@supercuts-walrus/backend 0.1.2 → 0.1.3

package/dist/buyer-setup.js

@@ -14,6 +14,7 @@ import { verifySignedCapability } from "./capability.js";
 import { WalrusDealBlobs } from "./deal-wire.js";
 import { canonicalJson } from "./settlement.js";
 import { validateDirectoryOrigin } from "./seller-directory.js";
+import { TESTNET_DEFAULTS, withTestnetDefaults } from "./testnet-defaults.js";
 function ownerFile(path) {
     if ((statSync(path).mode & 0o077) !== 0)
         fail("SETUP_PERMISSIONS", `${path} must be owner-only`);
@@ -34,6 +35,9 @@ function origins(values) {
     });
 }
 function validateConfig(config) {
+    withTestnetDefaults(config);
+    if (!config.sellerOrigins?.length && !config.directoryUrl)
+        config.directoryUrl = TESTNET_DEFAULTS.directoryUrl;
     amount(config.perDealCeiling, "perDealCeiling");
     amount(config.totalBudget, "totalBudget");
     if (BigInt(config.totalBudget) < BigInt(config.perDealCeiling))
@@ -86,22 +90,25 @@ export async function promptBuyerSetup(home) {
         fail("SETUP_INPUT_REQUIRED", "interactive setup requires a terminal; use --config with an owner-only JSON file");
     const rl = createInterface({ input: process.stdin, output: process.stderr });
     try {
-        const ask = async (label) => (await rl.question(`${label}: `)).trim();
-        const days = Number(await ask("Policy duration in days"));
+        const ask = async (label, fallback) => (await rl.question(fallback ? `${label} [${fallback}]: ` : `${label}: `)).trim() || fallback || "";
+        process.stderr.write("Press Enter to accept a bracketed default. Credentials are read from owner-only files, never typed here.\n");
+        const days = Number(await ask("Policy duration in days", "14"));
         if (!Number.isSafeInteger(days) || days < 1 || days > 365)
             fail("SETUP_INVALID", "policy duration must be 1..365 days");
         const config = {
-            deploymentConfig: await ask("Pinned Testnet deployment config path"), tatumKeyFile: await ask("Tatum key file path"),
-            writeGrpc: await ask("Sui write gRPC URL"), tatumGrpc: await ask("Tatum read gRPC URL"),
-            walrusPublisher: await ask("Walrus publisher URL"), walrusAggregator: await ask("Walrus aggregator URL"),
+            deploymentConfig: await ask("Pinned Testnet deployment config path", "bundled"), tatumKeyFile: await ask("Owner-only Tatum API key file path"),
+            writeGrpc: await ask("Sui write gRPC URL", TESTNET_DEFAULTS.writeGrpc), tatumGrpc: await ask("Tatum read gRPC URL", TESTNET_DEFAULTS.tatumGrpc),
+            walrusPublisher: await ask("Walrus publisher URL", TESTNET_DEFAULTS.walrusPublisher), walrusAggregator: await ask("Walrus aggregator URL", TESTNET_DEFAULTS.walrusAggregator),
             memoryConfigFile: await ask("Owner-only Walrus Memory config path (blank to skip Memory)"),
-            directoryUrl: await ask("Shared directory origin (blank for direct sellers)"),
+            directoryUrl: await ask("Shared directory origin (type none for direct sellers only)", TESTNET_DEFAULTS.directoryUrl),
             sellerOrigins: (await ask("Additional seller HTTPS origins, comma separated (or blank)")).split(",").map((item) => item.trim()).filter(Boolean),
             allowedCounterparties: (await ask("Initially approved seller Sui addresses, comma separated (or blank)")).split(",").map((item) => item.trim()).filter(Boolean),
-            perDealCeiling: await ask("Maximum per deal in MIST"), totalBudget: await ask("Lifetime cumulative budget in MIST"),
+            perDealCeiling: await ask("Maximum per deal in MIST", "2000000"), totalBudget: await ask("Lifetime cumulative budget in MIST", "10000000"),
             expiresAt: Date.now() + days * 24 * 60 * 60 * 1000, allowPublicX402: (await ask("Allow public x402 when requested? yes/no")).toLowerCase() === "yes",
         };
-        if (!config.directoryUrl)
+        if (config.deploymentConfig === "bundled")
+            config.deploymentConfig = "";
+        if (!config.directoryUrl || config.directoryUrl === "none")
             delete config.directoryUrl;
         return setupBuyerConfig(home, validateConfig(config));
     }
@@ -124,7 +131,14 @@ function setupBuyerConfig(home, config) {
     const decoded = decodeSuiPrivateKey(readFileSync(keyPath, "utf8").trim());
     if (decoded.scheme !== "ED25519")
         fail("SETUP_INVALID", "buyer key must use ED25519");
-    return { home, address: Ed25519Keypair.fromSecretKey(decoded.secretKey).toSuiAddress(), ...session, policy: "configured" };
+    const address = Ed25519Keypair.fromSecretKey(decoded.secretKey).toSuiAddress();
+    return { home, address, ...session, policy: "configured", nextSteps: [
+            `Fund only this buyer with Testnet SUI: supercuts funding execute --home ${home} --public-payment <MIST> --shielded-payment 0 --operation-id fund-1 --request-faucet --confirm (or use https://faucet.sui.io for ${address})`,
+            ...(config.allowedCounterparties?.length ? [] : [`Review the directory, then approve a seller: supercuts policy approve-seller --home ${home} --capability-id <id>`]),
+            ...(config.memoryConfigFile ? [`Keep the Walrus Memory embedding adapter running (supercuts-embedding-adapter). An MCP agent flushes outcome memories itself; SDK-only hosts also run: supercuts-memory-worker ${home}`] : []),
+            `Check readiness: supercuts onboarding doctor --home ${home}`,
+            `Connect an agent with ${session.mcpConfig}, or call BuyerClient.executeDeal from @supercuts-walrus/sdk.`,
+        ] };
 }
 export function createBuyerSession(home) {
     if (!existsSync(join(home, "profile.json")))

