@hyperscale0/hsx 2.4.0 → 3.0.0

package/std/money_flows/swap.hsx

@@ -1,1192 +0,0 @@
-module std.money_flows.swap;
-
-// Atomic two-sided trade between two parties where neither leg settles alone.
-//
-// ### Purpose
-// `swap` executes atomic delivery-versus-payment (DvP) or payment-versus-payment (PvP) exchanges between two named parties.
-// Both sides fund their declared principal amounts and platform fees into a shared escrow. The exchange settles atomically
-// upon triggering the `release` condition port, paying each party the other's funded amount. If a `dispute` occurs,
-// both legs unwind and refund simultaneously. Half-funded or half-released states cannot occur.
-//
-// ### Selection guidance
-// - vs `held_payment`: `swap` is a bilateral trade where both sides must deposit funds into escrow and receive each other's
-//   disbursements simultaneously. `held_payment` is unilateral escrow where a single payer funds a payment held for a payee.
-// - vs `instant_transfer`: `instant_transfer` executes an immediate one-way transfer. `swap` coordinates two reciprocal transfers
-//   held atomically in escrow until release confirmation.
-//
-// ### Parameters
-// - `between`: List containing exactly two trade participant parties (`[side_a, side_b]`).
-// - `amounts`: Block declaring the principal money amounts for each party.
-// - `fees`: Block declaring the platform fee money amounts for each party.
-// - `release`: Condition port required to execute the atomic swap release.
-// - `dispute`: Condition port triggering unwinding and refunding of both trade legs.
-// - `side_names`: Optional custom naming block for the two sides (`first`, `second`).
-// - `lifecycle_state_order`: Optional custom ordering for lifecycle states.
-// - `action_bindings`: Optional custom action names.
-// - `parked_states`: Optional configuration for parked states.
-// - `fixed_prefix`: Optional custom prefix for generated instrument IDs.
-//
-// ### Decision ports
-// - `release`: Port authorizing atomic settlement of both trade legs.
-// - `dispute`: Port triggering atomic cancellation and refund of both parties.
-//
-// ### Example
-// ```hsx
-// program swap_example "Swap example"
-// import { swap } from "std/money_flows"
-// party buyer: business
-// party seller: business
-// settlement exchange = swap {
-//   between: [buyer, seller]
-//   amounts {
-//     buyer: buyerAmount: money(SAR)
-//     seller: sellerAmount: money(SAR)
-//   }
-//   fees {
-//     buyer: buyerFee: money(SAR)
-//     seller: sellerFee: money(SAR)
-//   }
-//   release: port release_exchange
-//   dispute: port dispute_exchange within P7D
-// }
-// port release_exchange { allowed: [buyer, seller] }
-// port dispute_exchange { allowed: [buyer, seller] }
-// ```
-export instrument swap<C>(between: list<party>, amounts: block, fees: block, release: condition, dispute: condition, side_names: optional<block>, lifecycle_state_order: optional<list<text>>, action_bindings: optional<block>, parked_states: optional<block>, fixed_prefix: optional<text>) {
-  let(side_a): at(between, 1);
-  let(side_b): at(between, 2);
-  let(side_a_amount): get(amounts, side_a);
-  let(side_b_amount): get(amounts, side_b);
-  let(side_a_fee): get(fees, side_a);
-  let(side_b_fee): get(fees, side_b);
-  when(side_names) {
-    let(side_a_name): get(side_names, "first");
-    let(side_b_name): get(side_names, "second");
-  }
-  when_not(side_names) {
-    let(side_a_name): side_a;
-    let(side_b_name): side_b;
-  }
-  let(side_a_account): concat(camel(side_a_name), "AccountId");
-  let(side_b_account): concat(camel(side_b_name), "AccountId");
-  agent_description: "Reach for swap when two named parties pay each other in one atomic trade and neither leg may settle alone. Both principals fund one escrow together, both cross-payments reserve together, and one dispute unwinds both. A single payer paying a single payee is instant transfer instead.";
-  title: sentence(instrument);
-  when(fixed_prefix) {
-    id_prefix: fixed_prefix;
-  }
-  when_not(fixed_prefix) {
-    id_prefix: prefix(instrument);
-  }
-  summary: concat("Two-party atomic trade between ", words(side_a), " and ", words(side_b));
-  description: concat("Atomic swap between ", words(side_a), " and ", words(side_b), "; half-funded and half-released states do not exist");
-  distinct_parties: true;
-  when(side_names) {
-    parties {
-      payer: { party: side_a; account: side_a_account; };
-      beneficiary: { party: side_b; account: side_b_account; };
-    }
-  }
-  when_not(side_names) {
-    parties {
-      payer: side_a;
-      beneficiary: side_b;
-    }
-  }
-  required: [side_a_account, side_b_account, platformAccountId, concat(side_a_amount), concat(side_b_amount), concat(side_a_fee), concat(side_b_fee), currency];
-  when_not(side_names) {
-    computes fees {
-      amountField: concat(side_a_fee);
-      baseField: concat(side_a_amount);
-      bearerField: side_a_account;
-      position: on_top;
-      rule {
-        currencyField: currency;
-        field: concat(side_a_fee);
