settld 0.1.1 → 0.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (441) hide show
  1. package/README.md +61 -3
  2. package/SETTLD_VERSION +1 -1
  3. package/bin/settld-mcp +2 -0
  4. package/bin/settld.js +13 -0
  5. package/conformance/kernel-v0/README.md +7 -0
  6. package/conformance/kernel-v0/run.mjs +292 -4
  7. package/docs/ACCESS.md +57 -0
  8. package/docs/ADOPTION_CHECKLIST.md +44 -0
  9. package/docs/ALERTS.md +198 -0
  10. package/docs/ARCHITECTURE.md +69 -0
  11. package/docs/ARCHITECTURE_FOUNDER_GUIDE.md +284 -0
  12. package/docs/ARTIFACTS.md +60 -0
  13. package/docs/CERTIFICATION_CHECKLIST.md +33 -0
  14. package/docs/CIRCLE_SANDBOX_E2E.md +140 -0
  15. package/docs/CONFIG.md +297 -0
  16. package/docs/CONTRACTS_APIS.md +23 -0
  17. package/docs/DEPRECATION.md +31 -0
  18. package/docs/DOMAIN_MODEL.md +92 -0
  19. package/docs/EVENT_ENVELOPE.md +53 -0
  20. package/docs/FINANCE_PACK_FORMAT.md +53 -0
  21. package/docs/INCIDENT_TAXONOMY.md +30 -0
  22. package/docs/JOB_STATE_MACHINE.md +66 -0
  23. package/docs/KERNEL_COMPATIBLE.md +60 -0
  24. package/docs/KERNEL_V0.md +40 -0
  25. package/docs/KEY_ROTATION.md +80 -0
  26. package/docs/LEDGER.md +82 -0
  27. package/docs/LIVENESS.md +76 -0
  28. package/docs/MVP_BUILD_ORDER.md +36 -0
  29. package/docs/ONCALL_PLAYBOOK.md +39 -0
  30. package/docs/OPERATIONS_SIGNING.md +20 -0
  31. package/docs/OVERVIEW.md +190 -0
  32. package/docs/PERF_BASELINE.md +85 -0
  33. package/docs/PRD.md +77 -0
  34. package/docs/QUICKSTART_KERNEL_V0.md +96 -0
  35. package/docs/QUICKSTART_MCP.md +337 -0
  36. package/docs/QUICKSTART_MCP_HOSTS.md +143 -0
  37. package/docs/QUICKSTART_PRODUCE.md +61 -0
  38. package/docs/QUICKSTART_RELEASE_VERIFY.md +39 -0
  39. package/docs/QUICKSTART_SDK.md +125 -0
  40. package/docs/QUICKSTART_SDK_PYTHON.md +111 -0
  41. package/docs/QUICKSTART_VERIFY.md +54 -0
  42. package/docs/QUICKSTART_X402_GATEWAY.md +317 -0
  43. package/docs/README.md +15 -0
  44. package/docs/RELEASE_CHECKLIST.md +156 -0
  45. package/docs/RELEASING.md +81 -0
  46. package/docs/REPO_SETTINGS.md +37 -0
  47. package/docs/RUNBOOK.md +86 -0
  48. package/docs/SKILLS.md +42 -0
  49. package/docs/SKILL_BUNDLE_FORMAT.md +48 -0
  50. package/docs/SLO.md +70 -0
  51. package/docs/SUMMARY.md +16 -0
  52. package/docs/SUPPORT.md +31 -0
  53. package/docs/THREAT_MODEL.md +36 -0
  54. package/docs/TRUST.md +59 -0
  55. package/docs/WORKFLOW.md +35 -0
  56. package/docs/X402_BATCH_SETTLEMENT.md +126 -0
  57. package/docs/blog/2026-02-14-your-ai-agent-just-spent-500-where-is-the-receipt.md +73 -0
  58. package/docs/examples/x402-provider-payout-registry.example.json +14 -0
  59. package/docs/gitbook/README.md +52 -0
  60. package/docs/gitbook/SETUP.md +25 -0
  61. package/docs/gitbook/SUMMARY.md +15 -0
  62. package/docs/gitbook/api-reference.md +73 -0
  63. package/docs/gitbook/closepacks.md +55 -0
  64. package/docs/gitbook/conformance.md +59 -0
  65. package/docs/gitbook/core-primitives.md +85 -0
  66. package/docs/gitbook/dispute-lifecycle.md +33 -0
  67. package/docs/gitbook/faq.md +21 -0
  68. package/docs/gitbook/guides.md +49 -0
  69. package/docs/gitbook/operations-runbook.md +36 -0
  70. package/docs/gitbook/quickstart.md +104 -0
  71. package/docs/gitbook/replay-and-audit.md +30 -0