package/dist/cli.js

@@ -13,13 +13,18 @@ if (["wallet", "offer", "pay", "resource", "memory", "audit", "capability", "set
     command += `.${words.shift() ?? ""}`;
 try {
     if (!command || command === "help" || command === "--help" || command === "setup.") {
-        process.stdout.write(`${JSON.stringify({ schemaVersion: "supercuts.help.v1", ok: true, commands: ["onboard buyer", "onboard seller", "seller scaffold", "seller research", "seller package", "funding prepare", "funding execute", "setup buyer", "setup seller", "setup renew", "setup session", "init", "doctor", "status", "wallet", "offer", "pay", "memory", "capability", "audit"], setup: "Run supercuts onboard buyer or supercuts onboard seller with an isolated --home. Then use seller scaffold to generate a capability. Research sellers can use seller research to create a cited owner-review draft before packaging.", live: "Fund only the generated buyer address. A seller does not need faucet funds to publish or receive a capability payment." })}\n`);
+        process.stdout.write(`${JSON.stringify({ schemaVersion: "supercuts.help.v1", ok: true, commands: ["onboard buyer", "onboard seller", "seller scaffold", "seller research", "seller package", "funding prepare", "funding execute", "setup buyer", "setup seller", "setup renew", "setup session", "init", "doctor", "status", "wallet", "offer", "pay", "memory", "memory insights", "capability", "audit"], setup: "Run supercuts onboard buyer or supercuts onboard seller with an isolated --home. Then use seller scaffold to generate a capability. Research sellers can use seller research to create a cited owner-review draft before packaging.", live: "Fund only the generated buyer address. A seller does not need faucet funds to publish or receive a capability payment." })}\n`);
         process.exit(0);
     }
     const args = parseArgs(words);
     const home = homePath(args);
     const fundingInput = { publicPayment: String(args["public-payment"] ?? "0"), shieldedPayment: String(args["shielded-payment"] ?? "0"), ...(typeof args["gas-reserve"] === "string" ? { gasReserve: args["gas-reserve"] } : {}), ...(typeof args["change-reserve"] === "string" ? { changeReserve: args["change-reserve"] } : {}) };
-    const result = command === "init" ? initialize(home, args) : command === "setup.buyer" || command === "onboard.buyer" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: typeof args.config === "string" ? setupBuyer(home, args.config) : await promptBuyerSetup(home) } : command === "setup.seller" || command === "onboard.seller" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: typeof args.config === "string" ? setupSeller(home, args.config) : await promptSellerSetup(home) } : command === "seller.scaffold" ? { schemaVersion: "supercuts.seller-scaffold.v1", ok: true, command, data: scaffoldSeller({ ...args, home }) } : command === "seller.research" ? { schemaVersion: "supercuts.seller-research.v1", ok: true, command, data: await generateSellerResearch({ kind: String(args.kind ?? ""), topic: String(args.topic ?? ""), output: String(args.output ?? ""), ...(typeof args["context-file"] === "string" ? { contextFile: args["context-file"] } : {}), ...(typeof args["allowed-domains"] === "string" ? { allowedDomains: args["allowed-domains"] } : {}), ...(typeof args.model === "string" ? { model: args.model } : {}) }) } : command === "setup.renew" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: renewBuyer(home, String(args.config ?? "")) } : command === "setup.session" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: createBuyerSession(home) } : command === "funding.prepare" ? { schemaVersion: "supercuts.funding.v1", ok: true, command, data: await prepareFunding(home, fundingInput) } : command === "funding.execute" ? { schemaVersion: "supercuts.funding.v1", ok: true, command, data: await executeFunding(home, { ...fundingInput, operationId: String(args["operation-id"] ?? ""), requestFaucet: args["request-faucet"] === true, confirmed: args.confirm === true }) } : command === "seller.package" ? { schemaVersion: "supercuts.seller-package.v1", ok: true, command, data: await packageHostedSeller({ home, spec: String(args.spec ?? ""), artifact: String(args.artifact ?? ""), metadata: String(args.metadata ?? ""), registration: String(args.registration ?? ""), bundle: String(args.bundle ?? ""), ...(typeof args["content-type"] === "string" ? { contentType: args["content-type"] } : {}) }) } : command === "policy.add" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: await addBuyerPrivacyRule(home, String(args["capability-id"] ?? "")) } : command === "policy.approve-seller" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: await approveBuyerSeller(home, String(args["capability-id"] ?? "")) } : command === "onboarding.doctor" ? { schemaVersion: "supercuts.onboarding.v1", ok: true, command, data: await onboardingDoctor(home, typeof args.config === "string" ? args.config : undefined) } : await (async () => { const app = new Phase3App(home); try {
+    const result = command === "init" ? initialize(home, args) : command === "setup.buyer" || command === "onboard.buyer" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: typeof args.config === "string" ? setupBuyer(home, args.config) : await promptBuyerSetup(home) } : command === "setup.seller" || command === "onboard.seller" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: typeof args.config === "string" ? setupSeller(home, args.config) : await promptSellerSetup(home) } : command === "seller.scaffold" ? { schemaVersion: "supercuts.seller-scaffold.v1", ok: true, command, data: scaffoldSeller({ ...args, home }) } : command === "seller.research" ? { schemaVersion: "supercuts.seller-research.v1", ok: true, command, data: await generateSellerResearch({ kind: String(args.kind ?? ""), topic: String(args.topic ?? ""), output: String(args.output ?? ""), ...(typeof args["context-file"] === "string" ? { contextFile: args["context-file"] } : {}), ...(typeof args["allowed-domains"] === "string" ? { allowedDomains: args["allowed-domains"] } : {}), ...(typeof args.model === "string" ? { model: args.model } : {}) }) } : command === "setup.renew" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: renewBuyer(home, String(args.config ?? "")) } : command === "setup.session" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: createBuyerSession(home) } : command === "funding.prepare" ? { schemaVersion: "supercuts.funding.v1", ok: true, command, data: await prepareFunding(home, fundingInput) } : command === "funding.execute" ? { schemaVersion: "supercuts.funding.v1", ok: true, command, data: await executeFunding(home, { ...fundingInput, operationId: String(args["operation-id"] ?? ""), requestFaucet: args["request-faucet"] === true, confirmed: args.confirm === true }) } : command === "seller.package" ? { schemaVersion: "supercuts.seller-package.v1", ok: true, command, data: await packageHostedSeller({ home, spec: String(args.spec ?? ""), artifact: String(args.artifact ?? ""), metadata: String(args.metadata ?? ""), registration: String(args.registration ?? ""), bundle: String(args.bundle ?? ""), ...(typeof args["content-type"] === "string" ? { contentType: args["content-type"] } : {}) }) } : command === "policy.add" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: await addBuyerPrivacyRule(home, String(args["capability-id"] ?? "")) } : command === "policy.approve-seller" ? { schemaVersion: "supercuts.setup.v1", ok: true, command, data: await approveBuyerSeller(home, String(args["capability-id"] ?? "")) } : command === "memory.insights" ? await (async () => { const app = new Phase3App(home); try {
+        return { schemaVersion: "supercuts.memory-insights.v1", ok: true, command, data: await app.memoryInsights() };
+    }
+    finally {
+        app.close();
+    } })() : command === "onboarding.doctor" ? { schemaVersion: "supercuts.onboarding.v1", ok: true, command, data: await onboardingDoctor(home, typeof args.config === "string" ? args.config : undefined) } : await (async () => { const app = new Phase3App(home); try {
         return await app.execute(command, args);
     }
     finally {

