@supercuts-walrus/backend 0.1.1 → 0.1.3

package/README.md

@@ -77,7 +77,7 @@ bytes under that operation ID; retrying another payload with the same ID fails.
 
 ## Procurement demo
 
-For the Codex buyer with three remote Claude-backed sellers, Supabase-backed seller state, and the separate Render facilitator, follow [the remote demo guide](../docs/remote-codex-demo.md). The remote path is live-only and gives Codex a buyer role MCP server; the three seller panes use the safe `supercuts-seller-watch` event stream.
+For the Codex buyer with three remote sellers, Claude-researched and owner-reviewed artifacts, Supabase-backed seller state, and the separate Render facilitator, follow [the remote demo guide](../docs/remote-codex-demo.md). The remote path is live-only and gives Codex a buyer role MCP server; the three seller panes use the safe `supercuts-seller-watch` event stream.
 
 `supercuts-demo` is the operator entry point:
 
@@ -116,9 +116,11 @@ For a Claude-agent recording, export `CLAUDE_API_KEY` or provide
 `live --claude-key-file <owner-only-file>`; a repository `.env` file is not
 loaded automatically. Validate the credential against Anthropic before starting
 a funded take.
-The live path calls Claude for bounded buyer and seller decisions and records
-only the model, action, and token counts. The backend still enforces capability,
-amount, rail, and agreement bindings. Validate that recording with
+The recorded workflow can call Claude for bounded buyer decisions and records
+only the model, action, and token counts. Hosted seller price and agreement
+decisions are deterministic after backend validation; Claude web research runs
+before provisioning so model availability cannot interrupt a paid request. The
+backend still enforces capability, amount, rail, and agreement bindings. Validate that recording with
 `supercuts-demo check --require-claude`; an earlier funded run without these
 agent-decision events does not satisfy that gate.
 
@@ -185,7 +187,28 @@ signer, pool notes, Walrus and Walrus Memory configuration. A missing file
 returns `DEAL_SELLERS_NOT_CONFIGURED`. An owner-only `deal-ports.mjs` exporting
 `createDealPorts(app, mandate)` remains available as an advanced override.
 
-The seller service is `supercuts-seller-live <seller-home> <config.json>`.
+Create a seller home with `supercuts onboard seller --home <seller-home>` or
+its noninteractive `--config <owner-only-setup.json>` form. It generates a
+fresh seller signer by default, writes a seller MCP stanza, and explicitly
+reports that the seller should not receive faucet funds. The seller service is
+`supercuts-seller-live <seller-home> <config.json>`.
+Use `supercuts seller scaffold` to generate the offer spec, replaceable handler,
+future expiry, environment-based facilitator config, and exact next commands.
+The npm tarball includes pinned metadata for x402-only sellers; shielded sellers
+still install the proof artifacts required for recovery and exits.
+
+Research sellers can create a source-backed draft before packaging:
+
+```sh
+CLAUDE_API_KEY=... supercuts seller research --kind market-brief \
+  --topic "Current Sui ecosystem market structure and risks" \
+  --output <owner-only-draft.json>
+```
+
+The command uses Anthropic web search, rejects citations absent from the search
+evidence, and writes a mode-0600 draft marked `draft-needs-owner-review`.
+Optional `--allowed-domains` constrains sources. It never publishes or changes
+live seller state; an owner must review and approve the immutable bytes first.
 Register each capability first with
 `supercuts-seller-register <seller-home> <spec.json> <registration.json>`.
 The spec contains `capabilityId`, `capability`, `description`, `inputSchema`,

package/config/phase1.testnet.json

@@ -0,0 +1,20 @@
+{
+  "network": "testnet",
+  "sender": "0x66fdfe84ff521627c93910c93ec0bc26934ee1fef3a1a0a5ce14b7dc4567ec00",
+  "coinType": "0x2::sui::SUI",
+  "coinTypeHash": "be4507e04f555448ca05c0c9f8345c5ea9f3e40e8616a20f5d5c18b40ef399eb",
+  "packageId": "0x32d104c1ab422d497df4ae3a6861258694949c86428f886ca338e07bd055cf76",
+  "poolId": "0x8fd22140c906495bb5334a497dcdd9112479c638e21c5df4b4cfb66f633a106b",
+  "poolCreateTransaction": "BnzMqokgQVWwSkRYCCrMTyWwHN6HVdDKWwVDJXTZqC6b",
+  "deploymentCheckpoint": "401762744",
+  "deploymentDomain": "3082f331660eb38075e250a810a701bc4b0de2ca329eda70b2d76e3795517305",
+  "initialRoot": "2134e76ac5d21aab186c2be1dd8f84ee880a1e46eaf712f9d371b6df22191f3e",
+  "verifierVersion": 2,
+  "testOnly": true,
+  "artifactManifest": "config/proving-manifest.json",
+  "artifacts": {
+    "deposit": { "r1csSha256": "f36a1a18bf9d243e089e6ab14436e5a921d2b839d81bea95db319a4cdb80a197", "zkeySha256": "d398776a54628c390e8bf822007e47ed8fac00e92e8ea95bb17d20db517998dc", "verifyingKeySha256": "838404ff0ae3a9fc82da0856b68a11428cf3ffef335b4c6539fa1860d8e1ba26" },
+    "transfer": { "r1csSha256": "055ea2ec8f689c48e59f89fe06db6fb980dc575982214bfe60f675e8f08485c3", "zkeySha256": "6e7bcac98b8d2a78fd1811e2caadd83d0d6a301951f8cf27ac55a67006b001c2", "verifyingKeySha256": "8a6896f3f330769aa69e0dc1251a19fb69c4d6264b5729d0104df8d262e573ba" },
+    "withdraw": { "r1csSha256": "85cf1542ab2f2ece4bbd8757def48d526ba0951a832a2e0ebbf97ace2c611308", "zkeySha256": "fd303dd0dd53b9b752dac0de546dabdd03198a7a4defde5e8d6018bccd419c56", "verifyingKeySha256": "445c1982bea5e465fb0f5665023bb279637d820a9425f16a4c2f2ee7460e7e4a" }
+  }
+}

