n// Aging selects active facilities and includes earned profit when deciding arrears.\n// The default-rate report measures period-end stock, not new default incidence.\n// Paid facilities are excluded and write-offs counted separately. Amounts are SAR\n// minor units; declared scale and rounding govern ratios. Missing identity joins\n// or unreconciled schedule counts refuse.\n\n// Cost: portfolio.create declares no transfers, owned accounts or invocations.\n// That zero instruction count does not price report capture, rendering, storage or\n// release. The host owns those charges and their execution.\n\ninstrument portfolio(on: ref<financing.installments>[], default_days: integer(1, 3650) = 90, retention_years: integer(1, 100) = 10, aging_first_days: integer(1, 3650) = 30, aging_second_days: integer(1, 3650) = 60, aging_third_days: integer(1, 3650) = 90, ratio_scale: integer(1, 1000000) = 10000, ratio_rounding: enum(floor, halfUp) = floor, lock_wait_ms: integer(1, 2000) = 2000, capture_ms: integer(1, 10000) = 10000, max_rows: integer(1, 100000) = 10000, max_join_rows: integer(1, 1000000) = 100000, max_bytes: integer(1024, 16777216) = 8388608) {\n  summary: \"Declared financing reports evaluated over frozen Product facts.\"\n  fields {}\n  lifecycle { states: [declared], initial: declared }\n  action create {}\n  constraints { aging_first_days: less_than(aging_second_days), aging_second_days: less_than(aging_third_days) }\n  reports: [\n    {\n      identity: { id: \"portfolio_aging\", version: 1, description: \"Period-end outstanding principal by oldest unpaid installment. Remaining scheduled profit is distinct from accrued profit. Restructuring evidence is unavailable.\" },\n      scope: { kind: \"product\", classification: \"internal\", currency: \"SAR\" },\n      datasets: [\n        {\n          id: \"facilities\",\n          source: \"instrument\",\n          instruments: on,\n          rowKey: \"facilityId\",\n          columns: [\n            {\n              name: \"facilityId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"borrowerAccount\",\n              field: \"borrower\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"state\",\n              field: \"status\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"originalPrincipal\",\n              field: \"principal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"scheduleCount\",\n              field: \"months\",\n              type: { kind: \"integer\" },\n              required: true\n            },\n            {\n              name: \"recordedCreation\",\n              field: \"createdAt\",\n              type: { kind: \"date\" },\n              required: true\n            }\n          ],\n          expressions: [\n            {\n              id: \"activeState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"active\"\n            },\n            {\n              id: \"paidState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"paid\"\n            },\n            {\n              id: \"writtenState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"written_off\"\n            },\n            { id: \"active\", op: \"equal\", left: \"state\", right: \"activeState\" },\n            { id: \"paid\", op: \"equal\", left: \"state\", right: \"paidState\" },\n            { id: \"writtenOff\", op: \"equal\", left: \"state\", right: \"writtenState\" },\n            { id: \"activeOrPaid\", op: \"or\", left: \"active\", right: \"paid\" },\n            { id: \"financed\", op: \"or\", left: \"active\", right: \"writtenOff\" }\n          ],\n          selection: \"active\"\n        },\n        {\n          id: \"schedule\",\n          source: \"instrument\",\n          instruments: child(on, slice),\n          rowKey: \"sliceId\",\n          columns: [\n            {\n              name: \"sliceId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"planId\",\n              field: \"plan\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"due\",\n              field: \"dueAt\",\n              type: { kind: \"date\" },\n              required: true\n            },\n            {\n              name: \"principal\",\n              field: \"principalReceivable.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"profit\",\n              field: \"profitReceivable.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"earnedProfit\",\n              field: \"profitEarned.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"scheduledPrincipal\",\n              field: \"principal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            }\n          ],\n          expressions: [\n            {\n              id: \"zeroMoney\",\n              op: \"literal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              value: \"0\"\n            },\n            {\n              id: \"zeroDays\",\n              op: \"literal\",\n              type: { kind: \"integer\" },\n              value: 0\n            },\n            { id: \"observed\", op: \"parameter\", name: \"observationAt\" },\n            { id: \"scheduledOutstanding\", op: \"sum\", left: \"principal\", right: \"profit\" },\n            { id: \"totalOutstanding\", op: \"sum\", left: \"scheduledOutstanding\", right: \"earnedProfit\" },\n            { id: \"unpaid\", op: \"less\", left: \"zeroMoney\", right: \"totalOutstanding\" },\n            { id: \"elapsed\", op: \"daysBetween\", left: \"due\", right: \"observed\" },\n            { id: \"nonnegativeDays\", op: \"maximum\", left: \"elapsed\", right: \"zeroDays\" },\n            { id: \"daysPastDue\", op: \"choose\", condition: \"unpaid\", yes: \"nonnegativeDays\", no: \"zeroDays\" }\n          ]\n        },\n        {\n          id: \"borrowerAccounts\",\n          source: \"account\",\n          instruments: [  ],\n          rowKey: \"accountId\",\n          columns: [\n            {\n              name: \"accountId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"participant\",\n              field: \"ownerParticipantId\",\n              type: { kind: \"text\" },\n              required: false\n            }\n          ],\n          expressions: [  ]\n        },\n        {\n          id: \"borrowers\",\n          source: \"identity\",\n          instruments: [  ],\n          rowKey: \"customerId\",\n          columns: [\n            {\n              name: \"customerId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"participantId\",\n              field: \"participantId\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"entityId\",\n              field: \"entityId\",\n              type: { kind: \"text\" },\n              required: true\n            }\n          ],\n          expressions: [  ]\n        }\n      ],\n      time: { timezone: \"Asia/Riyadh\", boundary: \"startInclusiveEndExclusive\", observation: \"periodEnd\", history: \"retainedOnly\" },\n      selection: { dataset: \"facilities\" },\n      calculation: {\n        joins: [\n          {\n            dataset: \"schedule\",\n            local: \"facilityId\",\n            foreign: \"planId\",\n            cardinality: \"many\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"outstandingPrincipal\", op: \"sum\", value: \"principal\" },\n              { name: \"remainingScheduledProfit\", op: \"sum\", value: \"profit\" },\n              { name: \"scheduledPrincipalTotal\", op: \"sum\", value: \"scheduledPrincipal\" },\n              { name: \"capturedScheduleCount\", op: \"count\" },\n              { name: \"oldestUnpaidDays\", op: \"maximum\", value: \"daysPastDue\" }\n            ]\n          },\n          {\n            dataset: \"borrowerAccounts\",\n            local: \"borrowerAccount\",\n            foreign: \"accountId\",\n            cardinality: \"one\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"borrowerParticipant\", op: \"minimum\", value: \"participant\" }\n            ]\n          },\n          {\n            dataset: \"borrowers\",\n            local: \"borrowerParticipant\",\n            foreign: \"participantId\",\n            cardinality: \"one\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"borrowerEntity\", op: \"minimum\", value: \"entityId\" }\n            ]\n          }\n        ],\n        expressions: [\n          {\n            id: \"day0\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: 0\n          },\n          {\n            id: \"day30\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: aging_first_days\n          },\n          {\n            id: \"day60\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: aging_second_days\n          },\n          {\n            id: \"day90\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: aging_third_days\n          },\n          {\n            id: \"band0\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"current\"\n          },\n          {\n            id: \"band30\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"first\"\n          },\n          {\n            id: \"band60\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"second\"\n          },\n          {\n            id: \"band90\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"third\"\n          },\n          {\n            id: \"bandLate\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"later\"\n          },\n          { id: \"current\", op: \"atMost\", left: \"oldestUnpaidDays\", right: \"day0\" },\n          { id: \"first\", op: \"atMost\", left: \"oldestUnpaidDays\", right: \"day30\" },\n          { id: \"second\", op: \"atMost\", left: \"oldestUnpaidDays\", right: \"day60\" },\n          { id: \"third\", op: \"atMost\", left: \"oldestUnpaidDays\", right: \"day90\" },\n          { id: \"lateBand\", op: \"choose\", condition: \"third\", yes: \"band90\", no: \"bandLate\" },\n          { id: \"secondBand\", op: \"choose\", condition: \"second\", yes: \"band60\", no: \"lateBand\" },\n          { id: \"firstBand\", op: \"choose\", condition: \"first\", yes: \"band30\", no: \"secondBand\" },\n          { id: \"agingBand\", op: \"choose\", condition: \"current\", yes: \"band0\", no: \"firstBand\" }\n        ],\n        groupBy: [ \"agingBand\" ],\n        aggregates: [\n          { name: \"facilities\", op: \"count\" },\n          { name: \"principalMinor\", op: \"sum\", value: \"outstandingPrincipal\" },\n          { name: \"scheduledProfitMinor\", op: \"sum\", value: \"remainingScheduledProfit\" }\n        ],\n        resultExpressions: [  ]\n      },\n      validation: {\n        empty: \"noEligibleFacilities\",\n        required: [ \"borrowerEntity\" ],\n        reconcile: [  ],\n        rowReconcile: [\n          { left: \"originalPrincipal\", right: \"scheduledPrincipalTotal\" },\n          { left: \"scheduleCount\", right: \"capturedScheduleCount\" }\n        ],\n        unavailableFacts: [  ],\n        lockTimeoutMs: lock_wait_ms,\n        captureTimeoutMs: capture_ms,\n        maxRows: max_rows,\n        maxJoinRows: max_join_rows,\n        maxBytes: max_bytes\n      },\n      output: {\n        profile: \"internal.v1\",\n        formats: [ \"json\", \"csv\" ],\n        columns: [\n          {\n            name: \"agingBand\",\n            label: \"agingBand\",\n            type: { kind: \"text\" }\n          },\n          {\n            name: \"facilities\",\n            label: \"facilities\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"principalMinor\",\n            label: \"principalMinor\",\n            type: { kind: \"money\", currency: \"SAR\" }\n          },\n          {\n            name: \"scheduledProfitMinor\",\n            label: \"scheduledProfitMinor\",\n            type: { kind: \"money\", currency: \"SAR\" }\n          }\n        ],\n        sort: [ \"agingBand\" ]\n      },\n      authority: {\n        request: [ \"owner\", \"finance\" ],\n        read: [ \"owner\", \"admin\", \"operations\", \"finance\", \"viewer\" ],\n        release: [  ],\n        retention: { policy: \"report_replay\", years: retention_years }\n      }\n    },\n    {\n      identity: { id: \"period_end_outstanding_principal_default_rate\", version: 1, description: \"Current active facilities with any unpaid installment at least the declared default days past due, observed at period end. Cure when arrears clear. Count and outstanding-principal weighted rates in the declared scale exclude paid and written-off facilities; write-offs are counted separately. This is a stock measure, not a new-default incidence or origination cohort rate.\" },\n      scope: { kind: \"product\", classification: \"internal\", currency: \"SAR\" },\n      datasets: [\n        {\n          id: \"facilities\",\n          source: \"instrument\",\n          instruments: on,\n          rowKey: \"facilityId\",\n          columns: [\n            {\n              name: \"facilityId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"borrowerAccount\",\n              field: \"borrower\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"state\",\n              field: \"status\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"originalPrincipal\",\n              field: \"principal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"scheduleCount\",\n              field: \"months\",\n              type: { kind: \"integer\" },\n              required: true\n            },\n            {\n              name: \"recordedCreation\",\n              field: \"createdAt\",\n              type: { kind: \"date\" },\n              required: true\n            }\n          ],\n          expressions: [\n            {\n              id: \"activeState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"active\"\n            },\n            {\n              id: \"paidState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"paid\"\n            },\n            {\n              id: \"writtenState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"written_off\"\n            },\n            { id: \"active\", op: \"equal\", left: \"state\", right: \"activeState\" },\n            { id: \"paid\", op: \"equal\", left: \"state\", right: \"paidState\" },\n            { id: \"writtenOff\", op: \"equal\", left: \"state\", right: \"writtenState\" },\n            { id: \"activeOrPaid\", op: \"or\", left: \"active\", right: \"paid\" },\n            { id: \"financed\", op: \"or\", left: \"active\", right: \"writtenOff\" }\n          ],\n          selection: \"financed\"\n        },\n        {\n          id: \"schedule\",\n          source: \"instrument\",\n          instruments: child(on, slice),\n          rowKey: \"sliceId\",\n          columns: [\n            {\n              name: \"sliceId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"planId\",\n              field: \"plan\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"due\",\n              field: \"dueAt\",\n              type: { kind: \"date\" },\n              required: true\n            },\n            {\n              name: \"principal\",\n              field: \"principalReceivable.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"profit\",\n              field: \"profitReceivable.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"earnedProfit\",\n              field: \"profitEarned.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"scheduledPrincipal\",\n              field: \"principal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            }\n          ],\n          expressions: [\n            {\n              id: \"zeroMoney\",\n              op: \"literal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              value: \"0\"\n            },\n            {\n              id: \"zeroDays\",\n              op: \"literal\",\n              type: { kind: \"integer\" },\n              value: 0\n            },\n            { id: \"observed\", op: \"parameter\", name: \"observationAt\" },\n            { id: \"scheduledOutstanding\", op: \"sum\", left: \"principal\", right: \"profit\" },\n            { id: \"totalOutstanding\", op: \"sum\", left: \"scheduledOutstanding\", right: \"earnedProfit\" },\n            { id: \"unpaid\", op: \"less\", left: \"zeroMoney\", right: \"totalOutstanding\" },\n            { id: \"elapsed\", op: \"daysBetween\", left: \"due\", right: \"observed\" },\n            { id: \"nonnegativeDays\", op: \"maximum\", left: \"elapsed\", right: \"zeroDays\" },\n            { id: \"daysPastDue\", op: \"choose\", condition: \"unpaid\", yes: \"nonnegativeDays\", no: \"zeroDays\" }\n          ]\n        },\n        {\n          id: \"borrowerAccounts\",\n          source: \"account\",\n          instruments: [  ],\n          rowKey: \"accountId\",\n          columns: [\n            {\n              name: \"accountId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"participant\",\n              field: \"ownerParticipantId\",\n              type: { kind: \"text\" },\n              required: false\n            }\n          ],\n          expressions: [  ]\n        },\n        {\n          id: \"borrowers\",\n          source: \"identity\",\n          instruments: [  ],\n          rowKey: \"customerId\",\n          columns: [\n            {\n              name: \"customerId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"participantId\",\n              field: \"participantId\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"entityId\",\n              field: \"entityId\",\n              type: { kind: \"text\" },\n              required: true\n            }\n          ],\n          expressions: [  ]\n        }\n      ],\n      time: { timezone: \"Asia/Riyadh\", boundary: \"startInclusiveEndExclusive\", observation: \"periodEnd\", history: \"retainedOnly\" },\n      selection: { dataset: \"facilities\" },\n      calculation: {\n        joins: [\n          {\n            dataset: \"schedule\",\n            local: \"facilityId\",\n            foreign: \"planId\",\n            cardinality: \"many\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"outstandingPrincipal\", op: \"sum\", value: \"principal\" },\n              { name: \"remainingScheduledProfit\", op: \"sum\", value: \"profit\" },\n              { name: \"scheduledPrincipalTotal\", op: \"sum\", value: \"scheduledPrincipal\" },\n              { name: \"capturedScheduleCount\", op: \"count\" },\n              { name: \"oldestUnpaidDays\", op: \"maximum\", value: \"daysPastDue\" }\n            ]\n          },\n          {\n            dataset: \"borrowerAccounts\",\n            local: \"borrowerAccount\",\n            foreign: \"accountId\",\n            cardinality: \"one\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"borrowerParticipant\", op: \"minimum\", value: \"participant\" }\n            ]\n          },\n          {\n            dataset: \"borrowers\",\n            local: \"borrowerParticipant\",\n            foreign: \"participantId\",\n            cardinality: \"one\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"borrowerEntity\", op: \"minimum\", value: \"entityId\" }\n            ]\n          }\n        ],\n        expressions: [\n          {\n            id: \"threshold\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: default_days\n          },\n          {\n            id: \"zero\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: 0\n          },\n          {\n            id: \"one\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: 1\n          },\n          {\n            id: \"zeroMoney\",\n            op: \"literal\",\n            type: { kind: \"money\", currency: \"SAR\" },\n            value: \"0\"\n          },\n          { id: \"pastThreshold\", op: \"atMost\", left: \"threshold\", right: \"oldestUnpaidDays\" },\n          { id: \"isDefault\", op: \"and\", left: \"active\", right: \"pastThreshold\" },\n          { id: \"activeCount\", op: \"choose\", condition: \"active\", yes: \"one\", no: \"zero\" },\n          { id: \"defaultCount\", op: \"choose\", condition: \"isDefault\", yes: \"one\", no: \"zero\" },\n          { id: \"writeOffCount\", op: \"choose\", condition: \"writtenOff\", yes: \"one\", no: \"zero\" },\n          { id: \"activePrincipal\", op: \"choose\", condition: \"active\", yes: \"outstandingPrincipal\", no: \"zeroMoney\" },\n          { id: \"defaultPrincipal\", op: \"choose\", condition: \"isDefault\", yes: \"outstandingPrincipal\", no: \"zeroMoney\" }\n        ],\n        groupBy: [  ],\n        aggregates: [\n          { name: \"activeFacilities\", op: \"sum\", value: \"activeCount\" },\n          { name: \"defaultFacilities\", op: \"sum\", value: \"defaultCount\" },\n          { name: \"writtenOffFacilities\", op: \"sum\", value: \"writeOffCount\" },\n          { name: \"activePrincipalMinor\", op: \"sum\", value: \"activePrincipal\" },\n          { name: \"defaultPrincipalMinor\", op: \"sum\", value: \"defaultPrincipal\" }\n        ],\n        resultExpressions: [\n          { id: \"countRate\", op: \"ratio\", numerator: \"defaultFacilities\", denominator: \"activeFacilities\", scale: ratio_scale, rounding: ratio_rounding, zero: \"null\" },\n          { id: \"principalRate\", op: \"ratio\", numerator: \"defaultPrincipalMinor\", denominator: \"activePrincipalMinor\", scale: ratio_scale, rounding: ratio_rounding, zero: \"null\" },\n          {\n            id: \"restructuringEvidence\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"unavailable\"\n          },\n          {\n            id: \"defaultDays\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: default_days\n          },\n          {\n            id: \"rateScale\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: ratio_scale\n          }\n        ]\n      },\n      validation: {\n        empty: \"refuse\",\n        required: [ \"borrowerEntity\" ],\n        reconcile: [  ],\n        rowReconcile: [\n          { left: \"originalPrincipal\", right: \"scheduledPrincipalTotal\" },\n          { left: \"scheduleCount\", right: \"capturedScheduleCount\" }\n        ],\n        unavailableFacts: [  ],\n        lockTimeoutMs: lock_wait_ms,\n        captureTimeoutMs: capture_ms,\n        maxRows: max_rows,\n        maxJoinRows: max_join_rows,\n        maxBytes: max_bytes\n      },\n      output: {\n        profile: \"internal.v1\",\n        formats: [ \"json\", \"csv\" ],\n        columns: [\n          {\n            name: \"activeFacilities\",\n            label: \"activeFacilities\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"defaultFacilities\",\n            label: \"defaultFacilities\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"writtenOffFacilities\",\n            label: \"writtenOffFacilities\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"activePrincipalMinor\",\n            label: \"activePrincipalMinor\",\n            type: { kind: \"money\", currency: \"SAR\" }\n          },\n          {\n            name: \"defaultPrincipalMinor\",\n            label: \"defaultPrincipalMinor\",\n            type: { kind: \"money\", currency: \"SAR\" }\n          },\n          {\n            name: \"countRate\",\n            label: \"countRate\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"principalRate\",\n            label: \"principalRate\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"restructuringEvidence\",\n            label: \"restructuringEvidence\",\n            type: { kind: \"text\" }\n          },\n          {\n            name: \"defaultDays\",\n            label: \"defaultDays\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"rateScale\",\n            label: \"rateScale\",\n            type: { kind: \"integer\" }\n          }\n        ],\n        sort: [ \"activeFacilities\" ]\n      },\n      authority: {\n        request: [ \"owner\", \"finance\" ],\n        read: [ \"owner\", \"admin\", \"operations\", \"finance\", \"viewer\" ],\n        release: [  ],\n        retention: { policy: \"report_replay\", years: retention_years }\n      }\n    }\n  ]\n}\n"],
-  ["savings.hsx", "header savings\n\n// Economics: Contributions and returned pots are principal, not company earnings.\n\n// Expose circle.create and membership.create; create one pending contribution\n// record per member per circle date before membership.activate. Circle activation\n// is clock-owned and needs exactly members joined memberships at or after startsAt.\n// Membership.activate needs the active circle and its full pending schedule.\n// Membership.received means the member received the pot. Contribution.paid means\n// one contribution was collected. Neither record's state proves the other's state.\n// A member can have received the pot with future unpaid contributions, or paid\n// a contribution while their membership still waits for its payout seat.\n// Receive counts preceding received memberships, never paid contributions.\n// Eight members at 300 SAR require 2400 SAR per payout; seven payments supply 2100,\n// so a full payout lacks 300 unless other cash exists. There is no reduced payout.\n// Contribution.pay has a due time and no deadline or prior-payment requirement.\n// Late and out-of-order collection is admitted while membership is active or\n// received and circle is active. Clock admission does not promise scheduler retry.\n// Circle.close needs every membership received and an empty held account.\n// Only the Product operator disbands a forming circle.\n// Circle creation collects circleDates, one date per member for contributions and payouts.\n\n// Cost: circle.create declares one owned account. Each contribution payment\n// and each pot payout declares one transfer. Multiply by the actual member and\n// period counts for a completed circle; hsx cost reports per-action bounds.\n\ninstrument circle(contribution: money, members: integer(1, 60), starts: date, memberships: ref<savings.membership> = object(savings.membership)) {\n  summary: \"A fixed group contributes on its explicit calendar and takes the pot in order.\"\n  fields { contribution: money = contribution, members: integer = members, startsAt: date = starts, circleDates: list(date, members), pot: money = multiply(self.contribution, self.members), held: account of self }\n  lifecycle { states: [forming, active, closed, disbanded], initial: forming }\n  action create { }\n  action activate {\n    from: forming, to: active, actor: clock, due: { at: self.startsAt }\n    requires count of { instrument: memberships, reference: \"circle\", anchor: self.id, states: [joined], limit: 60 } == self.members\n  }\n  action close {\n    from: active, to: closed\n    requires count of { instrument: memberships, reference: \"circle\", anchor: self.id, states: [received], limit: 60 } == self.members\n    requires self.held.balance == \"0\"\n  }\n  action disband { from: forming, to: disbanded, actor: { party: programOperator } }\n}\n\ninstrument membership(circle: ref<savings.circle>, member: party) {\n  summary: \"A member contributes on the circle calendar and receives the pot in the assigned seat.\"\n  fields { circle: ref<circle>, member: account of member, seat: integer(1, 60), preceding: integer = subtract(self.seat, 1), receivesAt: date = at(self.circle.circleDates, self.seat), contribution: money = self.circle.contribution, total: money = self.circle.pot }\n  lifecycle { states: [joined, active, received, withdrawn], initial: joined }\n  action create { actor: { party: member }, requires self.seat <= self.circle.members; requires self.circle in [forming]; requires unique \"circle_seat\" on [self.circle, self.seat]; requires unique \"circle_member\" on [self.circle, self.member] }\n  action activate {\n    from: joined, to: active\n    requires self.circle in [active]\n    requires count of { instrument: contribution, reference: \"membership\", anchor: self.id, states: [pending], limit: 60 } == self.circle.members\n  }\n  action receive {\n    from: active, to: received, actor: clock, due: { at: self.receivesAt }\n    requires self.circle in [active]\n    requires count of { instrument: all(savings.membership), reference: \"circle\", anchor: self.circle, states: [received], limit: 60 } == self.preceding\n    moves self.total from self.circle.held to self.member economics { purpose: principal, sourceParty: programOperator }\n  }\n  action withdraw { from: joined, to: withdrawn, requires self.circle in [disbanded] }\n  records {\n    contribution: {\n      fields { membership: ref<parent>, period: integer(1, 60), dueAt: date = at(self.membership.circle.circleDates, self.period), amount: money = self.membership.contribution }\n      lifecycle { states: [pending, paid], initial: pending }\n      action create { requires self.period <= self.membership.circle.members; requires self.membership in [joined]; requires unique \"seat_period\" on [self.membership, self.period] }\n      action pay { from: pending, to: paid, actor: clock, due: { at: self.dueAt }, requires self.membership in [active, received]; requires self.membership.circle in [active], moves self.amount from self.membership.member to self.membership.circle.held economics { purpose: principal, sourceParty: member } }\n    }\n  }\n}\n"],