package/dist/dashboard.js

@@ -1,6 +1,6 @@
 import { createServer } from "node:http";
 import { readDemoEvents, recordedReplay } from "./events.js";
-const html = `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Supercuts funded-run evidence</title><style>body{font:15px system-ui;margin:0;background:#0b1020;color:#eef2ff}header{position:sticky;top:0;padding:18px 24px;background:#111936;border-bottom:1px solid #334155}main{max-width:980px;margin:auto;padding:24px}.event{display:grid;grid-template-columns:9rem 10rem 1fr;gap:14px;padding:14px;border-bottom:1px solid #27334f}.mode{color:#fbbf24;font-weight:700}.complete,.allowed{color:#86efac}.failed,.rejected{color:#fca5a5}code{color:#bfdbfe;white-space:pre-wrap}</style></head><body><header><b>Supercuts</b> · <span class="mode" id="mode">loading evidence…</span></header><main id="events"></main><script>const out=document.querySelector('#events');const source=new EventSource('/events');source.onmessage=e=>{const v=JSON.parse(e.data);document.querySelector('#mode').textContent=v.mode==='live'?'LIVE FUNDED RUN':'RECORDED FUNDED RUN';const n=document.createElement('div');n.className='event';n.innerHTML='<span>#'+v.sequence+' '+v.actor+'</span><span class="'+v.status+'">'+v.stage+' · '+v.status+'</span><code></code>';n.querySelector('code').textContent=JSON.stringify(v.publicDetails,null,2);out.append(n)};</script></body></html>`;
+const html = `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Supercuts funded-run evidence</title><style>body{font:15px system-ui;margin:0;background:#0b1020;color:#eef2ff}header{position:sticky;top:0;padding:18px 24px;background:#111936;border-bottom:1px solid #334155}main{max-width:980px;margin:auto;padding:24px}.event{display:grid;grid-template-columns:9rem 10rem 1fr;gap:14px;padding:14px;border-bottom:1px solid #27334f}.mode{color:#fbbf24;font-weight:700}.complete,.allowed{color:#86efac}.failed,.rejected{color:#fca5a5}code{color:#bfdbfe;white-space:pre-wrap}#learned{margin:0 0 24px;padding:18px;border:1px solid #fbbf24;border-radius:10px;background:#1a1f3a}#learned h2{margin:0 0 6px;font-size:17px}#learned p{margin:0 0 12px;color:#fde68a;font-weight:600}table{width:100%;border-collapse:collapse;font-size:14px}th,td{text-align:left;padding:6px 8px;border-bottom:1px solid #27334f}th{color:#94a3b8;font-weight:500}.event.memory{background:#1a1f3a}</style></head><body><header><b>Supercuts</b> · <span class="mode" id="mode">loading evidence…</span></header><main><section id="learned" hidden><h2>What Supercuts learned from Walrus Memory</h2><p></p><table><thead><tr><th>Seller</th><th>Capability</th><th>Reliability</th><th>Succeeded / failed</th><th>Last outcome</th><th>Median latency</th></tr></thead><tbody></tbody></table></section><div id="events"></div></main><script>const out=document.querySelector('#events'),learned=document.querySelector('#learned');function renderLearned(d){learned.hidden=false;const w=d.withMemory||{},o=d.withoutMemory;learned.querySelector('p').textContent=d.changedSeller?'Memory changed who gets paid: '+(o?o.sellerId.slice(0,12):'no eligible seller')+' \u2192 '+String(w.sellerId).slice(0,12):(d.changedRail||d.changedRisk||d.changedMaximum)?'Memory changed how this payment settles: '+w.rail+', risk '+w.riskLevel+', max '+w.maximumAmount:'Memory confirmed the default choice';const t=learned.querySelector('tbody');t.textContent='';for(const s of d.scorecards||[]){const r=document.createElement('tr');for(const c of [String(s.counterparty).slice(0,12),s.capabilityId,Math.round(s.reliability*100)+'%',s.successes+' / '+s.failures,s.lastOutcome||'\u2014',s.medianLatencyMs!=null?(s.medianLatencyMs/1000).toFixed(1)+'s':'\u2014']){const td=document.createElement('td');td.textContent=c;r.append(td)}t.append(r)}}const source=new EventSource('/events');source.onmessage=e=>{const v=JSON.parse(e.data);document.querySelector('#mode').textContent=v.mode==='live'?'LIVE FUNDED RUN':'RECORDED FUNDED RUN';if(v.stage==='memory-influence')renderLearned(v.publicDetails);const n=document.createElement('div');n.className=v.stage.startsWith('memory')?'event memory':'event';n.innerHTML='<span>#'+v.sequence+' '+v.actor+'</span><span class="'+v.status+'">'+v.stage+' · '+v.status+'</span><code></code>';n.querySelector('code').textContent=JSON.stringify(v.publicDetails,null,2);out.append(n)};</script></body></html>`;
 export function serveEventDashboard(path, port, replay = false) {
     const server = createServer((request, response) => {
         if (request.url === "/") {

package/dist/deal-engine.d.ts

@@ -35,6 +35,16 @@ export interface DealOutcomeQueued {
 }
 /** A port owns transport, signing, and finality checks. It must be safe to call
  * again with the same child IDs after a process crash. */
+export interface SellerFault {
+    stage: "negotiation" | "delivery";
+    code: string;
+    paymentDigest?: string;
+}
+/**
+ * Codes the buyer runtime verified against seller-supplied evidence. Buyer-side, network, and Walrus readback
+ * errors are excluded: a readback mismatch can come from an aggregator, not the seller.
+ */
+export declare const SELLER_FAULT_CODES: Set<string>;
 export interface DealPorts {
     readBlob(blobId: string): Promise<Uint8Array>;
     discover(input: ExecuteDealInput): Promise<SignedCapabilityRegistration>;
@@ -50,6 +60,8 @@ export interface DealPorts {
         unresolved: true;
     }>;
     inventory(blobId: string): Promise<boolean>;
+    /** Optional: queue a verified seller-fault memory so later discovery demotes this seller. Best effort. */
+    rememberFailure?(input: ExecuteDealInput, plan: SettlementPlanV1, fault: SellerFault): Promise<void>;
 }
 export declare class DealEngine {
     private readonly journal;
@@ -58,5 +70,6 @@ export declare class DealEngine {
     constructor(journal: DealJournal, ports: DealPorts, mandate: AgentMandate);
     execute(input: ExecuteDealInput): Promise<DealView>;
     resume(operationId: string): Promise<DealView>;
+    private rememberSellerFault;
     private finishOutcome;
 }