-        kind: exact;
-      }
-    }
-    computes fees {
-      amountField: concat(side_b_fee);
-      baseField: concat(side_b_amount);
-      bearerField: side_b_account;
-      position: on_top;
-      rule {
-        currencyField: currency;
-        field: concat(side_b_fee);
-        kind: exact;
-      }
-    }
-  }
-  when(parked_states) {
-    caller_parked_states: parked_states;
-  }
-  fields {
-    when(side_names) {
-      clawbackAt {
-        type: date;
-        description: "Machine-owned absolute end of the release clawback window";
-        optional: true;
-      }
-      currency {
-        type: text;
-        description: "One currency for both trade legs and both fees";
-        const: C;
-      }
-      "[side_a_account]" {
-        type: account<C>;
-        description: "First trade party and funder";
-        "x-hyperscale-reference-filter" {
-          column: role;
-          values: [customer_balance];
-        }
-      }
-      "[side_a_amount]" {
-        type: get(amounts, side_a);
-        description: concat("Amount side A holds against the whole exchange, in ", C, " minor units");
-      }
-      "[side_a_fee]" {
-        type: get(fees, side_a);
-        description: "Side A custody fee charged on top and never placed in escrow";
-      }
-      "[side_b_account]" {
-        type: account<C>;
-        description: "Second trade party and funder";
-        "x-hyperscale-reference-filter" {
-          column: role;
-          values: [customer_balance];
-        }
-      }
-      "[side_b_amount]" {
-        type: get(amounts, side_b);
-        description: concat("Amount side B holds against the whole exchange, in ", C, " minor units");
-      }
-      "[side_b_fee]" {
-        type: get(fees, side_b);
-        description: "Side B custody fee charged on top and never placed in escrow";
-      }
-    }
-    when_not(side_names) {
-      clawbackAt {
-        type: date;
-        description: concat("Machine-owned end of the ", dispute_within, " whole-trade dispute window");
-      }
-      "[side_a_amount]" {
-        type: get(amounts, side_a);
-        description: "Side A amount in SAR minor units, held against the whole trade";
-      }
-      "[side_b_amount]" {
-        type: get(amounts, side_b);
-        description: "Side B amount in SAR minor units, held against the whole trade";
-      }
-      "[side_a_fee]" {
-        type: get(fees, side_a);
-        description: concat("Immutable exact ", words(side_a), " service fee in SAR minor units");
-      }
-      "[side_b_fee]" {
-        type: get(fees, side_b);
-        description: concat("Immutable exact ", words(side_b), " service fee in SAR minor units");
-      }
-    }
-    platformAccountId {
-      type: account<C>;
-      when(side_names) {
-        description: "Product revenue or customer balance account collecting trade service fees";
-      }
-      when_not(side_names) {
-        description: "The product fee collection account";
-      }
-      "x-hyperscale-fee-collection-port": true;
-      "x-hyperscale-reference-filter" {
-        column: role;
-        values: [customer_balance, product_revenue];
-      }
-    }
-  }
-  when(lifecycle_state_order) {
-    let(states_key): "states";
-    lifecycle {
-      "[states_key]": lifecycle_state_order;
-      initial created;
-      on abandon: created -> abandoned;
-      on cancel: funded -> cancelled;
-      on dispute: released -> clawed_back;
-      on fund: created -> funded;
-      on post: released -> settled;
-      on release: funded -> released;
-    }
-  }
-  when_not(lifecycle_state_order) {
-    lifecycle {
-      states created abandoned funded cancelled released settled clawed_back;
-      initial created;
-      on abandon: created -> abandoned;
-      on cancel: funded -> cancelled;
-      on dispute: released -> clawed_back;
-      on fund: created -> funded;
-      on post: released -> settled;
-      on release: funded -> released;
-    }
-  }
-  when_not(action_bindings) {
-    action abandon {
-      agent_description: "Walk away from a trade that never funded. Only a created trade abandons, and its escrow account must hold nothing, so there is nothing to refund. No money moves.";
-      summary: "Abandon the trade before its atomic funding batch";
-      public_action: concat("abandon", title(camel(instrument)));
-      requires drained {
-        path: "refs.escrowAccountId";
-      }
-      moves: [];
-      steps: [];
-    }
-    action cancel {
-      agent_description: "Unwind a funded trade before release. Both principals return from escrow to their own sides in one batch. The trade must be funded and not yet released. The service fees taken at funding stay with the platform.";
-      summary: "Cancel and return both trade principals atomically";
-      public_action: concat("cancel", title(camel(instrument)));
-      moves: [{
-        amount: concat(side_a_amount);
-        from: "refs.escrowAccountId";
-        to: side_a;
-        key: side_a_refund;
-      }, {