+  ["money.hsx", "header money\n\n// Economics: Held funding and returns are principal. Release to the company realizes\n// earnings; release to another participant passes the payer's cash through. Generic transfers, splits,\n// schedules, swaps, boundary payouts and metered fees retain no assumed purpose.\n\n// Expose each attachment's create and caller actions explicitly. A transfer or\n// split pays once; a hold exposes fund, release and refund separately. Release\n// pays payee and refund returns payer. A hold has no dispute or damage decision.\n// The payee proposes a schedule, which creates its count occurrences, and only\n// the payer activates or cancels it. Each due occurrence pays only while the\n// schedule is active. A due time promises no retry.\n// A pool accepts whole contributions only up to its remaining target and at most\n// 366 paid records. Expose pay to release the exact target. Clock failure refunds\n// original contributors; excess acceptance and partial contribution are absent.\n// A swap reserves both legs before exchange or voids reservations on expiry.\n// Payout instruct reserves across the selected adapter; confirm/reject require\n// matching terminal instruction evidence. An acknowledgement cannot settle it.\n// Metered bill charges a unique usage identity at the fixed unit price, only\n// under an active mandate the payer created: bills stop at its expiresAt, and at\n// most 366 billed events across every metered attachment on the mandate may sum\n// their payer debit, buyer fee and tax included, to its limit. The payer revokes\n// it to stop billing. Only the payee cancels its own unbilled usage.\n\n// Cost: transfer.pay declares one transfer. Hold.create declares one owned account;\n// fund, release and refund each declare one transfer. Schedules and pools add bounded\n// child invocations. Run hsx cost on the composed program for counts, not riyal prices.\n\ninstrument transfer(payer: party, payee: party, amount: money = runtime) {\n  summary: \"One transfer between the bound parties.\"\n  fields { amount: money = amount }\n  lifecycle { states: [pending, paid, cancelled], initial: pending }\n  action create { actor: { party: payer }, requires self.amount > \"0\" }\n  action pay {\n    from: pending, to: paid, actor: { party: payer }\n    moves self.amount from payer to payee\n  }\n  action cancel { from: pending, to: cancelled, actor: { party: payer } }\n}\n\ninstrument hold(payer: party, payee: party, amount: money = runtime) {\n  summary: \"Hold the declared amount until release or refund.\"\n  fields { payer: account of payer, payee: account of payee, amount: money = amount, price: money = self.amount, held: account of self }\n  lifecycle { states: [pending, funded, released, refunded, cancelled], initial: pending }\n  action create { }\n  action fund {\n    from: pending, to: funded, actor: { party: payer }\n    moves self.amount from payer to self.held economics { purpose: principal, sourceParty: payer }\n  }\n  action confirm {\n    from: pending, to: funded\n    requires self.held.balance == self.amount\n  }\n  action release {\n    from: funded, to: released, actor: { party: payer }\n    moves self.amount from self.held to payee economics { recipient: payee, company: { purpose: earning, sourceParty: payer }, participant: { purpose: pass_through, sourceParty: programOperator } }\n  }\n  action refund {\n    from: funded, to: refunded, actor: { party: payee }\n    moves self.amount from self.held to payer economics { purpose: principal, sourceParty: programOperator }\n  }\n  action cancel { from: pending, to: cancelled }\n}\n\ninstrument split(payer: party, amount: money = runtime, shares: split = { programOperator: 100% }) {\n  summary: \"Split one amount; the last declared recipient receives the rounding remainder.\"\n  fields { amount: money = amount }\n  lifecycle { states: [pending, paid, cancelled], initial: pending }\n  action create {}\n  action pay { allowZero: true, requires self.amount > \"0\"; from: pending, to: paid, actor: { party: payer }, moves self.amount from payer shares shares }\n  action cancel { from: pending, to: cancelled }\n}\n\ninstrument schedule(payer: party, payee: party, amount: money = runtime, count: integer(1, 366) = 12) {\n  summary: \"A finite schedule whose dated pieces sum exactly to the declared total.\"\n  fields { amount: money = amount, count: integer = count, dates: list(date, count) }\n  lifecycle { states: [draft, active, complete, cancelled], initial: draft }\n  action create {\n    actor: { party: payee }\n    invoke: [{ range: { count: { literal: count }, maximum: count, bind: position }, instrument: occurrence, action: create, input: { schedule: { field: self.id }, position: { field: position } } }]\n  }\n  action activate { from: draft, to: active, actor: { party: payer } }\n  action complete {\n    from: active, to: complete\n    requires count of { instrument: occurrence, reference: \"schedule\", anchor: self.id, states: [pending], limit: 366 } == 0\n  }\n  action cancel { from: [draft, active], to: cancelled, actor: { party: payer } }\n  records {\n    occurrence: {\n      fields {\n        schedule: ref<parent>, position: integer(1, count), dueAt: date = at(self.schedule.dates, self.position)\n        base: money = divide(self.schedule.amount, count)\n        allocated: money = multiply(self.base, count)\n        remainder: money = subtract(self.schedule.amount, self.allocated)\n        first: integer = divide(1, self.position)\n        adjustment: money = multiply(self.remainder, self.first)\n        amount: money = sum(self.base, self.adjustment)\n      }\n      lifecycle { states: [pending, paid, cancelled], initial: pending }\n      action create { actor: { parent: parent }, input { schedule: ref<parent>, position: integer(1, count) }, requires unique \"scheduled_position\" on [self.schedule, self.position] }\n      action pay { allowZero: true, from: pending, to: paid, actor: clock, due: { at: self.dueAt }, requires self.schedule in [active], moves self.amount from payer to payee }\n      action cancel { from: pending, to: cancelled, requires self.schedule in [cancelled] }\n    }\n  }\n}\n\ninstrument pool(payer: party, payee: party, target: money, closes: date) {\n  summary: \"Contributions fund one threshold or return to their original contributor.\"\n  fields { target: money = target, closesAt: date = closes, held: account of self }\n  lifecycle { states: [open, paid, failed], initial: open }\n  action create { }\n  action pay {\n    from: open, to: paid, actor: { party: payee }\n    requires self.held.balance == self.target\n    moves self.target from self.held to payee economics { recipient: payee, company: { purpose: earning, sourceParty: payer }, participant: { purpose: pass_through, sourceParty: programOperator } }\n  }\n  action fail {\n    from: open, to: failed, actor: clock, due: { at: self.closesAt }\n    requires self.held.balance < self.target\n    invoke: [{ selection: { instrument: contribution, reference: \"pool\", anchor: self.id, states: [paid], limit: 366 }, action: refund, input: {} }]\n  }\n  records {\n    contribution: {\n      fields { pool: ref<parent>, payer: account of payer, amount: money, remaining: money? }\n      lifecycle { states: [pending, paid, refunded], initial: pending }\n      invariants count of { instrument: current(), reference: \"pool\", anchor: self.pool, states: [paid], limit: 366 } <= 366\n      action create { requires self.pool in [open] }\n      action pay { from: pending, to: paid, actor: { party: payer }, deadline: { at: self.pool.closesAt }, requires self.pool in [open], calculate: [{ target: remaining, op: subtract, base: { field: self.pool.target }, subtract: [{ field: self.pool.held.balance }] }], requires self.amount <= self.remaining, moves self.amount from self.payer to self.pool.held economics { purpose: principal, sourceParty: payer } }\n      action refund { from: paid, to: refunded, actor: { parent: parent }, moves self.amount from self.pool.held to self.payer economics { purpose: principal, sourceParty: programOperator } }\n    }\n  }\n}\n\ninstrument swap(first: party, second: party, first_amount: money, second_amount: money, expires: date) {\n  summary: \"Two reservations settle together or both return.\"\n  fields { firstAmount: money = first_amount, secondAmount: money = second_amount, expiresAt: date = expires, firstReceipt: text?, secondReceipt: text? }\n  lifecycle { states: [pending, first_ready, second_ready, both_ready, exchanged, cancelled], initial: pending }\n  action create {}\n  action fund_first { from: pending, to: first_ready, actor: { party: first }, deadline: { at: self.expiresAt }, moves reserve self.firstAmount from first to second capture \"firstReceipt\" }\n  action fund_second { from: first_ready, to: both_ready, actor: { party: second }, deadline: { at: self.expiresAt }, moves reserve self.secondAmount from second to first capture \"secondReceipt\" }\n  action start_second { from: pending, to: second_ready, actor: { party: second }, deadline: { at: self.expiresAt }, moves reserve self.secondAmount from second to first capture \"secondReceipt\" }\n  action finish_first { from: second_ready, to: both_ready, actor: { party: first }, deadline: { at: self.expiresAt }, moves reserve self.firstAmount from first to second capture \"firstReceipt\" }\n  action expire_second { from: second_ready, to: cancelled, actor: clock, due: { at: self.expiresAt }, moves void self.secondReceipt }\n  action exchange { from: both_ready, to: exchanged, actor: { party: first }, moves post self.firstReceipt; moves post self.secondReceipt }\n  action cancel { from: pending, to: cancelled }\n  action expire_first { from: first_ready, to: cancelled, actor: clock, due: { at: self.expiresAt }, moves void self.firstReceipt }\n  action expire_both { from: both_ready, to: cancelled, actor: clock, due: { at: self.expiresAt }, moves void self.firstReceipt; moves void self.secondReceipt }\n}\n\ninstrument payout(payer: party, payee: party, adapter: text, max_age: duration, amount: money = runtime) {\n  summary: \"Reserve funds until matching terminal boundary evidence permits posting.