package/dist/deal-engine.js

@@ -3,6 +3,11 @@ import { validateCapabilityPayload, verifySignedCapability } from "./capability.
 import { dealChildId } from "./deal.js";
 import { fail, SupercutsError } from "./errors.js";
 import { canonicalJson, validateSettlementPlan } from "./settlement.js";
+/**
+ * Codes the buyer runtime verified against seller-supplied evidence. Buyer-side, network, and Walrus readback
+ * errors are excluded: a readback mismatch can come from an aggregator, not the seller.
+ */
+export const SELLER_FAULT_CODES = new Set(["AGREEMENT_BINDING_MISMATCH", "DEAL_RESOURCE_MISMATCH", "DEAL_AGREEMENT_INVALID", "DEAL_DELIVERY_UNVERIFIED", "CAPABILITY_PAYLOAD_INVALID"]);
 const hash = (value) => createHash("sha256").update(canonicalJson(value)).digest("hex");
 export class DealEngine {
     journal;
@@ -91,20 +96,26 @@ export class DealEngine {
         let negotiation = this.journal.step(operationId, "negotiation");
         if (view.state === "planned")
             view = this.journal.advance(operationId, "planned", "negotiating");
-        if (!negotiation) {
-            const started = Date.now();
-            negotiation = await this.ports.negotiate(input, registration, plan, dealChildId(operationId, "agreement"));
-            if (!negotiation.agreementBlobId || !/^[0-9a-f]{64}$/.test(negotiation.agreementCiphertextHash) || !Array.isArray(negotiation.transcriptBlobs) || !negotiation.transcriptBlobs.length)
-                fail("DEAL_AGREEMENT_INVALID", "seller agreement or Walrus transcript evidence is incomplete");
-            this.journal.saveStep(operationId, "negotiation", { planHash: plan.planHash }, negotiation);
-            this.journal.recordTiming(operationId, "negotiation", Date.now() - started);
+        try {
+            if (!negotiation) {
+                const started = Date.now();
+                negotiation = await this.ports.negotiate(input, registration, plan, dealChildId(operationId, "agreement"));
+                if (!negotiation.agreementBlobId || !/^[0-9a-f]{64}$/.test(negotiation.agreementCiphertextHash) || !Array.isArray(negotiation.transcriptBlobs) || !negotiation.transcriptBlobs.length)
+                    fail("DEAL_AGREEMENT_INVALID", "seller agreement or Walrus transcript evidence is incomplete");
+                this.journal.saveStep(operationId, "negotiation", { planHash: plan.planHash }, negotiation);
+                this.journal.recordTiming(operationId, "negotiation", Date.now() - started);
+            }
+            const agreementReadStarted = Date.now();
+            for (const item of [...negotiation.transcriptBlobs, { blobId: negotiation.agreementBlobId, ciphertextHash: negotiation.agreementCiphertextHash }]) {
+                if (!item.blobId || !/^[0-9a-f]{64}$/.test(item.ciphertextHash) || createHash("sha256").update(await this.ports.readBlob(item.blobId)).digest("hex") !== item.ciphertextHash)
+                    fail("WALRUS_BLOB_MISMATCH", "encrypted negotiation or agreement differs from Walrus readback");
+            }
+            this.journal.recordTiming(operationId, "agreement_readback", Date.now() - agreementReadStarted);
         }
-        const agreementReadStarted = Date.now();
-        for (const item of [...negotiation.transcriptBlobs, { blobId: negotiation.agreementBlobId, ciphertextHash: negotiation.agreementCiphertextHash }]) {
-            if (!item.blobId || !/^[0-9a-f]{64}$/.test(item.ciphertextHash) || createHash("sha256").update(await this.ports.readBlob(item.blobId)).digest("hex") !== item.ciphertextHash)
-                fail("WALRUS_BLOB_MISMATCH", "encrypted negotiation or agreement differs from Walrus readback");
+        catch (error) {
+            await this.rememberSellerFault(input, plan, "negotiation", undefined, error);
+            throw error;
         }
-        this.journal.recordTiming(operationId, "agreement_readback", Date.now() - agreementReadStarted);
         if (view.state === "negotiating")
             view = this.journal.advance(operationId, "negotiating", "agreed");
         this.journal.recordBlob(operationId, "agreement", negotiation.agreementCiphertextHash, negotiation.agreementBlobId);
@@ -139,29 +150,35 @@ export class DealEngine {
         let artifact = this.journal.step(operationId, "delivery");
         if (view.state === "paid")
             view = this.journal.advance(operationId, "paid", "delivery_pending");
-        if (!artifact) {
-            const started = Date.now();
-            const candidate = await this.ports.deliver(input, plan, negotiation, payment, dealChildId(operationId, "delivery"));
-            if ("pending" in candidate)
-                return this.journal.get(operationId);
-            if (!candidate.blobId || !/^[0-9a-f]{64}$/.test(candidate.ciphertextHash) || !/^[0-9a-f]{64}$/.test(candidate.artifactSha256))
-                fail("DEAL_DELIVERY_UNVERIFIED", "seller delivery evidence is incomplete");
-            if (typeof candidate.artifactBase64 !== "string" || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(candidate.artifactBase64))
-                fail("DEAL_DELIVERY_UNVERIFIED", "seller artifact encoding is invalid");
-            const artifactBytes = Buffer.from(candidate.artifactBase64, "base64");
-            if (!artifactBytes.length || artifactBytes.length > 512 * 1024 || createHash("sha256").update(artifactBytes).digest("hex") !== candidate.artifactSha256)
-                fail("DEAL_DELIVERY_UNVERIFIED", "seller artifact hash or size is invalid");
-            validateCapabilityPayload(registration.manifest, "output", candidate.metadata);
-            artifact = candidate;
-            this.journal.saveStep(operationId, "delivery", { paymentDigest: payment.transactionDigest }, artifact);
-            this.journal.recordTiming(operationId, "delivery", Date.now() - started);
+        try {
+            if (!artifact) {
+                const started = Date.now();
+                const candidate = await this.ports.deliver(input, plan, negotiation, payment, dealChildId(operationId, "delivery"));
+                if ("pending" in candidate)
+                    return this.journal.get(operationId);
+                if (!candidate.blobId || !/^[0-9a-f]{64}$/.test(candidate.ciphertextHash) || !/^[0-9a-f]{64}$/.test(candidate.artifactSha256))
+                    fail("DEAL_DELIVERY_UNVERIFIED", "seller delivery evidence is incomplete");
+                if (typeof candidate.artifactBase64 !== "string" || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(candidate.artifactBase64))
+                    fail("DEAL_DELIVERY_UNVERIFIED", "seller artifact encoding is invalid");
+                const artifactBytes = Buffer.from(candidate.artifactBase64, "base64");
+                if (!artifactBytes.length || artifactBytes.length > 512 * 1024 || createHash("sha256").update(artifactBytes).digest("hex") !== candidate.artifactSha256)
+                    fail("DEAL_DELIVERY_UNVERIFIED", "seller artifact hash or size is invalid");
+                validateCapabilityPayload(registration.manifest, "output", candidate.metadata);
+                artifact = candidate;
+                this.journal.saveStep(operationId, "delivery", { paymentDigest: payment.transactionDigest }, artifact);
+                this.journal.recordTiming(operationId, "delivery", Date.now() - started);
+            }
+            if (createHash("sha256").update(Buffer.from(artifact.artifactBase64, "base64")).digest("hex") !== artifact.artifactSha256)
+                fail("DEAL_DELIVERY_UNVERIFIED", "saved artifact hash differs from delivery evidence");
+            const deliveryReadStarted = Date.now();
+            if (createHash("sha256").update(await this.ports.readBlob(artifact.blobId)).digest("hex") !== artifact.ciphertextHash)
+                fail("WALRUS_BLOB_MISMATCH", "encrypted delivery differs from Walrus readback");
+            this.journal.recordTiming(operationId, "delivery_readback", Date.now() - deliveryReadStarted);
+        }
+        catch (error) {
+            await this.rememberSellerFault(input, plan, "delivery", payment.transactionDigest, error);
+            throw error;
         }
-        if (createHash("sha256").update(Buffer.from(artifact.artifactBase64, "base64")).digest("hex") !== artifact.artifactSha256)
-            fail("DEAL_DELIVERY_UNVERIFIED", "saved artifact hash differs from delivery evidence");
-        const deliveryReadStarted = Date.now();
-        if (createHash("sha256").update(await this.ports.readBlob(artifact.blobId)).digest("hex") !== artifact.ciphertextHash)
-            fail("WALRUS_BLOB_MISMATCH", "encrypted delivery differs from Walrus readback");
-        this.journal.recordTiming(operationId, "delivery_readback", Date.now() - deliveryReadStarted);
         this.journal.recordBlob(operationId, "delivery", artifact.ciphertextHash, artifact.blobId);
         if (view.state === "delivery_pending")
             view = this.journal.advance(operationId, "delivery_pending", "delivered");
@@ -169,6 +186,14 @@ export class DealEngine {
             view = this.journal.advance(operationId, "delivered", "outcome_pending");
         return this.finishOutcome(operationId, input);
     }
+    async rememberSellerFault(input, plan, stage, paymentDigest, error) {
+        if (!(error instanceof SupercutsError) || !SELLER_FAULT_CODES.has(error.code) || !this.ports.rememberFailure)
+            return;
+        try {
+            await this.ports.rememberFailure(input, plan, { stage, code: error.code, ...(paymentDigest ? { paymentDigest } : {}) });
+        }
+        catch { /* the original seller fault stays the reported error */ }
+    }
     async finishOutcome(operationId, input) {
         const view = this.journal.get(operationId);
         if (view.evidence.outcomeMemory === "indexed")