package/config/proving-manifest.json

@@ -0,0 +1,11 @@
+{
+  "version": "supercuts-pool-v2",
+  "testOnly": true,
+  "warning": "Per-circuit contributions are locally generated and unaudited; never use these keys with production assets.",
+  "powersOfTauSha256": "3f428d1a407e4704ef906960e000b03089e5e6ec29bf65b07bb5e3de005f4700",
+  "circuits": {
+    "deposit": { "r1csSha256": "f36a1a18bf9d243e089e6ab14436e5a921d2b839d81bea95db319a4cdb80a197", "zkeySha256": "d398776a54628c390e8bf822007e47ed8fac00e92e8ea95bb17d20db517998dc", "verificationKeySha256": "838404ff0ae3a9fc82da0856b68a11428cf3ffef335b4c6539fa1860d8e1ba26", "proofSha256": "9b7835852cd9ced7c02828e5c563191ac597f7175b04fa9bb01c66cc93a93e58", "publicInputsSha256": "23569e5994ddd08b555dcbcf12c735ec303e000f6e7e90c9b63667dec60b6aeb" },
+    "transfer": { "r1csSha256": "055ea2ec8f689c48e59f89fe06db6fb980dc575982214bfe60f675e8f08485c3", "zkeySha256": "6e7bcac98b8d2a78fd1811e2caadd83d0d6a301951f8cf27ac55a67006b001c2", "verificationKeySha256": "8a6896f3f330769aa69e0dc1251a19fb69c4d6264b5729d0104df8d262e573ba", "proofSha256": "ff9a902e91e7d7b64e278cc7e17c22ad3f031f350aacb43f610771adafbf3f35", "publicInputsSha256": "903861e7ee9f792a17194f96649736d4916f45605918acac78e5d40a5b8f6170" },
+    "withdraw": { "r1csSha256": "85cf1542ab2f2ece4bbd8757def48d526ba0951a832a2e0ebbf97ace2c611308", "zkeySha256": "fd303dd0dd53b9b752dac0de546dabdd03198a7a4defde5e8d6018bccd419c56", "verificationKeySha256": "445c1982bea5e465fb0f5665023bb279637d820a9425f16a4c2f2ee7460e7e4a", "proofSha256": "4746ee54c04389929aad48c0c5a0cf18985b9dd6bcd7a3b83aa717d8847973d3", "publicInputsSha256": "d18d5852ac3c636c7b081bc52d367c896c95bd5a89feacc91014afefe3dcff54" }
+  }
+}