\"\n  fields { amount: money = amount, receipt: text? }\n  lifecycle { states: [pending, instructed, settled, rejected], initial: pending }\n  action create {}\n  action instruct {\n    from: pending, to: instructed, actor: { party: payer }\n    moves reserve self.amount from payer to payee capture \"receipt\" boundary adapter\n  }\n  action confirm {\n    from: instructed, to: settled\n    requires evidence self.id family boundary check outcome result confirmed maxAge max_age instruction self.receipt\n    moves post self.receipt\n  }\n  action reject {\n    from: instructed, to: rejected\n    requires evidence self.id family boundary check outcome result rejected maxAge max_age instruction self.receipt\n    moves void self.receipt\n  }\n}\n\ninstrument mandate(payer: party, payee: party) {\n  summary: \"A payer's permission for one payee to charge up to a total until it expires.\"\n  fields { payer: account of payer, payee: account of payee, limit: money, expiresAt: date }\n  lifecycle { states: [active, revoked], initial: active }\n  action create { actor: { party: payer }, requires self.limit > \"0\" }\n  action revoke { from: active, to: revoked, actor: { party: payer } }\n}\n\ninstrument metered(payer: party, payee: party, unit_price: money, units: integer = 1, fee: fee = { seller: 0% }, mandate: ref<money.mandate> = object(money.mandate)) {\n  summary: \"A unique usage event priced once at the fixed unit price.\"\n  fields { usageIdentity: text, mandate: ref<mandate>, payer: account of payer, payee: account of payee, unitPrice: money = unit_price, units: integer = units, amount: money = multiply(self.unitPrice, self.units) }\n  lifecycle { states: [recorded, billed, cancelled], initial: recorded }\n  invariants sum \"bill_move1_debit\" of { instrument: all(money.metered), reference: \"mandate\", anchor: self.mandate, states: [billed], limit: 366 } <= self.mandate.limit\n  action create { requires unique \"usage_event\" on [self.usageIdentity]; requires self.mandate.payer == self.payer; requires self.mandate.payee == self.payee }\n  action bill { allowZero: true, requires self.amount > \"0\"; from: recorded, to: billed, actor: { party: payee }, deadline: { at: self.mandate.expiresAt }, requires self.mandate in [active], moves self.amount from payer to payee fee fee }\n  action cancel { from: recorded, to: cancelled, actor: { party: payee } }\n}\n"],
+  ["reporting.hsx", "header reporting\n\n// Attach portfolio to one or more financing plans. Its only lifecycle action is\n// create; reports use the declared report request/read roles, not a money action.\n// Aging selects active facilities and includes earned profit when deciding arrears.\n// The default-rate report measures period-end stock, not new default incidence.\n// Paid facilities are excluded and write-offs counted separately. Amounts are riyal\n// minor units; declared scale and rounding govern ratios. Missing identity joins\n// or unreconciled schedule counts refuse.\n\n// Cost: portfolio.create declares no transfers, owned accounts or invocations.\n// That zero instruction count does not price report capture, rendering, storage or\n// release. The host owns those charges and their execution.\n\ninstrument portfolio(on: ref<financing.installments>[], default_days: integer(1, 3650) = 90, retention_years: integer(1, 100) = 10, aging_first_days: integer(1, 3650) = 30, aging_second_days: integer(1, 3650) = 60, aging_third_days: integer(1, 3650) = 90, ratio_scale: integer(1, 1000000) = 10000, ratio_rounding: enum(floor, halfUp) = floor, lock_wait_ms: integer(1, 2000) = 2000, capture_ms: integer(1, 10000) = 10000, max_rows: integer(1, 100000) = 10000, max_join_rows: integer(1, 1000000) = 100000, max_bytes: integer(1024, 16777216) = 8388608) {\n  summary: \"Declared financing reports evaluated over frozen Product facts.\"\n  fields {}\n  lifecycle { states: [declared], initial: declared }\n  action create {}\n  constraints { aging_first_days: less_than(aging_second_days), aging_second_days: less_than(aging_third_days) }\n  reports: [\n    {\n      identity: { id: \"portfolio_aging\", version: 1, description: \"Period-end outstanding principal by oldest unpaid installment. Remaining scheduled profit is distinct from accrued profit. Restructuring evidence is unavailable.\" },\n      scope: { kind: \"product\", classification: \"internal\", currency: \"SAR\" },\n      datasets: [\n        {\n          id: \"facilities\",\n          source: \"instrument\",\n          instruments: on,\n          rowKey: \"facilityId\",\n          columns: [\n            {\n              name: \"facilityId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"borrowerAccount\",\n              field: \"borrower\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"state\",\n              field: \"status\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"originalPrincipal\",\n              field: \"principal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"scheduleCount\",\n              field: \"months\",\n              type: { kind: \"integer\" },\n              required: true\n            },\n            {\n              name: \"recordedCreation\",\n              field: \"createdAt\",\n              type: { kind: \"date\" },\n              required: true\n            }\n          ],\n          expressions: [\n            {\n              id: \"activeState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"active\"\n            },\n            {\n              id: \"paidState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"paid\"\n            },\n            {\n              id: \"writtenState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"written_off\"\n            },\n            { id: \"active\", op: \"equal\", left: \"state\", right: \"activeState\" },\n            { id: \"paid\", op: \"equal\", left: \"state\", right: \"paidState\" },\n            { id: \"writtenOff\", op: \"equal\", left: \"state\", right: \"writtenState\" },\n            { id: \"activeOrPaid\", op: \"or\", left: \"active\", right: \"paid\" },\n            { id: \"financed\", op: \"or\", left: \"active\", right: \"writtenOff\" }\n          ],\n          selection: \"active\"\n        },\n        {\n          id: \"schedule\",\n          source: \"instrument\",\n          instruments: child(on, slice),\n          rowKey: \"sliceId\",\n          columns: [\n            {\n              name: \"sliceId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"planId\",\n              field: \"plan\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"due\",\n              field: \"dueAt\",\n              type: { kind: \"date\" },\n              required: true\n            },\n            {\n              name: \"principal\",\n              field: \"principalReceivable.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"profit\",\n              field: \"profitReceivable.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"earnedProfit\",\n              field: \"profitEarned.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"scheduledPrincipal\",\n              field: \"principal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            }\n          ],\n          expressions: [\n            {\n              id: \"zeroMoney\",\n              op: \"literal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              value: \"0\"\n            },\n            {\n              id: \"zeroDays\",\n              op: \"literal\",\n              type: { kind: \"integer\" },\n              value: 0\n            },\n            { id: \"observed\", op: \"parameter\", name: \"observationAt\" },\n            { id: \"scheduledOutstanding\", op: \"sum\", left: \"principal\", right: \"profit\" },\n            { id: \"totalOutstanding\", op: \"sum\", left: \"scheduledOutstanding\", right: \"earnedProfit\" },\n            { id: \"unpaid\", op: \"less\", left: \"zeroMoney\", right: \"totalOutstanding\" },\n            { id: \"elapsed\", op: \"daysBetween\", left: \"due\", right: \"observed\" },\n            { id: \"nonnegativeDays\", op: \"maximum\", left: \"elapsed\", right: \"zeroDays\" },\n            { id: \"daysPastDue\", op: \"choose\", condition: \"unpaid\", yes: \"nonnegativeDays\", no: \"zeroDays\" }\n          ]\n        },\n        {\n          id: \"borrowerAccounts\",\n          source: \"account\",\n          instruments: [  ],\n          rowKey: \"accountId\",\n          columns: [\n            {\n              name: \"accountId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"participant\",\n              field: \"ownerParticipantId\",\n              type: { kind: \"text\" },\n              required: false\n            }\n          ],\n          expressions: [  ]\n        },\n        {\n          id: \"borrowers\",\n          source: \"identity\",\n          instruments: [  ],\n          rowKey: \"customerId\",\n          columns: [\n            {\n              name: \"customerId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"participantId\",\n              field: \"participantId\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"entityId\",\n              field: \"entityId\",\n              type: { kind: \"text\" },\n              required: true\n            }\n          ],\n          expressions: [  ]\n        }\n      ],\n      time: { timezone: \"Asia/Riyadh\", boundary: \"startInclusiveEndExclusive\", observation: \"periodEnd\", history: \"retainedOnly\" },\n      selection: { dataset: \"facilities\" },\n      calculation: {\n        joins: [\n          {\n            dataset: \"schedule\",\n            local: \"facilityId\",\n            foreign: \"planId\",\n            cardinality: \"many\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"outstandingPrincipal\", op: \"sum\", value: \"principal\" },\n              { name: \"remainingScheduledProfit\", op: \"sum\", value: \"profit\" },\n              { name: \"scheduledPrincipalTotal\", op: \"sum\", value: \"scheduledPrincipal\" },\n              { name: \"capturedScheduleCount\", op: \"count\" },\n              { name: \"oldestUnpaidDays\", op: \"maximum\", value: \"daysPastDue\" }\n            ]\n          },\n          {\n            dataset: \"borrowerAccounts\",\n            local: \"borrowerAccount\",\n            foreign: \"accountId\",\n            cardinality: \"one\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"borrowerParticipant\", op: \"minimum\", value: \"participant\" }\n            ]\n          },\n          {\n            dataset: \"borrowers\",\n            local: \"borrowerParticipant\",\n            foreign: \"participantId\",\n            cardinality: \"one\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"borrowerEntity\", op: \"minimum\", value: \"entityId\" }\n            ]\n          }\n        ],\n        expressions: [\n          {\n            id: \"day0\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: 0\n          },\n          {\n            id: \"day30\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: aging_first_days\n          },\n          {\n            id: \"day60\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: aging_second_days\n          },\n          {\n            id: \"day90\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: aging_third_days\n          },\n          {\n            id: \"band0\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"current\"\n          },\n          {\n            id: \"band30\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"first\"\n          },\n          {\n            id: \"band60\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"second\"\n          },\n          {\n            id: \"band90\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"third\"\n          },\n          {\n            id: \"bandLate\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"later\"\n          },\n          { id: \"current\", op: \"atMost\", left: \"oldestUnpaidDays\", right: \"day0\" },\n          { id: \"first\", op: \"atMost\", left: \"oldestUnpaidDays\", right: \"day30\" },\n          { id: \"second\", op: \"atMost\", left: \"oldestUnpaidDays\", right: \"day60\" },\n          { id: \"third\", op: \"atMost\", left: \"oldestUnpaidDays\", right: \"day90\" },\n          { id: \"lateBand\", op: \"choose\", condition: \"third\", yes: \"band90\", no: \"bandLate\" },\n          { id: \"secondBand\", op: \"choose\", condition: \"second\", yes: \"band60\", no: \"lateBand\" },\n          { id: \"firstBand\", op: \"choose\", condition: \"first\", yes: \"band30\", no: \"secondBand\" },\n          { id: \"agingBand\", op: \"choose\", condition: \"current\", yes: \"band0\", no: \"firstBand\" }\n        ],\n        groupBy: [ \"agingBand\" ],\n        aggregates: [\n          { name: \"facilities\", op: \"count\" },\n          { name: \"principalMinor\", op: \"sum\", value: \"outstandingPrincipal\" },\n          { name: \"scheduledProfitMinor\", op: \"sum\", value: \"remainingScheduledProfit\" }\n        ],\n        resultExpressions: [  ]\n      },\n      validation: {\n        empty: \"noEligibleFacilities\",\n        required: [ \"borrowerEntity\" ],\n        reconcile: [  ],\n        rowReconcile: [\n          { left: \"originalPrincipal\", right: \"scheduledPrincipalTotal\" },\n          { left: \"scheduleCount\", right: \"capturedScheduleCount\" }\n        ],\n        unavailableFacts: [  ],\n        lockTimeoutMs: lock_wait_ms,\n        captureTimeoutMs: capture_ms,\n        maxRows: max_rows,\n        maxJoinRows: max_join_rows,\n        maxBytes: max_bytes\n      },\n      output: {\n        profile: \"internal.v1\",\n        formats: [ \"json\", \"csv\" ],\n        columns: [\n          {\n            name: \"agingBand\",\n            label: \"agingBand\",\n            type: { kind: \"text\" }\n          },\n          {\n            name: \"facilities\",\n            label: \"facilities\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"principalMinor\",\n            label: \"principalMinor\",\n            type: { kind: \"money\", currency: \"SAR\" }\n          },\n          {\n            name: \"scheduledProfitMinor\",\n            label: \"scheduledProfitMinor\",\n            type: { kind: \"money\", currency: \"SAR\" }\n          }\n        ],\n        sort: [ \"agingBand\" ]\n      },\n      authority: {\n        request: [ \"owner\", \"finance\" ],\n        read: [ \"owner\", \"admin\", \"operations\", \"finance\", \"viewer\" ],\n        release: [  ],\n        retention: { policy: \"report_replay\", years: retention_years }\n      }\n    },\n    {\n      identity: { id: \"period_end_outstanding_principal_default_rate\", version: 1, description: \"Current active facilities with any unpaid installment at least the declared default days past due, observed at period end. Cure when arrears clear. Count and outstanding-principal weighted rates in the declared scale exclude paid and written-off facilities; write-offs are counted separately. This is a stock measure, not a new-default incidence or origination cohort rate.\" },\n      scope: { kind: \"product\", classification: \"internal\", currency: \"SAR\" },\n      datasets: [\n        {\n          id: \"facilities\",\n          source: \"instrument\",\n          instruments: on,\n          rowKey: \"facilityId\",\n          columns: [\n            {\n              name: \"facilityId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"borrowerAccount\",\n              field: \"borrower\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"state\",\n              field: \"status\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"originalPrincipal\",\n              field: \"principal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"scheduleCount\",\n              field: \"months\",\n              type: { kind: \"integer\" },\n              required: true\n            },\n            {\n              name: \"recordedCreation\",\n              field: \"createdAt\",\n              type: { kind: \"date\" },\n              required: true\n            }\n          ],\n          expressions: [\n            {\n              id: \"activeState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"active\"\n            },\n            {\n              id: \"paidState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"paid\"\n            },\n            {\n              id: \"writtenState\",\n              op: \"literal\",\n              type: { kind: \"text\" },\n              value: \"written_off\"\n            },\n            { id: \"active\", op: \"equal\", left: \"state\", right: \"activeState\" },\n            { id: \"paid\", op: \"equal\", left: \"state\", right: \"paidState\" },\n            { id: \"writtenOff\", op: \"equal\", left: \"state\", right: \"writtenState\" },\n            { id: \"activeOrPaid\", op: \"or\", left: \"active\", right: \"paid\" },\n            { id: \"financed\", op: \"or\", left: \"active\", right: \"writtenOff\" }\n          ],\n          selection: \"financed\"\n        },\n        {\n          id: \"schedule\",\n          source: \"instrument\",\n          instruments: child(on, slice),\n          rowKey: \"sliceId\",\n          columns: [\n            {\n              name: \"sliceId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"planId\",\n              field: \"plan\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"due\",\n              field: \"dueAt\",\n              type: { kind: \"date\" },\n              required: true\n            },\n            {\n              name: \"principal\",\n              field: \"principalReceivable.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"profit\",\n              field: \"profitReceivable.