package/dist/deal.d.ts

@@ -43,6 +43,41 @@ export interface DealEvidenceView {
     inventory: "pending" | "indexed" | "missing" | "unresolved";
     paymentFinalized: boolean;
     paymentDigest?: string;
+    /** What Walrus Memory changed about this payment versus the same mandate with no memory. */
+    memoryInfluence?: {
+        changedSeller: boolean;
+        changedRail: boolean;
+        changedRisk: boolean;
+        changedMaximum: boolean;
+        withoutMemory?: {
+            sellerId: string;
+            capabilityId: string;
+            rail: string;
+            riskLevel: string;
+            maximumAmount: string;
+        };
+        withMemory: {
+            sellerId: string;
+            capabilityId: string;
+            rail: string;
+            riskLevel: string;
+            maximumAmount: string;
+        };
+        citedBlobIds: string[];
+    };
+    /** Learned seller scorecards used for discovery; counts and blob IDs only, never memory plaintext. */
+    memoryRanking?: Array<{
+        capabilityId: string;
+        counterparty: string;
+        reliability: number;
+        observations: number;
+        successes: number;
+        failures: number;
+        unresolved: number;
+        lastOutcome?: string;
+        medianLatencyMs?: number;
+        priceMinimum: string;
+    }>;
 }
 export interface DealDelivery {
     dealId: string;