-        amount: concat(side_b_amount);
-        from: "refs.escrowAccountId";
-        to: side_b;
-        key: side_b_refund;
-      }];
-      steps: [];
-    }
-    action create {
-      agent_description: "Open a trade and provision its escrow account. No money moves. Both principals and both exact service fees are fixed here and cannot change afterwards.";
-      summary: concat("Create a ", words(instrument), " atomic trade");
-      public_action: concat("create", title(camel(instrument)));
-      moves: [];
-      steps: [{
-        operation: "account.escrow.provision";
-        bind {
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          "owner.id" {
-            from: instance;
-            path: productId;
-          }
-          "owner.type" {
-            from: const;
-            value: product;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          role {
-            from: const;
-            value: product_escrow;
-          }
-        }
-        capture {
-          escrowAccountId: accountId;
-        }
-      }];
-    }
-    action dispute {
-      agent_description: "Claw back a released trade inside its dispute window. Both cross-payment reservations void and both principals return from escrow in one batch. The trade must be released and the clawback moment must not have passed. The dispute port's declared parties may call it.";
-      summary: "Void both reservations, then refund both principals atomically";
-      public_action: concat("dispute", title(camel(instrument)));
-      deadline {
-        field: clawbackAt;
-      }
-      when(dispute_fields) {
-        input {
-          type: object;
-          additional_properties: false;
-          properties {
-            for input_name in keys(dispute_fields) {
-              [input_name]: get(dispute_fields, input_name);
-            }
-          }
-          required: keys(dispute_fields);
-        }
-        capture_input: {
-          for item in keys(dispute_fields) { [item]: item; }
-        };
-      }
-      port { allowedParties: dispute_allowed; }
-      moves: [{
-        bind {
-          reason {
-            from: const;
-            value: "Whole trade disputed inside the clawback window";
-          }
-          transferId {
-            from: instance;
-            path: "refs.releaseSideATransferId";
-          }
-        }
-        key: side_a_void;
-        operation: "internal_transfer.void";
-      }, {
-        bind {
-          reason {
-            from: const;
-            value: "Whole trade disputed inside the clawback window";
-          }
-          transferId {
-            from: instance;
-            path: "refs.releaseSideBTransferId";
-          }
-        }
-        key: side_b_void;
-        operation: "internal_transfer.void";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_a_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_a_account);
-          }
-          "metadata.clawbackOfTransferId" {
-            from: instance;
-            path: "refs.releaseSideATransferId";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: "dispute";
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          disputeSideARefundTransferId: transferId;
-        }
-        key: side_a_refund;
-        operation: "internal_transfer.create";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_b_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_b_account);
-          }
-          "metadata.clawbackOfTransferId" {
-            from: instance;
-            path: "refs.releaseSideBTransferId";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: "dispute";
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          disputeSideBRefundTransferId: transferId;
-        }
-        key: side_b_refund;
-        operation: "internal_transfer.create";
-      }];
-      steps: [];
-    }
-    action fund {
-      agent_description: "Fund both sides at once. Each side pays its principal into escrow and its service fee to the platform account, four transfers in one batch. The trade must be created and unfunded. This moves real money from both parties.";
-      summary: "Fund both trade sides and collect on-top fees atomically";
-      public_action: concat("fund", title(camel(instrument)));
-      sandbox_failure_point: "funding";
-      moves: [{
-        amount: concat(side_a_amount);
-        from: side_a;
-        to: "refs.escrowAccountId";
-        key: side_a_principal;
-      }, {
-        amount: concat(side_b_amount);
-        from: side_b;
-        to: "refs.escrowAccountId";
-        key: side_b_principal;
-      }, {
-        amount: concat(side_a_fee);
-        from: side_a;
-        to: platformAccountId;
-        key: side_a_service_fee;
-      }, {
-        amount: concat(side_b_fee);
-        from: side_b;
-        to: platformAccountId;
-        key: side_b_service_fee;
-      }];
-      steps: [];
-    }
-    action post {
-      summary: "Post both trade reservations when the clawback window matures";
-      due {
-        field: clawbackAt;
-      }