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"earnedProfit\",\n              field: \"profitEarned.balance\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            },\n            {\n              name: \"scheduledPrincipal\",\n              field: \"principal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              required: true\n            }\n          ],\n          expressions: [\n            {\n              id: \"zeroMoney\",\n              op: \"literal\",\n              type: { kind: \"money\", currency: \"SAR\" },\n              value: \"0\"\n            },\n            {\n              id: \"zeroDays\",\n              op: \"literal\",\n              type: { kind: \"integer\" },\n              value: 0\n            },\n            { id: \"observed\", op: \"parameter\", name: \"observationAt\" },\n            { id: \"scheduledOutstanding\", op: \"sum\", left: \"principal\", right: \"profit\" },\n            { id: \"totalOutstanding\", op: \"sum\", left: \"scheduledOutstanding\", right: \"earnedProfit\" },\n            { id: \"unpaid\", op: \"less\", left: \"zeroMoney\", right: \"totalOutstanding\" },\n            { id: \"elapsed\", op: \"daysBetween\", left: \"due\", right: \"observed\" },\n            { id: \"nonnegativeDays\", op: \"maximum\", left: \"elapsed\", right: \"zeroDays\" },\n            { id: \"daysPastDue\", op: \"choose\", condition: \"unpaid\", yes: \"nonnegativeDays\", no: \"zeroDays\" }\n          ]\n        },\n        {\n          id: \"borrowerAccounts\",\n          source: \"account\",\n          instruments: [  ],\n          rowKey: \"accountId\",\n          columns: [\n            {\n              name: \"accountId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"participant\",\n              field: \"ownerParticipantId\",\n              type: { kind: \"text\" },\n              required: false\n            }\n          ],\n          expressions: [  ]\n        },\n        {\n          id: \"borrowers\",\n          source: \"identity\",\n          instruments: [  ],\n          rowKey: \"customerId\",\n          columns: [\n            {\n              name: \"customerId\",\n              field: \"id\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"participantId\",\n              field: \"participantId\",\n              type: { kind: \"text\" },\n              required: true\n            },\n            {\n              name: \"entityId\",\n              field: \"entityId\",\n              type: { kind: \"text\" },\n              required: true\n            }\n          ],\n          expressions: [  ]\n        }\n      ],\n      time: { timezone: \"Asia/Riyadh\", boundary: \"startInclusiveEndExclusive\", observation: \"periodEnd\", history: \"retainedOnly\" },\n      selection: { dataset: \"facilities\" },\n      calculation: {\n        joins: [\n          {\n            dataset: \"schedule\",\n            local: \"facilityId\",\n            foreign: \"planId\",\n            cardinality: \"many\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"outstandingPrincipal\", op: \"sum\", value: \"principal\" },\n              { name: \"remainingScheduledProfit\", op: \"sum\", value: \"profit\" },\n              { name: \"scheduledPrincipalTotal\", op: \"sum\", value: \"scheduledPrincipal\" },\n              { name: \"capturedScheduleCount\", op: \"count\" },\n              { name: \"oldestUnpaidDays\", op: \"maximum\", value: \"daysPastDue\" }\n            ]\n          },\n          {\n            dataset: \"borrowerAccounts\",\n            local: \"borrowerAccount\",\n            foreign: \"accountId\",\n            cardinality: \"one\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"borrowerParticipant\", op: \"minimum\", value: \"participant\" }\n            ]\n          },\n          {\n            dataset: \"borrowers\",\n            local: \"borrowerParticipant\",\n            foreign: \"participantId\",\n            cardinality: \"one\",\n            missing: \"refuse\",\n            aggregates: [\n              { name: \"borrowerEntity\", op: \"minimum\", value: \"entityId\" }\n            ]\n          }\n        ],\n        expressions: [\n          {\n            id: \"threshold\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: default_days\n          },\n          {\n            id: \"zero\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: 0\n          },\n          {\n            id: \"one\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: 1\n          },\n          {\n            id: \"zeroMoney\",\n            op: \"literal\",\n            type: { kind: \"money\", currency: \"SAR\" },\n            value: \"0\"\n          },\n          { id: \"pastThreshold\", op: \"atMost\", left: \"threshold\", right: \"oldestUnpaidDays\" },\n          { id: \"isDefault\", op: \"and\", left: \"active\", right: \"pastThreshold\" },\n          { id: \"activeCount\", op: \"choose\", condition: \"active\", yes: \"one\", no: \"zero\" },\n          { id: \"defaultCount\", op: \"choose\", condition: \"isDefault\", yes: \"one\", no: \"zero\" },\n          { id: \"writeOffCount\", op: \"choose\", condition: \"writtenOff\", yes: \"one\", no: \"zero\" },\n          { id: \"activePrincipal\", op: \"choose\", condition: \"active\", yes: \"outstandingPrincipal\", no: \"zeroMoney\" },\n          { id: \"defaultPrincipal\", op: \"choose\", condition: \"isDefault\", yes: \"outstandingPrincipal\", no: \"zeroMoney\" }\n        ],\n        groupBy: [  ],\n        aggregates: [\n          { name: \"activeFacilities\", op: \"sum\", value: \"activeCount\" },\n          { name: \"defaultFacilities\", op: \"sum\", value: \"defaultCount\" },\n          { name: \"writtenOffFacilities\", op: \"sum\", value: \"writeOffCount\" },\n          { name: \"activePrincipalMinor\", op: \"sum\", value: \"activePrincipal\" },\n          { name: \"defaultPrincipalMinor\", op: \"sum\", value: \"defaultPrincipal\" }\n        ],\n        resultExpressions: [\n          { id: \"countRate\", op: \"ratio\", numerator: \"defaultFacilities\", denominator: \"activeFacilities\", scale: ratio_scale, rounding: ratio_rounding, zero: \"null\" },\n          { id: \"principalRate\", op: \"ratio\", numerator: \"defaultPrincipalMinor\", denominator: \"activePrincipalMinor\", scale: ratio_scale, rounding: ratio_rounding, zero: \"null\" },\n          {\n            id: \"restructuringEvidence\",\n            op: \"literal\",\n            type: { kind: \"text\" },\n            value: \"unavailable\"\n          },\n          {\n            id: \"defaultDays\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: default_days\n          },\n          {\n            id: \"rateScale\",\n            op: \"literal\",\n            type: { kind: \"integer\" },\n            value: ratio_scale\n          }\n        ]\n      },\n      validation: {\n        empty: \"refuse\",\n        required: [ \"borrowerEntity\" ],\n        reconcile: [  ],\n        rowReconcile: [\n          { left: \"originalPrincipal\", right: \"scheduledPrincipalTotal\" },\n          { left: \"scheduleCount\", right: \"capturedScheduleCount\" }\n        ],\n        unavailableFacts: [  ],\n        lockTimeoutMs: lock_wait_ms,\n        captureTimeoutMs: capture_ms,\n        maxRows: max_rows,\n        maxJoinRows: max_join_rows,\n        maxBytes: max_bytes\n      },\n      output: {\n        profile: \"internal.v1\",\n        formats: [ \"json\", \"csv\" ],\n        columns: [\n          {\n            name: \"activeFacilities\",\n            label: \"activeFacilities\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"defaultFacilities\",\n            label: \"defaultFacilities\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"writtenOffFacilities\",\n            label: \"writtenOffFacilities\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"activePrincipalMinor\",\n            label: \"activePrincipalMinor\",\n            type: { kind: \"money\", currency: \"SAR\" }\n          },\n          {\n            name: \"defaultPrincipalMinor\",\n            label: \"defaultPrincipalMinor\",\n            type: { kind: \"money\", currency: \"SAR\" }\n          },\n          {\n            name: \"countRate\",\n            label: \"countRate\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"principalRate\",\n            label: \"principalRate\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"restructuringEvidence\",\n            label: \"restructuringEvidence\",\n            type: { kind: \"text\" }\n          },\n          {\n            name: \"defaultDays\",\n            label: \"defaultDays\",\n            type: { kind: \"integer\" }\n          },\n          {\n            name: \"rateScale\",\n            label: \"rateScale\",\n            type: { kind: \"integer\" }\n          }\n        ],\n        sort: [ \"activeFacilities\" ]\n      },\n      authority: {\n        request: [ \"owner\", \"finance\" ],\n        read: [ \"owner\", \"admin\", \"operations\", \"finance\", \"viewer\" ],\n        release: [  ],\n        retention: { policy: \"report_replay\", years: retention_years }\n      }\n    }\n  ]\n}\n"],
+  ["savings.hsx", "header savings\n\n// Economics: Contributions and returned pots are principal, not company earnings.\n\n// Expose circle.create and membership.create; create one pending contribution\n// record per member per circle date before membership.activate. Circle activation\n// is clock-owned and needs exactly members joined memberships at or after startsAt.\n// Membership.activate needs the active circle and its full pending schedule.\n// Membership.received means the member received the pot. Contribution.paid means\n// one contribution was collected. Neither record's state proves the other's state.\n// A member can have received the pot with future unpaid contributions, or paid\n// a contribution while their membership still waits for its payout seat.\n// Receive counts preceding received memberships, never paid contributions.\n// Eight members at 300 riyals require 2,400 riyals per payout; seven payments supply 2,100,\n// so a full payout lacks 300 unless other cash exists. There is no reduced payout.\n// Contribution.pay has a due time and no deadline or prior-payment requirement.\n// Late and out-of-order collection is admitted while membership is active or\n// received and circle is active. Clock admission does not promise scheduler retry.\n// Circle.close needs every membership received and an empty held account.\n// Only the Product operator disbands a forming circle.\n// Circle creation collects circleDates, one date per member for contributions and payouts.\n\n// Cost: circle.create declares one owned account. Each contribution payment\n// and each pot payout declares one transfer. Multiply by the actual member and\n// period counts for a completed circle; hsx cost reports per-action bounds.