package/dist/deal.js

@@ -176,7 +176,13 @@ export class DealJournal {
         const blobs = this.store.db.prepare("SELECT kind,blob_id,status FROM deal_blobs WHERE operation_id=?").all(row.operation_id);
         const memory = this.store.db.prepare("SELECT blob_id,status FROM deal_memory_outbox WHERE operation_id=? AND event_kind='outcome'").get(row.operation_id);
         const transcript = this.step(row.operation_id, "negotiation");
-        return { version: "supercuts.deal-evidence.v1", dealId, transcriptBlobIds: transcript?.transcriptBlobs?.map((item) => item.blobId) ?? [], ...(blobs.find((item) => item.kind === "agreement")?.blob_id ? { agreementBlobId: blobs.find((item) => item.kind === "agreement").blob_id } : {}), ...(blobs.find((item) => item.kind === "delivery")?.blob_id ? { deliveryBlobId: blobs.find((item) => item.kind === "delivery").blob_id } : {}), ...(memory?.blob_id ? { outcomeMemoryBlobId: memory.blob_id } : {}), ciphertextReadback: blobs.some((item) => item.status === "unresolved") ? "unresolved" : ["agreement", "delivery"].every((kind) => blobs.some((item) => item.kind === kind && item.status === "verified")) ? "verified" : "pending", inventory: memory?.status === "indexed" ? "indexed" : memory?.status === "unresolved" ? "unresolved" : "pending", paymentFinalized: view.evidence.payment === "finalized", ...(view.paymentDigest ? { paymentDigest: view.paymentDigest } : {}) };
+        const hasRecords = Boolean(this.store.db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='app_records'").get());
+        const record = (scope, id) => { if (!hasRecords)
+            return undefined; const found = this.store.db.prepare("SELECT value FROM app_records WHERE scope=? AND id=?").get(scope, id); return found ? JSON.parse(found.value) : undefined; };
+        const influence = record("memory-influence", `deal:${row.operation_id}`);
+        const ranking = record("deal-ranking", row.operation_id);
+        const memoryRanking = ranking?.scorecards.map(({ capabilityId, counterparty, reliability, observations, successes, failures, unresolved, lastOutcome, medianLatencyMs, priceMinimum }) => ({ capabilityId, counterparty, reliability, observations, successes, failures, unresolved, ...(lastOutcome ? { lastOutcome } : {}), ...(medianLatencyMs !== undefined ? { medianLatencyMs } : {}), priceMinimum }));
+        return { version: "supercuts.deal-evidence.v1", dealId, transcriptBlobIds: transcript?.transcriptBlobs?.map((item) => item.blobId) ?? [], ...(blobs.find((item) => item.kind === "agreement")?.blob_id ? { agreementBlobId: blobs.find((item) => item.kind === "agreement").blob_id } : {}), ...(blobs.find((item) => item.kind === "delivery")?.blob_id ? { deliveryBlobId: blobs.find((item) => item.kind === "delivery").blob_id } : {}), ...(memory?.blob_id ? { outcomeMemoryBlobId: memory.blob_id } : {}), ciphertextReadback: blobs.some((item) => item.status === "unresolved") ? "unresolved" : ["agreement", "delivery"].every((kind) => blobs.some((item) => item.kind === kind && item.status === "verified")) ? "verified" : "pending", inventory: memory?.status === "indexed" ? "indexed" : memory?.status === "unresolved" ? "unresolved" : "pending", paymentFinalized: view.evidence.payment === "finalized", ...(view.paymentDigest ? { paymentDigest: view.paymentDigest } : {}), ...(influence ? { memoryInfluence: influence } : {}), ...(memoryRanking ? { memoryRanking } : {}) };
     }
     delivery(dealId) {
         const row = this.store.db.prepare("SELECT operation_id FROM deal_operations WHERE deal_id=?").get(dealId);

package/dist/embedding-adapter.d.ts

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+/**
+ * OpenAI-compatible embedding adapter for local models (`supercuts-embedding-adapter`).
+ *
+ * Walrus Mainnet Memory indexes 1536-dimensional embeddings. This loopback proxy forwards requests to a
+ * local OpenAI-compatible endpoint (Ollama by default) and zero-pads shorter vectors to 1536 dimensions.
+ * Zero-padding preserves cosine similarity and Euclidean distance as long as every write and recall uses
+ * this same adapter and upstream model. Memory plaintext only reaches the configured upstream.
+ */
+import { type Server } from "node:http";
+export declare const TARGET_DIMENSIONS = 1536;
+export declare function padEmbedding(embedding: unknown): number[];
+interface EmbeddingPayload {
+    data: Array<{
+        embedding: unknown;
+    } & Record<string, unknown>>;
+}
+export declare function transformEmbeddingResponse(payload: unknown): EmbeddingPayload;
+export interface EmbeddingAdapterOptions {
+    upstreamBaseUrl: string;
+    upstreamModel: string;
+    upstreamApiKey?: string;
+    fetchImpl?: typeof fetch;
+}
+export declare function createEmbeddingAdapter({ fetchImpl, upstreamBaseUrl, upstreamApiKey, upstreamModel, }: EmbeddingAdapterOptions): Server;
+export {};

package/dist/embedding-adapter.js

@@ -0,0 +1,116 @@
+#!/usr/bin/env node
+/**
+ * OpenAI-compatible embedding adapter for local models (`supercuts-embedding-adapter`).
+ *
+ * Walrus Mainnet Memory indexes 1536-dimensional embeddings. This loopback proxy forwards requests to a
+ * local OpenAI-compatible endpoint (Ollama by default) and zero-pads shorter vectors to 1536 dimensions.
+ * Zero-padding preserves cosine similarity and Euclidean distance as long as every write and recall uses
+ * this same adapter and upstream model. Memory plaintext only reaches the configured upstream.
+ */
+import { createServer } from "node:http";
+import { isMainModule } from "./main-module.js";
+export const TARGET_DIMENSIONS = 1536;
+const MAX_REQUEST_BYTES = 1024 * 1024;
+export function padEmbedding(embedding) {
+    if (!Array.isArray(embedding) ||
+        embedding.length < 1 ||
+        embedding.length > TARGET_DIMENSIONS) {
+        throw new Error(`expected an embedding with 1 to ${TARGET_DIMENSIONS} dimensions, received ${Array.isArray(embedding) ? embedding.length : "a non-array value"}`);
+    }
+    if (!embedding.every((value) => typeof value === "number" && Number.isFinite(value)))
+        throw new Error("upstream embedding contains a non-finite value");
+    return [
+        ...embedding,
+        ...Array(TARGET_DIMENSIONS - embedding.length).fill(0),
+    ];
+}
+export function transformEmbeddingResponse(payload) {
+    const value = payload;
+    if (!value || !Array.isArray(value.data) || !value.data.length)
+        throw new Error("upstream response has no embeddings");
+    const dimension = value.data[0]?.embedding?.length;
+    if (value.data.some((item) => item?.embedding?.length !== dimension))
+        throw new Error("upstream embeddings have inconsistent dimensions");
+    return {
+        ...value,
+        data: value.data.map((item) => ({
+            ...item,
+            embedding: padEmbedding(item?.embedding),
+        })),
+    };
+}
+export function createEmbeddingAdapter({ fetchImpl = fetch, upstreamBaseUrl, upstreamApiKey, upstreamModel, }) {
+    if (!upstreamBaseUrl)
+        throw new Error("EMBEDDING_UPSTREAM_BASE_URL is required");
+    if (!upstreamModel)
+        throw new Error("EMBEDDING_UPSTREAM_MODEL is required");
+    const endpoint = `${upstreamBaseUrl.replace(/\/$/, "")}/embeddings`;
+    let sourceDimensions;
+    const send = (response, status, body) => {
+        response.writeHead(status, { "content-type": "application/json" });
+        response.end(typeof body === "string" ? body : JSON.stringify(body));
+    };
+    return createServer(async (request, response) => {
+        // Loopback only: reject other Host headers so a DNS-rebinding page cannot drive the local embedding model.
+        const host = (request.headers.host ?? "").replace(/:\d+$/, "").replace(/^\[|\]$/g, "");
+        if (!["127.0.0.1", "localhost", "::1"].includes(host))
+            return send(response, 403, { error: { message: "loopback host required" } });
+        if (request.method === "GET" && request.url === "/health")
+            return send(response, 200, {
+                status: "ok",
+                targetDimensions: TARGET_DIMENSIONS,
+                upstreamModel,
+            });
+        if (request.method !== "POST" || request.url !== "/v1/embeddings")
+            return send(response, 404, { error: { message: "not found" } });
+        try {
+            let body = "";
+            for await (const chunk of request) {
+                body += chunk;
+                if (body.length > MAX_REQUEST_BYTES)
+                    throw new Error("embedding request is too large");
+            }
+            const requested = JSON.parse(body);
+            const upstream = await fetchImpl(endpoint, {
+                method: "POST",
+                headers: {
+                    "content-type": "application/json",
+                    ...(upstreamApiKey
+                        ? { authorization: `Bearer ${upstreamApiKey}` }
+                        : {}),
+                },
+                body: JSON.stringify({ ...requested, model: upstreamModel }),
+                signal: AbortSignal.timeout(60_000),
+            });
+            const upstreamBody = await upstream.text();
+            if (!upstream.ok)
+                return send(response, upstream.status, upstreamBody);
+            const payload = JSON.parse(upstreamBody), result = transformEmbeddingResponse(payload);
+            const dimension = payload.data[0].embedding.length;
+            if (sourceDimensions !== undefined && sourceDimensions !== dimension)
+                throw new Error("upstream embedding dimensions changed");
+            sourceDimensions = dimension;
+            send(response, 200, result);
+        }
+        catch (error) {
+            send(response, 502, {
+                error: {
+                    message: error instanceof Error ? error.message : "embedding adapter failed",
+                },
+            });
+        }
+    });
+}
+if (isMainModule(import.meta.url)) {
+    const port = Number(process.env.EMBEDDING_ADAPTER_PORT ?? 8787);
+    const upstreamBaseUrl = process.env.EMBEDDING_UPSTREAM_BASE_URL ?? "http://127.0.0.1:11434/v1";
+    const upstreamModel = process.env.EMBEDDING_UPSTREAM_MODEL ?? "embeddinggemma";
+    const server = createEmbeddingAdapter({
+        upstreamBaseUrl,
+        upstreamModel,
+        ...(process.env.EMBEDDING_UPSTREAM_API_KEY
+            ? { upstreamApiKey: process.env.EMBEDDING_UPSTREAM_API_KEY }
+            : {}),
+    });
+    server.listen(port, "127.0.0.1", () => process.stdout.write(`${JSON.stringify({ ok: true, listening: `http://127.0.0.1:${port}/v1`, upstream: upstreamBaseUrl, upstreamModel, targetDimensions: TARGET_DIMENSIONS, memoryConfig: { embeddingApiBase: `http://127.0.0.1:${port}/v1`, embeddingModel: `${upstreamModel}-1536` } })}\n`));
+}