-      moves: [{
-        bind {
-          transferId {
-            from: instance;
-            path: "refs.releaseSideATransferId";
-          }
-        }
-        key: "side_a";
-        operation: "internal_transfer.post";
-      }, {
-        bind {
-          transferId {
-            from: instance;
-            path: "refs.releaseSideBTransferId";
-          }
-        }
-        key: "side_b";
-        operation: "internal_transfer.post";
-      }];
-      steps: [];
-    }
-    action release {
-      agent_description: "Reserve each side's principal for the other side and start the dispute window. The trade must be funded. Money is reserved, not settled. It posts on its own when the window matures, and dispute unwinds it before then. The release port's declared parties may call it.";
-      summary: "Reserve both cross-payments for the whole-trade clawback window";
-      public_action: concat("release", title(camel(instrument)));
-      port {
-        allowedParties: release_allowed;
-      }
-      sandbox_failure_point: "release";
-      sets_at {
-        field: clawbackAt;
-        offset: dispute_within;
-      }
-      moves: [{
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_a_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_b_account);
-          }
-          "metadata.clawbackAt" {
-            from: instance;
-            path: "fields.clawbackAt";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: "release";
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          releaseSideATransferId: transferId;
-        }
-        key: "side_a";
-        operation: "internal_transfer.reserve";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_b_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_a_account);
-          }
-          "metadata.clawbackAt" {
-            from: instance;
-            path: "fields.clawbackAt";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: "release";
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          releaseSideBTransferId: transferId;
-        }
-        key: "side_b";
-        operation: "internal_transfer.reserve";
-      }];
-      steps: [];
-    }
-  }
-  when(action_bindings) {
-    let(event_prefix): get(action_bindings, "event_prefix");
-    let(fund_principal_capture): get(action_bindings, "fund_principal_capture");
-    let(fund_fee_capture): get(action_bindings, "fund_fee_capture");
-    let(fund_principal_phase): get(action_bindings, "fund_principal_phase");
-    let(fund_fee_phase): get(action_bindings, "fund_fee_phase");
-    let(release_capture): get(action_bindings, "release_capture");
-    let(release_phase): get(action_bindings, "release_phase");
-    let(release_key): get(action_bindings, "release_key");
-    let(post_key): get(action_bindings, "post_key");
-    let(dispute_capture): get(action_bindings, "dispute_capture");
-    let(dispute_phase): get(action_bindings, "dispute_phase");
-    let(dispute_reason): get(action_bindings, "dispute_reason");
-    let(cancel_capture): get(action_bindings, "cancel_capture");
-    let(cancel_phase): get(action_bindings, "cancel_phase");
-    let(side_a_fund_capture): camel(concat(side_a_name, "_", fund_principal_capture, "_transfer_id"));
-    let(side_b_fund_capture): camel(concat(side_b_name, "_", fund_principal_capture, "_transfer_id"));
-    let(side_a_fee_capture): camel(concat(side_a_name, "_", fund_fee_capture, "_transfer_id"));
-    let(side_b_fee_capture): camel(concat(side_b_name, "_", fund_fee_capture, "_transfer_id"));
-    let(side_a_release_capture): camel(concat(side_a_name, "_", release_capture, "_id"));
-    let(side_b_release_capture): camel(concat(side_b_name, "_", release_capture, "_id"));
-    let(side_a_release_ref): concat("refs.", side_a_release_capture);
-    let(side_b_release_ref): concat("refs.", side_b_release_capture);
-    let(side_a_dispute_capture): camel(concat(side_a_name, "_", dispute_capture, "_transfer_id"));
-    let(side_b_dispute_capture): camel(concat(side_b_name, "_", dispute_capture, "_transfer_id"));
-    let(side_a_cancel_capture): camel(concat(side_a_name, "_", cancel_capture, "_transfer_id"));
-    let(side_b_cancel_capture): camel(concat(side_b_name, "_", cancel_capture, "_transfer_id"));
-    action create {
-      agent_description: "Open a trade and provision its escrow account. No money moves. Both principals and both exact service fees are fixed here and cannot change afterwards.";
-      summary: concat("Create a ", words(instrument), " atomic trade");
-      public_action: concat("create", title(camel(instrument)));
-      moves: [];
-      steps: [{
-        operation: "account.escrow.provision";
-        bind {
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          "owner.id" {
-            from: instance;
-            path: productId;
-          }
-          "owner.type" {
-            from: const;
-            value: product;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          role {
-            from: const;
-            value: product_escrow;
-          }