package/dist/buyer-setup.js

@@ -14,6 +14,7 @@ import { verifySignedCapability } from "./capability.js";
 import { WalrusDealBlobs } from "./deal-wire.js";
 import { canonicalJson } from "./settlement.js";
 import { validateDirectoryOrigin } from "./seller-directory.js";
+import { TESTNET_DEFAULTS, withTestnetDefaults } from "./testnet-defaults.js";
 function ownerFile(path) {
     if ((statSync(path).mode & 0o077) !== 0)
         fail("SETUP_PERMISSIONS", `${path} must be owner-only`);
@@ -34,6 +35,9 @@ function origins(values) {
     });
 }
 function validateConfig(config) {
+    withTestnetDefaults(config);
+    if (!config.sellerOrigins?.length && !config.directoryUrl)
+        config.directoryUrl = TESTNET_DEFAULTS.directoryUrl;
     amount(config.perDealCeiling, "perDealCeiling");
     amount(config.totalBudget, "totalBudget");
     if (BigInt(config.totalBudget) < BigInt(config.perDealCeiling))
@@ -48,10 +52,10 @@ function validateConfig(config) {
         fail("SETUP_INVALID", "configure a directoryUrl or sellerOrigins");
     if (config.directoryUrl)
         origins([config.directoryUrl]);
-    for (const key of ["deploymentConfig", "tatumKeyFile", "writeGrpc", "tatumGrpc", "walrusPublisher", "walrusAggregator", "memoryConfigFile"])
+    for (const key of ["deploymentConfig", "tatumKeyFile", "writeGrpc", "tatumGrpc", "walrusPublisher", "walrusAggregator"])
         if (typeof config[key] !== "string" || !config[key])
             fail("SETUP_INVALID", `${key} is required`);
-    for (const path of [config.tatumKeyFile, config.memoryConfigFile, ...(config.suiKeyFile ? [config.suiKeyFile] : [])])
+    for (const path of [config.tatumKeyFile, ...(config.memoryConfigFile ? [config.memoryConfigFile] : []), ...(config.suiKeyFile ? [config.suiKeyFile] : [])])
         ownerFile(resolve(path));
     const deployment = JSON.parse(readFileSync(resolve(config.deploymentConfig), "utf8"));
     if (deployment.network !== "testnet" || deployment.verifierVersion !== 2)
@@ -86,22 +90,25 @@ export async function promptBuyerSetup(home) {
         fail("SETUP_INPUT_REQUIRED", "interactive setup requires a terminal; use --config with an owner-only JSON file");
     const rl = createInterface({ input: process.stdin, output: process.stderr });
     try {
-        const ask = async (label) => (await rl.question(`${label}: `)).trim();
-        const days = Number(await ask("Policy duration in days"));
+        const ask = async (label, fallback) => (await rl.question(fallback ? `${label} [${fallback}]: ` : `${label}: `)).trim() || fallback || "";
+        process.stderr.write("Press Enter to accept a bracketed default. Credentials are read from owner-only files, never typed here.\n");
+        const days = Number(await ask("Policy duration in days", "14"));
         if (!Number.isSafeInteger(days) || days < 1 || days > 365)
             fail("SETUP_INVALID", "policy duration must be 1..365 days");
         const config = {
-            deploymentConfig: await ask("Pinned Testnet deployment config path"), tatumKeyFile: await ask("Tatum key file path"),
-            writeGrpc: await ask("Sui write gRPC URL"), tatumGrpc: await ask("Tatum read gRPC URL"),
-            walrusPublisher: await ask("Walrus publisher URL"), walrusAggregator: await ask("Walrus aggregator URL"),
-            memoryConfigFile: await ask("Owner-only Walrus Memory config path"),
-            directoryUrl: await ask("Shared directory origin (blank for direct sellers)"),
+            deploymentConfig: await ask("Pinned Testnet deployment config path", "bundled"), tatumKeyFile: await ask("Owner-only Tatum API key file path"),
+            writeGrpc: await ask("Sui write gRPC URL", TESTNET_DEFAULTS.writeGrpc), tatumGrpc: await ask("Tatum read gRPC URL", TESTNET_DEFAULTS.tatumGrpc),
+            walrusPublisher: await ask("Walrus publisher URL", TESTNET_DEFAULTS.walrusPublisher), walrusAggregator: await ask("Walrus aggregator URL", TESTNET_DEFAULTS.walrusAggregator),
+            memoryConfigFile: await ask("Owner-only Walrus Memory config path (blank to skip Memory)"),
+            directoryUrl: await ask("Shared directory origin (type none for direct sellers only)", TESTNET_DEFAULTS.directoryUrl),
             sellerOrigins: (await ask("Additional seller HTTPS origins, comma separated (or blank)")).split(",").map((item) => item.trim()).filter(Boolean),
             allowedCounterparties: (await ask("Initially approved seller Sui addresses, comma separated (or blank)")).split(",").map((item) => item.trim()).filter(Boolean),
-            perDealCeiling: await ask("Maximum per deal in MIST"), totalBudget: await ask("Lifetime cumulative budget in MIST"),
+            perDealCeiling: await ask("Maximum per deal in MIST", "2000000"), totalBudget: await ask("Lifetime cumulative budget in MIST", "10000000"),
             expiresAt: Date.now() + days * 24 * 60 * 60 * 1000, allowPublicX402: (await ask("Allow public x402 when requested? yes/no")).toLowerCase() === "yes",
         };
-        if (!config.directoryUrl)
+        if (config.deploymentConfig === "bundled")
+            config.deploymentConfig = "";
+        if (!config.directoryUrl || config.directoryUrl === "none")
             delete config.directoryUrl;
         return setupBuyerConfig(home, validateConfig(config));
     }
@@ -118,13 +125,20 @@ function setupBuyerConfig(home, config) {
     if (!config.suiKeyFile)
         writeFileSync(keyPath, Ed25519Keypair.generate().getSecretKey(), { mode: 0o600, flag: "wx" });
     ownerFile(keyPath);
-    initialize(home, { role: "buyer", "deployment-config": resolve(config.deploymentConfig), "sui-key-file": keyPath, "tatum-key-file": resolve(config.tatumKeyFile), "write-grpc": config.writeGrpc, "tatum-grpc": config.tatumGrpc, "walrus-publisher": config.walrusPublisher, "walrus-aggregator": config.walrusAggregator, "memory-config-file": resolve(config.memoryConfigFile), "allow-counterparty": (config.allowedCounterparties ?? []).join(","), "max-amount": config.perDealCeiling, ...(config.rapidsnark ? { rapidsnark: resolve(config.rapidsnark) } : {}) });
+    initialize(home, { role: "buyer", "deployment-config": resolve(config.deploymentConfig), "sui-key-file": keyPath, "tatum-key-file": resolve(config.tatumKeyFile), "write-grpc": config.writeGrpc, "tatum-grpc": config.tatumGrpc, "walrus-publisher": config.walrusPublisher, "walrus-aggregator": config.walrusAggregator, ...(config.memoryConfigFile ? { "memory-config-file": resolve(config.memoryConfigFile) } : {}), "allow-counterparty": (config.allowedCounterparties ?? []).join(","), "max-amount": config.perDealCeiling, ...(config.rapidsnark ? { rapidsnark: resolve(config.rapidsnark) } : {}) });
     writePolicy(home, config);
     const session = createBuyerSession(home);
     const decoded = decodeSuiPrivateKey(readFileSync(keyPath, "utf8").trim());
     if (decoded.scheme !== "ED25519")
         fail("SETUP_INVALID", "buyer key must use ED25519");
-    return { home, address: Ed25519Keypair.fromSecretKey(decoded.secretKey).toSuiAddress(), ...session, policy: "configured" };
+    const address = Ed25519Keypair.fromSecretKey(decoded.secretKey).toSuiAddress();
+    return { home, address, ...session, policy: "configured", nextSteps: [
+            `Fund only this buyer with Testnet SUI: supercuts funding execute --home ${home} --public-payment <MIST> --shielded-payment 0 --operation-id fund-1 --request-faucet --confirm (or use https://faucet.sui.io for ${address})`,
+            ...(config.allowedCounterparties?.length ? [] : [`Review the directory, then approve a seller: supercuts policy approve-seller --home ${home} --capability-id <id>`]),
+            ...(config.memoryConfigFile ? [`Keep the Walrus Memory embedding adapter running (supercuts-embedding-adapter). An MCP agent flushes outcome memories itself; SDK-only hosts also run: supercuts-memory-worker ${home}`] : []),
+            `Check readiness: supercuts onboarding doctor --home ${home}`,
+            `Connect an agent with ${session.mcpConfig}, or call BuyerClient.executeDeal from @supercuts-walrus/sdk.`,
+        ] };
 }
 export function createBuyerSession(home) {
     if (!existsSync(join(home, "profile.json")))