  72. package/docs/gitbook/sdk-reference.md +35 -0
  73. package/docs/gitbook/security-model.md +58 -0
  74. package/docs/integrations/README.md +14 -0
  75. package/docs/integrations/github-actions-verify.yml +31 -0
  76. package/docs/integrations/github-actions.md +34 -0
  77. package/docs/integrations/openclaw/CLAWHUB_PUBLISH_CHECKLIST.md +65 -0
  78. package/docs/integrations/openclaw/settld-mcp-skill/SKILL.md +69 -0
  79. package/docs/integrations/openclaw/settld-mcp-skill/mcp-server.example.json +12 -0
  80. package/docs/kernel-compatible/capabilities.json +36 -0
  81. package/docs/marketing/agent-commerce-substrate.md +78 -0
  82. package/docs/marketing/hn-repost-2026-02-17.md +102 -0
  83. package/docs/marketing/show-hn-post.md +45 -0
  84. package/docs/ops/ARTIFACT_VERIFICATION_STATUS.md +43 -0
  85. package/docs/ops/BILLING_WEBHOOK_REPLAY.md +105 -0
  86. package/docs/ops/CI_FLAKE_BUDGET.md +31 -0
  87. package/docs/ops/GO_LIVE_GATE_S13.md +27 -0
  88. package/docs/ops/HOSTED_BASELINE_R2.md +129 -0
  89. package/docs/ops/KERNEL_V0_SHIP_GATE.md +67 -0
  90. package/docs/ops/LIGHTHOUSE_PRODUCTION_CLOSE.md +51 -0
  91. package/docs/ops/MCP_COMPATIBILITY_MATRIX.md +28 -0
  92. package/docs/ops/MINIMUM_PRODUCTION_TOPOLOGY.md +89 -0
  93. package/docs/ops/P0_BACKEND_PROGRESS.md +150 -0
  94. package/docs/ops/PAYMENTS_ALPHA_R5.md +105 -0
  95. package/docs/ops/PILOT_ONBOARDING_RUNBOOK.md +112 -0
  96. package/docs/ops/PRODUCTION_DEPLOYMENT_CHECKLIST.md +103 -0
  97. package/docs/ops/R1_SLOS.md +66 -0
  98. package/docs/ops/RELEASE_SIGNING_INCIDENT.md +58 -0
  99. package/docs/ops/SELF_SERVE_LAUNCH_AUTOMATION.md +89 -0
  100. package/docs/ops/THROUGHPUT_DRILL_10X.md +48 -0
  101. package/docs/ops/TRUST_CONFIG_WIZARD.md +47 -0
  102. package/docs/ops/X402_PILOT_WEEKLY_METRICS.md +76 -0
  103. package/docs/ops/tool-call-disputes-holdback.md +52 -0
  104. package/docs/pilot-kit/PILOT_PACKAGE_SCORECARD_X402.md +46 -0
  105. package/docs/pilot-kit/README.md +29 -0
  106. package/docs/pilot-kit/architecture-one-pager.md +48 -0
  107. package/docs/pilot-kit/buyer-email.txt +19 -0
  108. package/docs/pilot-kit/buyer-one-pager.md +31 -0
  109. package/docs/pilot-kit/gtm-pilot-playbook.md +182 -0
  110. package/docs/pilot-kit/offline-verify.md +33 -0
  111. package/docs/pilot-kit/procurement-one-pager.md +50 -0
  112. package/docs/pilot-kit/rfp-clause.md +46 -0
  113. package/docs/pilot-kit/roi-calculator-template.csv +2 -0
  114. package/docs/pilot-kit/security-qa.md +153 -0
  115. package/docs/pilot-kit/security-summary.md +35 -0
  116. package/docs/plans/2026-02-13-mcp-spike-design.md +113 -0
  117. package/docs/spec/AcceptanceCriteria.v1.md +17 -0
  118. package/docs/spec/AcceptanceEvaluation.v1.md +10 -0
  119. package/docs/spec/AgentEvent.v1.md +47 -0
  120. package/docs/spec/AgentIdentity.v1.md +62 -0
  121. package/docs/spec/AgentPassport.v1.md +95 -0
  122. package/docs/spec/AgentReputation.v1.md +59 -0
  123. package/docs/spec/AgentReputation.v2.md +52 -0
  124. package/docs/spec/AgentRun.v1.md +47 -0
  125. package/docs/spec/AgentRunSettlement.v1.md +52 -0
  126. package/docs/spec/AgentWallet.v1.md +43 -0
  127. package/docs/spec/AgreementDelegation.v1.md +109 -0
  128. package/docs/spec/ArbitrationCase.v1.md +67 -0
  129. package/docs/spec/ArbitrationVerdict.v1.md +60 -0