-        }
-        capture {
-          escrowAccountId: accountId;
-        }
-      }];
-    }
-    action fund {
-      agent_description: "Fund both sides at once. Each side pays its principal into escrow and its service fee to the platform account, four transfers in one batch. The trade must be created and unfunded. This moves real money from both parties.";
-      summary: "Fund both trade sides and collect on-top fees atomically";
-      public_action: concat("fund", title(camel(instrument)));
-      event_name: concat(event_prefix, ".funded");
-      sandbox_failure_point: "funding";
-      moves: [{
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_a_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: fund_principal_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: concat("fields.", side_a_account);
-          }
-        }
-        capture {
-          "[side_a_fund_capture]": transferId;
-        }
-        key: side_a_principal;
-        operation: "internal_transfer.create";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_b_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: fund_principal_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: concat("fields.", side_b_account);
-          }
-        }
-        capture {
-          "[side_b_fund_capture]": transferId;
-        }
-        key: side_b_principal;
-        operation: "internal_transfer.create";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_a_fee);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: "fields.platformAccountId";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: fund_fee_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: concat("fields.", side_a_account);
-          }
-        }
-        capture {
-          "[side_a_fee_capture]": transferId;
-        }
-        key: side_a_service_fee;
-        operation: "internal_transfer.create";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_b_fee);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: "fields.platformAccountId";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: fund_fee_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: concat("fields.", side_b_account);
-          }
-        }
-        capture {
-          "[side_b_fee_capture]": transferId;
-        }
-        key: side_b_service_fee;
-        operation: "internal_transfer.create";
-      }];
-      steps: [];
-    }
-    action release {
-      agent_description: "Reserve each side's principal for the other side and start the dispute window. The trade must be funded. Money is reserved, not settled. It posts on its own when the window matures, and dispute unwinds it before then. The release port's declared parties may call it.";
-      summary: "Reserve both cross-payments for the whole-trade clawback window";
-      public_action: concat("release", title(camel(instrument)));
-      event_name: concat(event_prefix, ".released");
-      port {
-        allowedParties: release_allowed;
-      }
-      sandbox_failure_point: "release";
-      sets_at {
-        field: clawbackAt;
-        offset: dispute_within;
-      }
-      moves: [{
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_a_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_b_account);
-          }
-          "metadata.clawbackAt" {
-            from: instance;
-            path: "fields.clawbackAt";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: release_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          "[side_a_release_capture]": transferId;
-        }
-        key: concat("side_a_", release_key);
-        operation: "internal_transfer.reserve";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_b_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_a_account);
-          }
-          "metadata.clawbackAt" {
-            from: instance;
-            path: "fields.clawbackAt";
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: release_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          "[side_b_release_capture]": transferId;
-        }
-        key: concat("side_b_", release_key);
-        operation: "internal_transfer.reserve";
-      }];
-      steps: [];
-    }
-    action post {
-      summary: "Post both trade reservations when the clawback window matures";
-      event_name: concat(event_prefix, ".posted");
-      due {
-        field: clawbackAt;
-      }
-      moves: [{
-        bind {
-          transferId {
-            from: instance;
-            path: side_a_release_ref;
-          }
-        }
-        key: concat("side_a_", post_key);
-        operation: "internal_transfer.post";
-      }, {
-        bind {
-          transferId {
-            from: instance;
-            path: side_b_release_ref;
-          }
-        }
-        key: concat("side_b_", post_key);
-        operation: "internal_transfer.post";
-      }];
-      steps: [];
-    }
-    action dispute {