package/dist/cli.js

@@ -4,19 +4,27 @@ import { addBuyerPrivacyRule, approveBuyerSeller, createBuyerSession, promptBuye
 import { onboardingDoctor } from "./onboarding-doctor.js";
 import { executeFunding, prepareFunding } from "./funding.js";
 import { packageHostedSeller } from "./seller-package.js";
+import { promptSellerSetup, setupSeller } from "./seller-setup.js";
+import { scaffoldSeller } from "./seller-scaffold.js";
+import { generateSellerResearch } from "./seller-research.js";
 const words = process.argv.slice(2);
 let command = words.shift() ?? "";
 if (["wallet", "offer", "pay", "resource", "memory", "audit", "capability", "settlement", "setup", "policy", "onboarding", "onboard", "funding", "seller"].includes(command))
     command += `.${words.shift() ?? ""}`;
 try {
     if (!command || command === "help" || command === "--help" || command === "setup.") {
-        process.stdout.write(`${JSON.stringify({ schemaVersion: "supercuts.help.v1", ok: true, commands: ["onboard buyer", "funding prepare", "funding execute", "seller package", "setup buyer", "setup renew", "setup session", "init", "doctor", "status", "wallet", "offer", "pay", "memory", "capability", "audit"], setup: "Run supercuts onboard buyer --home <private-directory> for guided live Testnet setup. Use seller package to validate and prepare an operator-assisted hosted seller bundle.", live: "Use funding prepare to calculate public gas/payment and shielded deposit requirements. Funding execute requires explicit confirmation and funds only the generated buyer address." })}\n`);
+        process.stdout.write(`${JSON.stringify({ schemaVersion: "supercuts.help.v1", ok: true, commands: ["onboard buyer", "onboard seller", "seller scaffold", "seller research", "seller package", "funding prepare", "funding execute", "setup buyer", "setup seller", "setup renew", "setup session", "init", "doctor", "status", "wallet", "offer", "pay", "memory", "memory insights", "capability", "audit"], setup: "Run supercuts onboard buyer or supercuts onboard seller with an isolated --home. Then use seller scaffold to generate a capability. Research sellers can use seller research to create a cited owner-review draft before packaging.", live: "Fund only the generated buyer address. A seller does not need faucet funds to publish or receive a capability payment." })}\n`);
         process.exit(0);
     }
     const args = parseArgs(words);
     const home = homePath(args);
     const fundingInput = { publicPayment: String(args["public-payment"] ?? "0"), shieldedPayment: String(args["shielded-payment"] ?? "0"), ...(typeof args["gas-reserve"] === "string" ? { gasReserve: args["gas-reserve"] } : {}), ...(typeof args["change-reserve"] === "string" ? { changeReserve: args["change-reserve"] } : {}) };
-    const result = command === "init" ? initialize(home, args) : command === "setup.buyer" || command === "onboard.buyer" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: typeof args.config === "string" ? setupBuyer(home, args.config) : await promptBuyerSetup(home) } : command === "setup.renew" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: renewBuyer(home, String(args.config ?? "")) } : command === "setup.session" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: createBuyerSession(home) } : command === "funding.prepare" ? { schemaVersion: "supercuts.funding.v1", ok: true, command, data: await prepareFunding(home, fundingInput) } : command === "funding.execute" ? { schemaVersion: "supercuts.funding.v1", ok: true, command, data: await executeFunding(home, { ...fundingInput, operationId: String(args["operation-id"] ?? ""), requestFaucet: args["request-faucet"] === true, confirmed: args.confirm === true }) } : command === "seller.package" ? { schemaVersion: "supercuts.seller-package.v1", ok: true, command, data: await packageHostedSeller({ home, spec: String(args.spec ?? ""), artifact: String(args.artifact ?? ""), metadata: String(args.metadata ?? ""), registration: String(args.registration ?? ""), bundle: String(args.bundle ?? ""), ...(typeof args["content-type"] === "string" ? { contentType: args["content-type"] } : {}) }) } : command === "policy.add" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: await addBuyerPrivacyRule(home, String(args["capability-id"] ?? "")) } : command === "policy.approve-seller" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: await approveBuyerSeller(home, String(args["capability-id"] ?? "")) } : command === "onboarding.doctor" ? { schemaVersion: "supercuts.onboarding.v1", ok: true, command, data: await onboardingDoctor(home, typeof args.config === "string" ? args.config : undefined) } : await (async () => { const app = new Phase3App(home); try {
+    const result = command === "init" ? initialize(home, args) : command === "setup.buyer" || command === "onboard.buyer" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: typeof args.config === "string" ? setupBuyer(home, args.config) : await promptBuyerSetup(home) } : command === "setup.seller" || command === "onboard.seller" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: typeof args.config === "string" ? setupSeller(home, args.config) : await promptSellerSetup(home) } : command === "seller.scaffold" ? { schemaVersion: "supercuts.seller-scaffold.v1", ok: true, command, data: scaffoldSeller({ ...args, home }) } : command === "seller.research" ? { schemaVersion: "supercuts.seller-research.v1", ok: true, command, data: await generateSellerResearch({ kind: String(args.kind ?? ""), topic: String(args.topic ?? ""), output: String(args.output ?? ""), ...(typeof args["context-file"] === "string" ? { contextFile: args["context-file"] } : {}), ...(typeof args["allowed-domains"] === "string" ? { allowedDomains: args["allowed-domains"] } : {}), ...(typeof args.model === "string" ? { model: args.model } : {}) }) } : command === "setup.renew" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: renewBuyer(home, String(args.config ?? "")) } : command === "setup.session" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: createBuyerSession(home) } : command === "funding.prepare" ? { schemaVersion: "supercuts.funding.v1", ok: true, command, data: await prepareFunding(home, fundingInput) } : command === "funding.execute" ? { schemaVersion: "supercuts.funding.v1", ok: true, command, data: await executeFunding(home, { ...fundingInput, operationId: String(args["operation-id"] ?? ""), requestFaucet: args["request-faucet"] === true, confirmed: args.confirm === true }) } : command === "seller.package" ? { schemaVersion: "supercuts.seller-package.v1", ok: true, command, data: await packageHostedSeller({ home, spec: String(args.spec ?? ""), artifact: String(args.artifact ?? ""), metadata: String(args.metadata ?? ""), registration: String(args.registration ?? ""), bundle: String(args.bundle ?? ""), ...(typeof args["content-type"] === "string" ? { contentType: args["content-type"] } : {}) }) } : command === "policy.add" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: await addBuyerPrivacyRule(home, String(args["capability-id"] ?? "")) } : command === "policy.approve-seller" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: await approveBuyerSeller(home, String(args["capability-id"] ?? "")) } : command === "memory.insights" ? await (async () => { const app = new Phase3App(home); try {
+        return { schemaVersion: "supercuts.memory-insights.v1", ok: true, command, data: await app.memoryInsights() };
+    }
+    finally {
+        app.close();
+    } })() : command === "onboarding.doctor" ? { schemaVersion: "supercuts.onboarding.v1", ok: true, command, data: await onboardingDoctor(home, typeof args.config === "string" ? args.config : undefined) } : await (async () => { const app = new Phase3App(home); try {
         return await app.execute(command, args);
     }
     finally {