package/dist/facilitator.js

@@ -3,6 +3,7 @@ import { timingSafeEqual } from "node:crypto";
 import { SuiGrpcClient } from "@mysten/sui/grpc";
 import { Transaction } from "@mysten/sui/transactions";
 import { isValidTransactionSignature } from "@mysten/sui/verify";
+import { isMainModule } from "./main-module.js";
 const NETWORK = "sui:testnet";
 const SUI = "0x2::sui::SUI";
 /** Sui RPC may expand a type's address to 32 bytes; policy identifiers use its canonical short form. */
@@ -164,7 +165,7 @@ export class SuiTestnetFacilitator {
     }
     send(response, status, body) { const encoded = Buffer.from(JSON.stringify(body)); response.writeHead(status, { "content-type": "application/json", "content-length": String(encoded.length) }); response.end(encoded); }
 }
-if (process.argv[1] && import.meta.url === new URL(`file://${process.argv[1]}`).href) {
+if (isMainModule(import.meta.url)) {
     const key = process.env.FACILITATOR_SHARED_KEY ?? "";
     const grpc = process.env.SUI_TESTNET_GRPC ?? "https://fullnode.testnet.sui.io:443";
     const port = Number(process.env.PORT ?? "3000");

package/dist/funding.js

@@ -27,6 +27,8 @@ export async function prepareFunding(home, values) {
         if (app.profile.role !== "buyer" || app.profile.mock)
             fail("LIVE_PROFILE_REQUIRED", "funding requires a live buyer role home");
         const doctor = await app.execute("doctor", {}), address = String(doctor.data.signer ?? "");
+        if (shieldedPayment > 0n && doctor.data.shieldedProofs !== "ready")
+            fail("SHIELDED_PROOFS_UNAVAILABLE", String(doctor.data.shieldedFixes?.[0] ?? "shielded proving artifacts are not installed"));
         const endpoint = app.profile.live?.writeGrpcEndpoint ?? fail("LIVE_PROFILE_INVALID", "buyer write RPC is missing");
         const [{ balance }, shielded] = await Promise.all([writeClient(endpoint).getBalance({ owner: address, coinType: "0x2::sui::SUI" }), app.execute("wallet.balance", {})]);
         return calculateFundingPlan({ address, publicBalance: BigInt(balance.balance), shieldedBalance: BigInt(String(shielded.data.available ?? "0")), publicPayment, shieldedPayment, gasReserve, changeReserve });
@@ -42,7 +44,14 @@ export async function executeFunding(home, values) {
     if (plan.faucetRequired) {
         if (!values.requestFaucet)
             fail("BUYER_FUNDING_REQUIRED", `buyer needs ${plan.publicShortfallMist} additional MIST; rerun with --request-faucet --confirm or fund ${plan.address} manually`);
-        execFileSync("sui", ["client", "faucet", "--url", "https://faucet.testnet.sui.io", "--address", plan.address], { stdio: "inherit" });
+        try {
+            execFileSync("sui", ["client", "faucet", "--url", "https://faucet.testnet.sui.io", "--address", plan.address], { stdio: "inherit" });
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                fail("SUI_CLI_MISSING", `the Sui CLI is not installed; request Testnet SUI for ${plan.address} at https://faucet.sui.io, then rerun funding execute without --request-faucet`);
+            throw error;
+        }
         for (let attempt = 0; attempt < 15; attempt++) {
             await new Promise((resolve) => setTimeout(resolve, 2_000));
             plan = await prepareFunding(home, values);