\n\ninstrument circle(contribution: money, members: integer(1, 60), starts: date, memberships: ref<savings.membership> = object(savings.membership)) {\n  summary: \"A fixed group contributes on its explicit calendar and takes the pot in order.\"\n  fields { contribution: money = contribution, members: integer = members, startsAt: date = starts, circleDates: list(date, members), pot: money = multiply(self.contribution, self.members), held: account of self }\n  lifecycle { states: [forming, active, closed, disbanded], initial: forming }\n  action create { }\n  action activate {\n    from: forming, to: active, actor: clock, due: { at: self.startsAt }\n    requires count of { instrument: memberships, reference: \"circle\", anchor: self.id, states: [joined], limit: 60 } == self.members\n  }\n  action close {\n    from: active, to: closed\n    requires count of { instrument: memberships, reference: \"circle\", anchor: self.id, states: [received], limit: 60 } == self.members\n    requires self.held.balance == \"0\"\n  }\n  action disband { from: forming, to: disbanded, actor: { party: programOperator } }\n}\n\ninstrument membership(circle: ref<savings.circle>, member: party) {\n  summary: \"A member contributes on the circle calendar and receives the pot in the assigned seat.\"\n  fields { circle: ref<circle>, member: account of member, seat: integer(1, 60), preceding: integer = subtract(self.seat, 1), receivesAt: date = at(self.circle.circleDates, self.seat), contribution: money = self.circle.contribution, total: money = self.circle.pot }\n  lifecycle { states: [joined, active, received, withdrawn], initial: joined }\n  action create { actor: { party: member }, requires self.seat <= self.circle.members; requires self.circle in [forming]; requires unique \"circle_seat\" on [self.circle, self.seat]; requires unique \"circle_member\" on [self.circle, self.member] }\n  action activate {\n    from: joined, to: active\n    requires self.circle in [active]\n    requires count of { instrument: contribution, reference: \"membership\", anchor: self.id, states: [pending], limit: 60 } == self.circle.members\n  }\n  action receive {\n    from: active, to: received, actor: clock, due: { at: self.receivesAt }\n    requires self.circle in [active]\n    requires count of { instrument: all(savings.membership), reference: \"circle\", anchor: self.circle, states: [received], limit: 60 } == self.preceding\n    moves self.total from self.circle.held to self.member economics { purpose: principal, sourceParty: programOperator }\n  }\n  action withdraw { from: joined, to: withdrawn, requires self.circle in [disbanded] }\n  records {\n    contribution: {\n      fields { membership: ref<parent>, period: integer(1, 60), dueAt: date = at(self.membership.circle.circleDates, self.period), amount: money = self.membership.contribution }\n      lifecycle { states: [pending, paid], initial: pending }\n      action create { requires self.period <= self.membership.circle.members; requires self.membership in [joined]; requires unique \"seat_period\" on [self.membership, self.period] }\n      action pay { from: pending, to: paid, actor: clock, due: { at: self.dueAt }, requires self.membership in [active, received]; requires self.membership.circle in [active], moves self.amount from self.membership.member to self.membership.circle.held economics { purpose: principal, sourceParty: member } }\n    }\n  }\n}\n"],
   ["wallet.hsx", "header wallet\n\n// Economics: Topups and withdrawals are excluded prepaid credit; a top-up fee is\n// Company earning. Spending remains\n// unclassified because the bound payee alone does not state the purchase purpose.\n\n// Expose balance.create, activate, topup and withdraw as needed. Holder moves\n// cash only while active. Freeze blocks new topups, withdrawals and spend reserves;\n// close requires no held cash. Only the Product operator freezes or unfreezes.\n// The holder closes the wallet, or the Product operator with operator_close.\n// Only the wallet holder creates a spend record, which checks its amount against\n// spendLimit; bind the spend holder to the balance holder.\n// Expose reserve, pay and cancel for the bound payee. Reserve requires an active\n// wallet before expiresAt; pay posts the whole reservation, cancel/expiry void it.\n// Existing reservations may still post after the wallet freezes. There is no\n// daily aggregate limit, partial spend or card-network settlement in this header.\n\n// Top-up fee: topup_fee takes a floored percentage of each top-up for the Company;\n// the wallet receives the rest. At 1%, a 100.00 top-up credits 99.00 and earns 1.00.\n// The default 0% moves nothing to the Company.\n\n// Cost: balance.create declares one owned account; topup declares two transfers\n// and withdraw one. Spend reserve, pay and cancel each declare one transfer\n// instruction. These are counts, not the executor tariff.\n\ninstrument balance(holder: party, spend_limit: money = 100000 SAR, topup_fee: percent = 0%) {\n  summary: \"A holder's reusable balance with an immutable per-spend ceiling.\"\n  fields { holder: account of holder, held: account of self, spendLimit: money = spend_limit, topupFee: money?, topupCredit: money? }\n  lifecycle { states: [pending, active, frozen, closed], initial: pending }\n  action create { actor: { party: holder } }\n  action activate { from: pending, to: active, actor: { party: holder } }\n  action topup {\n    allowZero: true, requires input.amount > \"0\"\n    from: active, to: active, actor: { party: holder }\n    input { amount: money }\n    calculate: [\n      { target: topupFee, op: rate, base: { field: input.amount }, bps: { literal: topup_fee }, rounding: floor }\n      { target: topupCredit, op: subtract, base: { field: input.amount }, subtract: [{ field: self.topupFee }] }\n    ]\n    moves self.topupCredit from holder to self.held economics { purpose: prepaid_credit, sourceParty: holder }\n    moves self.topupFee from holder to programOperator economics { purpose: earning, sourceParty: holder }\n  }\n  action withdraw {\n    from: active, to: active, actor: { party: holder }\n    input { amount: money }\n    moves input.amount from self.held to holder economics { purpose: prepaid_credit, sourceParty: programOperator }\n  }\n  action freeze { from: active, to: frozen, actor: { party: programOperator } }\n  action unfreeze { from: frozen, to: active, actor: { party: programOperator } }\n  action close { from: [pending, active], to: closed, actor: { party: holder }, requires self.held.balance == \"0\" }\n  action operator_close { from: [pending, active], to: closed, actor: { party: programOperator }, requires self.held.balance == \"0\" }\n}\n\ninstrument spend(wallet: ref<wallet.balance>, payee: party, holder: party = party(person)) {\n  summary: \"Reserve one wallet spend, then post or void the same reservation.\"\n  fields { wallet: ref<wallet>, holder: account of holder, amount: money, expiresAt: date, reservation: text? }\n  lifecycle { states: [pending, reserved, paid, cancelled, expired], initial: pending }\n  action create {\n    actor: { party: holder }\n    requires self.wallet in [active]\n    requires self.wallet.holder == self.holder\n    requires self.amount <= self.wallet.spendLimit\n  }\n  action reserve {\n    from: pending, to: reserved, actor: { party: payee }\n    requires self.wallet in [active]\n    deadline: { at: self.expiresAt }\n    moves reserve self.amount from self.wallet.held to payee capture \"reservation\"\n  }\n  action pay { from: reserved, to: paid, actor: { party: payee }, moves post self.reservation }\n  action cancel { from: reserved, to: cancelled, actor: { party: payee }, moves void self.reservation }\n  action expire { from: reserved, to: expired, actor: clock, due: { at: self.expiresAt }, moves void self.reservation }\n}\n"],
 ]);

package/std/money.hsx

@@ -24,7 +24,7 @@ header money
 
 // Cost: transfer.pay declares one transfer. Hold.create declares one owned account;
 // fund, release and refund each declare one transfer. Schedules and pools add bounded
-// child invocations. Run hsx cost on the composed program for counts, not SAR prices.
+// child invocations. Run hsx cost on the composed program for counts, not riyal prices.
 
 instrument transfer(payer: party, payee: party, amount: money = runtime) {
   summary: "One transfer between the bound parties."

package/std/reporting.hsx

@@ -4,7 +4,7 @@ header reporting
 // create; reports use the declared report request/read roles, not a money action.
 // Aging selects active facilities and includes earned profit when deciding arrears.
 // The default-rate report measures period-end stock, not new default incidence.
-// Paid facilities are excluded and write-offs counted separately. Amounts are SAR
+// Paid facilities are excluded and write-offs counted separately. Amounts are riyal
 // minor units; declared scale and rounding govern ratios. Missing identity joins
 // or unreconciled schedule counts refuse.
 

package/std/savings.hsx

@@ -11,7 +11,7 @@ header savings
 // A member can have received the pot with future unpaid contributions, or paid
 // a contribution while their membership still waits for its payout seat.
 // Receive counts preceding received memberships, never paid contributions.
-// Eight members at 300 SAR require 2400 SAR per payout; seven payments supply 2100,
+// Eight members at 300 riyals require 2,400 riyals per payout; seven payments supply 2,100,
 // so a full payout lacks 300 unless other cash exists. There is no reduced payout.
 // Contribution.pay has a due time and no deadline or prior-payment requirement.
 // Late and out-of-order collection is admitted while membership is active or