package/dist/dashboard.js

@@ -1,6 +1,6 @@
 import { createServer } from "node:http";
 import { readDemoEvents, recordedReplay } from "./events.js";
-const html = `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Supercuts funded-run evidence</title><style>body{font:15px system-ui;margin:0;background:#0b1020;color:#eef2ff}header{position:sticky;top:0;padding:18px 24px;background:#111936;border-bottom:1px solid #334155}main{max-width:980px;margin:auto;padding:24px}.event{display:grid;grid-template-columns:9rem 10rem 1fr;gap:14px;padding:14px;border-bottom:1px solid #27334f}.mode{color:#fbbf24;font-weight:700}.complete,.allowed{color:#86efac}.failed,.rejected{color:#fca5a5}code{color:#bfdbfe;white-space:pre-wrap}</style></head><body><header><b>Supercuts</b> · <span class="mode" id="mode">loading evidence…</span></header><main id="events"></main><script>const out=document.querySelector('#events');const source=new EventSource('/events');source.onmessage=e=>{const v=JSON.parse(e.data);document.querySelector('#mode').textContent=v.mode==='live'?'LIVE FUNDED RUN':'RECORDED FUNDED RUN';const n=document.createElement('div');n.className='event';n.innerHTML='<span>#'+v.sequence+' '+v.actor+'</span><span class="'+v.status+'">'+v.stage+' · '+v.status+'</span><code></code>';n.querySelector('code').textContent=JSON.stringify(v.publicDetails,null,2);out.append(n)};</script></body></html>`;
+const html = `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Supercuts funded-run evidence</title><style>body{font:15px system-ui;margin:0;background:#0b1020;color:#eef2ff}header{position:sticky;top:0;padding:18px 24px;background:#111936;border-bottom:1px solid #334155}main{max-width:980px;margin:auto;padding:24px}.event{display:grid;grid-template-columns:9rem 10rem 1fr;gap:14px;padding:14px;border-bottom:1px solid #27334f}.mode{color:#fbbf24;font-weight:700}.complete,.allowed{color:#86efac}.failed,.rejected{color:#fca5a5}code{color:#bfdbfe;white-space:pre-wrap}#learned{margin:0 0 24px;padding:18px;border:1px solid #fbbf24;border-radius:10px;background:#1a1f3a}#learned h2{margin:0 0 6px;font-size:17px}#learned p{margin:0 0 12px;color:#fde68a;font-weight:600}table{width:100%;border-collapse:collapse;font-size:14px}th,td{text-align:left;padding:6px 8px;border-bottom:1px solid #27334f}th{color:#94a3b8;font-weight:500}.event.memory{background:#1a1f3a}</style></head><body><header><b>Supercuts</b> · <span class="mode" id="mode">loading evidence…</span></header><main><section id="learned" hidden><h2>What Supercuts learned from Walrus Memory</h2><p></p><table><thead><tr><th>Seller</th><th>Capability</th><th>Reliability</th><th>Succeeded / failed</th><th>Last outcome</th><th>Median latency</th></tr></thead><tbody></tbody></table></section><div id="events"></div></main><script>const out=document.querySelector('#events'),learned=document.querySelector('#learned');function renderLearned(d){learned.hidden=false;const w=d.withMemory||{},o=d.withoutMemory;learned.querySelector('p').textContent=d.changedSeller?'Memory changed who gets paid: '+(o?o.sellerId.slice(0,12):'no eligible seller')+' \u2192 '+String(w.sellerId).slice(0,12):(d.changedRail||d.changedRisk||d.changedMaximum)?'Memory changed how this payment settles: '+w.rail+', risk '+w.riskLevel+', max '+w.maximumAmount:'Memory confirmed the default choice';const t=learned.querySelector('tbody');t.textContent='';for(const s of d.scorecards||[]){const r=document.createElement('tr');for(const c of [String(s.counterparty).slice(0,12),s.capabilityId,Math.round(s.reliability*100)+'%',s.successes+' / '+s.failures,s.lastOutcome||'\u2014',s.medianLatencyMs!=null?(s.medianLatencyMs/1000).toFixed(1)+'s':'\u2014']){const td=document.createElement('td');td.textContent=c;r.append(td)}t.append(r)}}const source=new EventSource('/events');source.onmessage=e=>{const v=JSON.parse(e.data);document.querySelector('#mode').textContent=v.mode==='live'?'LIVE FUNDED RUN':'RECORDED FUNDED RUN';if(v.stage==='memory-influence')renderLearned(v.publicDetails);const n=document.createElement('div');n.className=v.stage.startsWith('memory')?'event memory':'event';n.innerHTML='<span>#'+v.sequence+' '+v.actor+'</span><span class="'+v.status+'">'+v.stage+' · '+v.status+'</span><code></code>';n.querySelector('code').textContent=JSON.stringify(v.publicDetails,null,2);out.append(n)};</script></body></html>`;
 export function serveEventDashboard(path, port, replay = false) {
     const server = createServer((request, response) => {
         if (request.url === "/") {

package/dist/deal-adapter.js

@@ -16,8 +16,6 @@ export async function createConfiguredDealEngine(app) {
         fail("MANDATE_COMMAND_FORBIDDEN", "owner mandate does not allow composite deal execution");
     const path = join(app.home, "deal-ports.mjs");
     if (!existsSync(path)) {
-        if (!app.store.getSecret("live:memory-config"))
-            fail("LIVE_MEMORY_CONFIG_MISSING", "live composite deals require an owner-only Walrus Memory configuration");
         return new DealEngine(new DealJournal(app.store), new LiveDealPorts(app, mandate), mandate);
     }
     if ((statSync(path).mode & 0o077) !== 0)

package/dist/deal-engine.d.ts

@@ -35,6 +35,16 @@ export interface DealOutcomeQueued {
 }
 /** A port owns transport, signing, and finality checks. It must be safe to call
  * again with the same child IDs after a process crash. */
+export interface SellerFault {
+    stage: "negotiation" | "delivery";
+    code: string;
+    paymentDigest?: string;
+}
+/**
+ * Codes the buyer runtime verified against seller-supplied evidence. Buyer-side, network, and Walrus readback
+ * errors are excluded: a readback mismatch can come from an aggregator, not the seller.
+ */
+export declare const SELLER_FAULT_CODES: Set<string>;
 export interface DealPorts {
     readBlob(blobId: string): Promise<Uint8Array>;
     discover(input: ExecuteDealInput): Promise<SignedCapabilityRegistration>;
@@ -50,6 +60,8 @@ export interface DealPorts {
         unresolved: true;
     }>;
     inventory(blobId: string): Promise<boolean>;
+    /** Optional: queue a verified seller-fault memory so later discovery demotes this seller. Best effort. */
+    rememberFailure?(input: ExecuteDealInput, plan: SettlementPlanV1, fault: SellerFault): Promise<void>;
 }
 export declare class DealEngine {
     private readonly journal;
@@ -58,5 +70,6 @@ export declare class DealEngine {
     constructor(journal: DealJournal, ports: DealPorts, mandate: AgentMandate);
     execute(input: ExecuteDealInput): Promise<DealView>;
     resume(operationId: string): Promise<DealView>;
+    private rememberSellerFault;
     private finishOutcome;
 }