-      agent_description: "Claw back a released trade inside its dispute window. Both cross-payment reservations void and both principals return from escrow in one batch. The trade must be released and the clawback moment must not have passed. The dispute port's declared parties may call it.";
-      summary: "Void both reservations, then refund both principals atomically";
-      public_action: concat("dispute", title(camel(instrument)));
-      event_name: concat(event_prefix, ".clawed_back");
-      deadline {
-        field: clawbackAt;
-      }
-      when(dispute_fields) {
-        input {
-          type: object;
-          additional_properties: false;
-          properties {
-            for input_name in keys(dispute_fields) {
-              [input_name]: get(dispute_fields, input_name);
-            }
-          }
-          required: keys(dispute_fields);
-        }
-        capture_input: {
-          for item in keys(dispute_fields) { [item]: item; }
-        };
-      }
-      port { allowedParties: dispute_allowed; }
-      moves: [{
-        bind {
-          reason {
-            from: const;
-            value: dispute_reason;
-          }
-          transferId {
-            from: instance;
-            path: side_a_release_ref;
-          }
-        }
-        key: side_a_void;
-        operation: "internal_transfer.void";
-      }, {
-        bind {
-          reason {
-            from: const;
-            value: dispute_reason;
-          }
-          transferId {
-            from: instance;
-            path: side_b_release_ref;
-          }
-        }
-        key: side_b_void;
-        operation: "internal_transfer.void";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_a_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_a_account);
-          }
-          "metadata.clawbackOfTransferId" {
-            from: instance;
-            path: side_a_release_ref;
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: dispute_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          "[side_a_dispute_capture]": transferId;
-        }
-        key: side_a_refund;
-        operation: "internal_transfer.create";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_b_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_b_account);
-          }
-          "metadata.clawbackOfTransferId" {
-            from: instance;
-            path: side_b_release_ref;
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: dispute_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          "[side_b_dispute_capture]": transferId;
-        }
-        key: side_b_refund;
-        operation: "internal_transfer.create";
-      }];
-      steps: [];
-    }
-    action cancel {
-      agent_description: "Unwind a funded trade before release. Both principals return from escrow to their own sides in one batch. The trade must be funded and not yet released. The service fees taken at funding stay with the platform.";
-      summary: "Cancel and return both trade principals atomically";
-      public_action: concat("cancel", title(camel(instrument)));
-      event_name: concat(event_prefix, ".cancelled");
-      moves: [{
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_a_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_a_account);
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: cancel_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          "[side_a_cancel_capture]": transferId;
-        }
-        key: side_a_refund;
-        operation: "internal_transfer.create";
-      }, {
-        bind {
-          amount {
-            from: instance;
-            path: concat("fields.", side_b_amount);
-          }
-          currency {
-            from: instance;
-            path: "fields.currency";
-          }
-          destinationAccountId {
-            from: instance;
-            path: concat("fields.", side_b_account);
-          }
-          "metadata.instrumentId" {
-            from: const;
-            value: instrument;
-          }
-          "metadata.instrumentInstanceId" {
-            from: instance;
-            path: instrumentInstanceId;
-          }
-          "metadata.phase" {
-            from: const;
-            value: cancel_phase;
-          }
-          productId {
-            from: instance;
-            path: productId;
-          }
-          sourceAccountId {
-            from: instance;
-            path: "refs.escrowAccountId";
-          }
-        }
-        capture {
-          "[side_b_cancel_capture]": transferId;
-        }
-        key: side_b_refund;
-        operation: "internal_transfer.create";
-      }];
-      steps: [];
-    }
-    action abandon {
-      agent_description: "Walk away from a trade that never funded. Only a created trade abandons, and its escrow account must hold nothing, so there is nothing to refund. No money moves.";
-      summary: "Abandon the trade before its atomic funding batch";
-      public_action: concat("abandon", title(camel(instrument)));
-      event_name: concat(event_prefix, ".abandoned");
-      requires drained {
-        path: "refs.escrowAccountId";
-      }
-      moves: [];
-      steps: [];
-    }
-  }
-}