package/dist/live-deal-ports.d.ts

@@ -1,5 +1,5 @@
 import { type SignedCapabilityRegistration } from "./capability.js";
-import type { DealArtifact, DealNegotiation, DealPayment, DealPorts } from "./deal-engine.js";
+import type { DealArtifact, DealNegotiation, DealPayment, DealPorts, SellerFault } from "./deal-engine.js";
 import type { ExecuteDealInput } from "./deal.js";
 import { type AgentMandate } from "./mandate.js";
 import type { Phase3App } from "./phase3.js";
@@ -32,6 +32,7 @@ export declare class LiveDealPorts implements DealPorts {
     negotiate(input: ExecuteDealInput, registration: SignedCapabilityRegistration, plan: SettlementPlanV1, agreementOperationId: string): Promise<LiveNegotiation>;
     pay(input: ExecuteDealInput, plan: SettlementPlanV1, negotiation: DealNegotiation, paymentOperationId: string): Promise<DealPayment>;
     deliver(input: ExecuteDealInput, plan: SettlementPlanV1, negotiation: DealNegotiation, payment: DealPayment, _deliveryOperationId: string): Promise<DealArtifact>;
+    rememberFailure(input: ExecuteDealInput, plan: SettlementPlanV1, fault: SellerFault): Promise<void>;
     rememberOutcome(input: ExecuteDealInput, plan: SettlementPlanV1, payment: DealPayment, artifact: DealArtifact, _outcomeOperationId: string): Promise<{
         queued: true;
         payloadHash: string;

package/dist/live-deal-ports.js

@@ -3,7 +3,7 @@ import { join } from "node:path";
 import { randomBytes } from "node:crypto";
 import { decodeSuiPrivateKey } from "@mysten/sui/cryptography";
 import { Ed25519Keypair } from "@mysten/sui/keypairs/ed25519";
-import { verifySignedCapability } from "./capability.js";
+import { verifySignedCapability, validateCapabilityPayload } from "./capability.js";
 import { WalrusDealBlobs, wireDecrypt, wireEncrypt, wireHash, wireJsonHash, wireKey } from "./deal-wire.js";
 import { fail } from "./errors.js";
 import { LiveRuntime } from "./live-runtime.js";
@@ -127,8 +127,21 @@ export class LiveDealPorts {
         const candidates = (await this.catalog()).map(({ registration }) => registration).filter((registration) => (input.capabilityId && registration.manifest.capabilityId === input.capabilityId || input.capabilityClass && registration.manifest.capability === input.capabilityClass) && registration.manifest.asset === input.budget.asset);
         if (!candidates.length)
             fail("DEAL_CAPABILITY_NOT_FOUND", "configured sellers have no matching signed capability");
-        candidates.sort((a, b) => BigInt(a.manifest.priceBand.minimum) < BigInt(b.manifest.priceBand.minimum) ? -1 : BigInt(a.manifest.priceBand.minimum) > BigInt(b.manifest.priceBand.minimum) ? 1 : a.manifest.capabilityId.localeCompare(b.manifest.capabilityId));
-        return candidates[0];
+        // Same capability class can carry different signed input schemas; only rank sellers that accept this task.
+        const accepting = candidates.filter((registration) => { try {
+            validateCapabilityPayload(registration.manifest, "input", input.input);
+            return true;
+        }
+        catch {
+            return false;
+        } });
+        if (!accepting.length)
+            fail("DEAL_INPUT_UNSUPPORTED", "no matching seller's signed input schema accepts this task input; check deal.catalog for the expected fields");
+        candidates.splice(0, candidates.length, ...accepting);
+        // Walrus Memory decides which seller gets paid: verified outcomes outrank a lower list price.
+        const ranking = await this.app.rankDealCandidates(input.operationId, candidates.map((item) => item.manifest), this.mandate, { budgetMaximum: input.budget.maximum, ...(input.requestedRail ? { requestedRail: input.requestedRail } : {}), ...(input.privacyHint ? { privacyHint: input.privacyHint } : {}) });
+        const chosen = ranking.ordered[0];
+        return candidates.find((item) => item.manifest.manifestHash === chosen.manifestHash);
     }
     async plan(input, registration, paymentOperationId) {
         const existing = this.app.store.db.prepare("SELECT plan_json FROM settlement_plans WHERE operation_id=?").get(paymentOperationId);
@@ -137,10 +150,13 @@ export class LiveDealPorts {
             validateSettlementPlan(saved);
             if (saved.mandateHash !== settlementMandateHash(this.mandate) || saved.manifestHash !== registration.manifest.manifestHash || saved.operationId !== paymentOperationId)
                 fail("DEAL_PLAN_MISMATCH", "persisted plan differs from the owner mandate or seller capability");
+            this.app.recordDealMemoryInfluence(input.operationId, saved, this.mandate, { ...(input.requestedRail ? { requestedRail: input.requestedRail } : {}), ...(input.privacyHint ? { privacyHint: input.privacyHint } : {}) });
             return saved;
         }
         const result = await executeMandated(this.app, this.mandate, "settlement.plan", { "operation-id": paymentOperationId, manifest: registration.manifest, "requested-amount": registration.manifest.priceBand.minimum, ...(input.privacyHint ? { "privacy-hint": input.privacyHint } : {}), ...(input.requestedRail ? { "requested-rail": input.requestedRail } : {}) });
-        return result;
+        const plan = result;
+        this.app.recordDealMemoryInfluence(input.operationId, plan, this.mandate, { ...(input.requestedRail ? { requestedRail: input.requestedRail } : {}), ...(input.privacyHint ? { privacyHint: input.privacyHint } : {}) });
+        return plan;
     }
     async negotiate(input, registration, plan, agreementOperationId) {
         const sessionId = agreementOperationId, capabilityId = registration.manifest.capabilityId, buyerPublicKey = this.app.store.getSecret("identity:x25519-public")?.toString("base64url") ?? fail("IDENTITY_MISSING", "buyer transport key is missing");
@@ -209,6 +225,9 @@ export class LiveDealPorts {
             fail("DEAL_DELIVERY_UNVERIFIED", "seller delivery bytes or metadata differ from the receipt");
         return { blobId: receipt.blobId, ciphertextHash: receipt.ciphertextHash, artifactSha256: receipt.artifactSha256, contentType: receipt.contentType, metadata: receipt.metadata, artifactBase64: artifact.artifactBase64 };
     }
+    async rememberFailure(input, plan, fault) {
+        this.app.recordVerifiedDealFailure(input.operationId, plan.planHash, fault);
+    }
     async rememberOutcome(input, plan, payment, artifact, _outcomeOperationId) {
         return this.app.recordVerifiedDealOutcome(input.operationId, plan.planHash, payment.transactionDigest, artifact.artifactSha256);
     }