package/dist/deal-engine.js

@@ -3,6 +3,11 @@ import { validateCapabilityPayload, verifySignedCapability } from "./capability.
 import { dealChildId } from "./deal.js";
 import { fail, SupercutsError } from "./errors.js";
 import { canonicalJson, validateSettlementPlan } from "./settlement.js";
+/**
+ * Codes the buyer runtime verified against seller-supplied evidence. Buyer-side, network, and Walrus readback
+ * errors are excluded: a readback mismatch can come from an aggregator, not the seller.
+ */
+export const SELLER_FAULT_CODES = new Set(["AGREEMENT_BINDING_MISMATCH", "DEAL_RESOURCE_MISMATCH", "DEAL_AGREEMENT_INVALID", "DEAL_DELIVERY_UNVERIFIED", "CAPABILITY_PAYLOAD_INVALID"]);
 const hash = (value) => createHash("sha256").update(canonicalJson(value)).digest("hex");
 export class DealEngine {
     journal;
@@ -91,20 +96,26 @@ export class DealEngine {
         let negotiation = this.journal.step(operationId, "negotiation");
         if (view.state === "planned")
             view = this.journal.advance(operationId, "planned", "negotiating");
-        if (!negotiation) {
-            const started = Date.now();
-            negotiation = await this.ports.negotiate(input, registration, plan, dealChildId(operationId, "agreement"));
-            if (!negotiation.agreementBlobId || !/^[0-9a-f]{64}$/.test(negotiation.agreementCiphertextHash) || !Array.isArray(negotiation.transcriptBlobs) || !negotiation.transcriptBlobs.length)
-                fail("DEAL_AGREEMENT_INVALID", "seller agreement or Walrus transcript evidence is incomplete");
-            this.journal.saveStep(operationId, "negotiation", { planHash: plan.planHash }, negotiation);
-            this.journal.recordTiming(operationId, "negotiation", Date.now() - started);
+        try {
+            if (!negotiation) {
+                const started = Date.now();
+                negotiation = await this.ports.negotiate(input, registration, plan, dealChildId(operationId, "agreement"));
+                if (!negotiation.agreementBlobId || !/^[0-9a-f]{64}$/.test(negotiation.agreementCiphertextHash) || !Array.isArray(negotiation.transcriptBlobs) || !negotiation.transcriptBlobs.length)
+                    fail("DEAL_AGREEMENT_INVALID", "seller agreement or Walrus transcript evidence is incomplete");
+                this.journal.saveStep(operationId, "negotiation", { planHash: plan.planHash }, negotiation);
+                this.journal.recordTiming(operationId, "negotiation", Date.now() - started);
+            }
+            const agreementReadStarted = Date.now();
+            for (const item of [...negotiation.transcriptBlobs, { blobId: negotiation.agreementBlobId, ciphertextHash: negotiation.agreementCiphertextHash }]) {
+                if (!item.blobId || !/^[0-9a-f]{64}$/.test(item.ciphertextHash) || createHash("sha256").update(await this.ports.readBlob(item.blobId)).digest("hex") !== item.ciphertextHash)
+                    fail("WALRUS_BLOB_MISMATCH", "encrypted negotiation or agreement differs from Walrus readback");
+            }
+            this.journal.recordTiming(operationId, "agreement_readback", Date.now() - agreementReadStarted);
         }
-        const agreementReadStarted = Date.now();
-        for (const item of [...negotiation.transcriptBlobs, { blobId: negotiation.agreementBlobId, ciphertextHash: negotiation.agreementCiphertextHash }]) {
-            if (!item.blobId || !/^[0-9a-f]{64}$/.test(item.ciphertextHash) || createHash("sha256").update(await this.ports.readBlob(item.blobId)).digest("hex") !== item.ciphertextHash)
-                fail("WALRUS_BLOB_MISMATCH", "encrypted negotiation or agreement differs from Walrus readback");
+        catch (error) {
+            await this.rememberSellerFault(input, plan, "negotiation", undefined, error);
+            throw error;
         }
-        this.journal.recordTiming(operationId, "agreement_readback", Date.now() - agreementReadStarted);
         if (view.state === "negotiating")
             view = this.journal.advance(operationId, "negotiating", "agreed");
         this.journal.recordBlob(operationId, "agreement", negotiation.agreementCiphertextHash, negotiation.agreementBlobId);
@@ -139,29 +150,35 @@ export class DealEngine {
         let artifact = this.journal.step(operationId, "delivery");
         if (view.state === "paid")
             view = this.journal.advance(operationId, "paid", "delivery_pending");
-        if (!artifact) {
-            const started = Date.now();
-            const candidate = await this.ports.deliver(input, plan, negotiation, payment, dealChildId(operationId, "delivery"));
-            if ("pending" in candidate)
-                return this.journal.get(operationId);
-            if (!candidate.blobId || !/^[0-9a-f]{64}$/.test(candidate.ciphertextHash) || !/^[0-9a-f]{64}$/.test(candidate.artifactSha256))
-                fail("DEAL_DELIVERY_UNVERIFIED", "seller delivery evidence is incomplete");
-            if (typeof candidate.artifactBase64 !== "string" || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(candidate.artifactBase64))
-                fail("DEAL_DELIVERY_UNVERIFIED", "seller artifact encoding is invalid");
-            const artifactBytes = Buffer.from(candidate.artifactBase64, "base64");
-            if (!artifactBytes.length || artifactBytes.length > 512 * 1024 || createHash("sha256").update(artifactBytes).digest("hex") !== candidate.artifactSha256)
-                fail("DEAL_DELIVERY_UNVERIFIED", "seller artifact hash or size is invalid");
-            validateCapabilityPayload(registration.manifest, "output", candidate.metadata);
-            artifact = candidate;
-            this.journal.saveStep(operationId, "delivery", { paymentDigest: payment.transactionDigest }, artifact);
-            this.journal.recordTiming(operationId, "delivery", Date.now() - started);
+        try {
+            if (!artifact) {
+                const started = Date.now();
+                const candidate = await this.ports.deliver(input, plan, negotiation, payment, dealChildId(operationId, "delivery"));
+                if ("pending" in candidate)
+                    return this.journal.get(operationId);
+                if (!candidate.blobId || !/^[0-9a-f]{64}$/.test(candidate.ciphertextHash) || !/^[0-9a-f]{64}$/.test(candidate.artifactSha256))
+                    fail("DEAL_DELIVERY_UNVERIFIED", "seller delivery evidence is incomplete");
+                if (typeof candidate.artifactBase64 !== "string" || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(candidate.artifactBase64))
+                    fail("DEAL_DELIVERY_UNVERIFIED", "seller artifact encoding is invalid");
+                const artifactBytes = Buffer.from(candidate.artifactBase64, "base64");
+                if (!artifactBytes.length || artifactBytes.length > 512 * 1024 || createHash("sha256").update(artifactBytes).digest("hex") !== candidate.artifactSha256)
+                    fail("DEAL_DELIVERY_UNVERIFIED", "seller artifact hash or size is invalid");
+                validateCapabilityPayload(registration.manifest, "output", candidate.metadata);
+                artifact = candidate;
+                this.journal.saveStep(operationId, "delivery", { paymentDigest: payment.transactionDigest }, artifact);
+                this.journal.recordTiming(operationId, "delivery", Date.now() - started);
+            }
+            if (createHash("sha256").update(Buffer.from(artifact.artifactBase64, "base64")).digest("hex") !== artifact.artifactSha256)
+                fail("DEAL_DELIVERY_UNVERIFIED", "saved artifact hash differs from delivery evidence");
+            const deliveryReadStarted = Date.now();
+            if (createHash("sha256").update(await this.ports.readBlob(artifact.blobId)).digest("hex") !== artifact.ciphertextHash)
+                fail("WALRUS_BLOB_MISMATCH", "encrypted delivery differs from Walrus readback");
+            this.journal.recordTiming(operationId, "delivery_readback", Date.now() - deliveryReadStarted);
+        }
+        catch (error) {
+            await this.rememberSellerFault(input, plan, "delivery", payment.transactionDigest, error);
+            throw error;
         }
-        if (createHash("sha256").update(Buffer.from(artifact.artifactBase64, "base64")).digest("hex") !== artifact.artifactSha256)
-            fail("DEAL_DELIVERY_UNVERIFIED", "saved artifact hash differs from delivery evidence");
-        const deliveryReadStarted = Date.now();
-        if (createHash("sha256").update(await this.ports.readBlob(artifact.blobId)).digest("hex") !== artifact.ciphertextHash)
-            fail("WALRUS_BLOB_MISMATCH", "encrypted delivery differs from Walrus readback");
-        this.journal.recordTiming(operationId, "delivery_readback", Date.now() - deliveryReadStarted);
         this.journal.recordBlob(operationId, "delivery", artifact.ciphertextHash, artifact.blobId);
         if (view.state === "delivery_pending")
             view = this.journal.advance(operationId, "delivery_pending", "delivered");
@@ -169,6 +186,14 @@ export class DealEngine {
             view = this.journal.advance(operationId, "delivered", "outcome_pending");
         return this.finishOutcome(operationId, input);
     }
+    async rememberSellerFault(input, plan, stage, paymentDigest, error) {
+        if (!(error instanceof SupercutsError) || !SELLER_FAULT_CODES.has(error.code) || !this.ports.rememberFailure)
+            return;
+        try {
+            await this.ports.rememberFailure(input, plan, { stage, code: error.code, ...(paymentDigest ? { paymentDigest } : {}) });
+        }
+        catch { /* the original seller fault stays the reported error */ }
+    }
     async finishOutcome(operationId, input) {
         const view = this.journal.get(operationId);
         if (view.evidence.outcomeMemory === "indexed")
@@ -179,10 +204,10 @@ export class DealEngine {
         if (existing?.blobId) {
             const indexed = await this.ports.inventory(existing.blobId);
             this.journal.recordOutcome(operationId, existing.payloadHash, existing.blobId, indexed);
-            return indexed ? this.journal.advance(operationId, "outcome_pending", "complete") : this.journal.get(operationId);
+            return this.journal.advance(operationId, "outcome_pending", "complete");
         }
         if (existing)
-            return view;
+            return this.journal.advance(operationId, "outcome_pending", "complete");
         const plan = this.journal.step(operationId, "planning") ?? fail("DEAL_PLAN_MISSING", "saved deal plan is missing");
         const payment = this.journal.step(operationId, "payment") ?? fail("DEAL_PAYMENT_UNVERIFIED", "saved deal payment is missing");
         const artifact = this.journal.step(operationId, "delivery") ?? fail("DEAL_DELIVERY_UNVERIFIED", "saved deal delivery is missing");
@@ -193,11 +218,11 @@ export class DealEngine {
             this.journal.recordTiming(operationId, "outcome_queue", Date.now() - started);
             if ("unresolved" in candidate) {
                 this.journal.setOutcomeUnresolved(operationId);
-                return this.journal.get(operationId);
+                return this.journal.advance(operationId, "outcome_pending", "complete");
             }
             if ("queued" in candidate) {
                 this.journal.queueOutcome(operationId, candidate.payloadHash);
-                return this.journal.get(operationId);
+                return this.journal.advance(operationId, "outcome_pending", "complete");
             }
             if (!candidate.blobId || !/^[0-9a-f]{64}$/.test(candidate.payloadHash))
                 fail("DEAL_MEMORY_INVALID", "outcome memory is incomplete");
@@ -206,6 +231,6 @@ export class DealEngine {
         }
         const indexed = await this.ports.inventory(outcome.blobId);
         this.journal.recordOutcome(operationId, outcome.payloadHash, outcome.blobId, indexed);
-        return indexed ? this.journal.advance(operationId, "outcome_pending", "complete") : this.journal.get(operationId);
+        return this.journal.advance(operationId, "outcome_pending", "complete");
     }
 }

package/dist/deal.d.ts

@@ -43,6 +43,41 @@ export interface DealEvidenceView {
     inventory: "pending" | "indexed" | "missing" | "unresolved";
     paymentFinalized: boolean;
     paymentDigest?: string;
+    /** What Walrus Memory changed about this payment versus the same mandate with no memory. */
+    memoryInfluence?: {
+        changedSeller: boolean;
+        changedRail: boolean;
+        changedRisk: boolean;
+        changedMaximum: boolean;
+        withoutMemory?: {
+            sellerId: string;
+            capabilityId: string;
+            rail: string;
+            riskLevel: string;
+            maximumAmount: string;
+        };
+        withMemory: {
+            sellerId: string;
+            capabilityId: string;
+            rail: string;
+            riskLevel: string;
+            maximumAmount: string;
+        };
+        citedBlobIds: string[];
+    };
+    /** Learned seller scorecards used for discovery; counts and blob IDs only, never memory plaintext. */
+    memoryRanking?: Array<{
+        capabilityId: string;
+        counterparty: string;
+        reliability: number;
+        observations: number;
+        successes: number;
+        failures: number;
+        unresolved: number;
+        lastOutcome?: string;
+        medianLatencyMs?: number;
+        priceMinimum: string;
+    }>;
 }
 export interface DealDelivery {
     dealId: string;

package/dist/deal.js

@@ -176,7 +176,13 @@ export class DealJournal {
         const blobs = this.store.db.prepare("SELECT kind,blob_id,status FROM deal_blobs WHERE operation_id=?").all(row.operation_id);
         const memory = this.store.db.prepare("SELECT blob_id,status FROM deal_memory_outbox WHERE operation_id=? AND event_kind='outcome'").get(row.operation_id);
         const transcript = this.step(row.operation_id, "negotiation");
-        return { version: "supercuts.deal-evidence.v1", dealId, transcriptBlobIds: transcript?.transcriptBlobs?.map((item) => item.blobId) ?? [], ...(blobs.find((item) => item.kind === "agreement")?.blob_id ? { agreementBlobId: blobs.find((item) => item.kind === "agreement").blob_id } : {}), ...(blobs.find((item) => item.kind === "delivery")?.blob_id ? { deliveryBlobId: blobs.find((item) => item.kind === "delivery").blob_id } : {}), ...(memory?.blob_id ? { outcomeMemoryBlobId: memory.blob_id } : {}), ciphertextReadback: blobs.some((item) => item.status === "unresolved") ? "unresolved" : ["agreement", "delivery"].every((kind) => blobs.some((item) => item.kind === kind && item.status === "verified")) ? "verified" : "pending", inventory: memory?.status === "indexed" ? "indexed" : memory?.status === "unresolved" ? "unresolved" : "pending", paymentFinalized: view.evidence.payment === "finalized", ...(view.paymentDigest ? { paymentDigest: view.paymentDigest } : {}) };
+        const hasRecords = Boolean(this.store.db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='app_records'").get());
+        const record = (scope, id) => { if (!hasRecords)
+            return undefined; const found = this.store.db.prepare("SELECT value FROM app_records WHERE scope=? AND id=?").get(scope, id); return found ? JSON.parse(found.value) : undefined; };
+        const influence = record("memory-influence", `deal:${row.operation_id}`);
+        const ranking = record("deal-ranking", row.operation_id);
+        const memoryRanking = ranking?.scorecards.map(({ capabilityId, counterparty, reliability, observations, successes, failures, unresolved, lastOutcome, medianLatencyMs, priceMinimum }) => ({ capabilityId, counterparty, reliability, observations, successes, failures, unresolved, ...(lastOutcome ? { lastOutcome } : {}), ...(medianLatencyMs !== undefined ? { medianLatencyMs } : {}), priceMinimum }));
+        return { version: "supercuts.deal-evidence.v1", dealId, transcriptBlobIds: transcript?.transcriptBlobs?.map((item) => item.blobId) ?? [], ...(blobs.find((item) => item.kind === "agreement")?.blob_id ? { agreementBlobId: blobs.find((item) => item.kind === "agreement").blob_id } : {}), ...(blobs.find((item) => item.kind === "delivery")?.blob_id ? { deliveryBlobId: blobs.find((item) => item.kind === "delivery").blob_id } : {}), ...(memory?.blob_id ? { outcomeMemoryBlobId: memory.blob_id } : {}), ciphertextReadback: blobs.some((item) => item.status === "unresolved") ? "unresolved" : ["agreement", "delivery"].every((kind) => blobs.some((item) => item.kind === kind && item.status === "verified")) ? "verified" : "pending", inventory: memory?.status === "indexed" ? "indexed" : memory?.status === "unresolved" ? "unresolved" : "pending", paymentFinalized: view.evidence.payment === "finalized", ...(view.paymentDigest ? { paymentDigest: view.paymentDigest } : {}), ...(influence ? { memoryInfluence: influence } : {}), ...(memoryRanking ? { memoryRanking } : {}) };
     }
     delivery(dealId) {
         const row = this.store.db.prepare("SELECT operation_id FROM deal_operations WHERE deal_id=?").get(dealId);
@@ -213,8 +219,8 @@ export class DealJournal {
                 fail("DEAL_PAYMENT_UNVERIFIED", "confirmed payment evidence is required");
             if (next === "delivered" && !(this.store.db.prepare("SELECT 1 FROM deal_blobs WHERE operation_id=? AND kind='delivery' AND status='verified'").get(operationId)))
                 fail("DEAL_DELIVERY_UNVERIFIED", "verified delivery evidence is required");
-            if (next === "complete" && !(this.store.db.prepare("SELECT 1 FROM deal_memory_outbox WHERE operation_id=? AND event_kind='outcome' AND status='indexed'").get(operationId)))
-                fail("DEAL_MEMORY_UNVERIFIED", "indexed outcome memory is required");
+            if (next === "complete" && (this.get(operationId).evidence.payment !== "finalized" || this.get(operationId).evidence.delivery !== "verified"))
+                fail("DEAL_DELIVERY_UNVERIFIED", "finalized payment and verified delivery are required before deal completion");
             this.store.db.prepare("UPDATE deal_operations SET state=?,rail=COALESCE(?,rail),plan_hash=COALESCE(?,plan_hash),updated_at=? WHERE operation_id=?")
                 .run(next, result?.rail ?? null, result?.planHash ?? null, Date.now(), operationId);
             this.store.db.exec("COMMIT");

package/dist/embedding-adapter.d.ts

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+/**
+ * OpenAI-compatible embedding adapter for local models (`supercuts-embedding-adapter`).
+ *
+ * Walrus Mainnet Memory indexes 1536-dimensional embeddings. This loopback proxy forwards requests to a
+ * local OpenAI-compatible endpoint (Ollama by default) and zero-pads shorter vectors to 1536 dimensions.
+ * Zero-padding preserves cosine similarity and Euclidean distance as long as every write and recall uses
+ * this same adapter and upstream model. Memory plaintext only reaches the configured upstream.
+ */
+import { type Server } from "node:http";
+export declare const TARGET_DIMENSIONS = 1536;
+export declare function padEmbedding(embedding: unknown): number[];
+interface EmbeddingPayload {
+    data: Array<{
+        embedding: unknown;
+    } & Record<string, unknown>>;
+}
+export declare function transformEmbeddingResponse(payload: unknown): EmbeddingPayload;
+export interface EmbeddingAdapterOptions {
+    upstreamBaseUrl: string;
+    upstreamModel: string;
+    upstreamApiKey?: string;
+    fetchImpl?: typeof fetch;
+}
+export declare function createEmbeddingAdapter({ fetchImpl, upstreamBaseUrl, upstreamApiKey, upstreamModel, }: EmbeddingAdapterOptions): Server;
+export {};