  130. package/docs/spec/BundleHeadAttestation.v1.md +32 -0
  131. package/docs/spec/CANONICAL_JSON.md +31 -0
  132. package/docs/spec/CRYPTOGRAPHY.md +61 -0
  133. package/docs/spec/ClosePack.v1.md +49 -0
  134. package/docs/spec/ClosePackManifest.v1.md +24 -0
  135. package/docs/spec/DelegationGrant.v1.md +90 -0
  136. package/docs/spec/DisputeOpenEnvelope.v1.md +43 -0
  137. package/docs/spec/ERRORS.md +76 -0
  138. package/docs/spec/ESCROW_NETTING_INVARIANTS.md +71 -0
  139. package/docs/spec/EvidenceIndex.v1.md +20 -0
  140. package/docs/spec/ExecutionIntent.v1.md +90 -0
  141. package/docs/spec/FinancePackBundleManifest.v1.md +24 -0
  142. package/docs/spec/FundingHold.v1.md +60 -0
  143. package/docs/spec/GovernancePolicy.v1.md +34 -0
  144. package/docs/spec/GovernancePolicy.v2.md +30 -0
  145. package/docs/spec/INVARIANTS.md +389 -0
  146. package/docs/spec/InteractionDirectionMatrix.v1.md +30 -0
  147. package/docs/spec/InvoiceBundleManifest.v1.md +24 -0
  148. package/docs/spec/InvoiceClaim.v1.md +11 -0
  149. package/docs/spec/MONEY_RAIL_STATE_MACHINE.md +58 -0
  150. package/docs/spec/MarketplaceAcceptance.v2.md +46 -0
  151. package/docs/spec/MarketplaceOffer.v2.md +54 -0
  152. package/docs/spec/MeteringReport.v1.md +18 -0
  153. package/docs/spec/PRODUCER_ERRORS.md +42 -0
  154. package/docs/spec/PricingMatrix.v1.md +20 -0
  155. package/docs/spec/PricingMatrixSignatures.v1.md +30 -0
  156. package/docs/spec/PricingMatrixSignatures.v2.md +29 -0
  157. package/docs/spec/ProduceCliOutput.v1.md +46 -0
  158. package/docs/spec/ProofBundleManifest.v1.md +24 -0
  159. package/docs/spec/README.md +104 -0
  160. package/docs/spec/REFERENCE_IMPLEMENTATIONS.md +29 -0
  161. package/docs/spec/REFERENCE_VERIFIER_BEHAVIOR.md +68 -0
  162. package/docs/spec/REMOTE_SIGNER.md +66 -0
  163. package/docs/spec/ReleaseIndex.v1.md +32 -0
  164. package/docs/spec/ReleaseIndexSignatures.v1.md +17 -0
  165. package/docs/spec/ReleaseTrust.v1.md +13 -0
  166. package/docs/spec/ReleaseTrust.v2.md +26 -0
  167. package/docs/spec/RemoteSignerRequest.v1.md +21 -0
  168. package/docs/spec/RemoteSignerResponse.v1.md +16 -0
  169. package/docs/spec/ReputationEvent.v1.md +63 -0
  170. package/docs/spec/RevocationList.v1.md +28 -0
  171. package/docs/spec/SIGNER_PROVIDER_PLUGIN.md +32 -0
  172. package/docs/spec/STRICTNESS.md +68 -0
  173. package/docs/spec/SUPPLY_CHAIN.md +33 -0
  174. package/docs/spec/SettlementAdjustment.v1.md +45 -0
  175. package/docs/spec/SettlementDecisionRecord.v1.md +48 -0
  176. package/docs/spec/SettlementDecisionRecord.v2.md +51 -0
  177. package/docs/spec/SettlementDecisionReport.v1.md +44 -0
  178. package/docs/spec/SettlementKernel.v1.md +59 -0
  179. package/docs/spec/SettlementReceipt.v1.md +63 -0
  180. package/docs/spec/SlaDefinition.v1.md +24 -0
  181. package/docs/spec/SlaEvaluation.v1.md +12 -0
  182. package/docs/spec/THREAT_MODEL.md +113 -0
  183. package/docs/spec/TOOL_PROVENANCE.md +30 -0
  184. package/docs/spec/TRUST_ANCHORS.md +84 -0
  185. package/docs/spec/TenantSettings.v1.md +90 -0
  186. package/docs/spec/TenantSettings.v2.md +99 -0
  187. package/docs/spec/TimestampProof.v1.md +25 -0
  188. package/docs/spec/ToolCallAgreement.v1.md +34 -0
  189. package/docs/spec/ToolCallEvidence.v1.md +47 -0
  190. package/docs/spec/ToolManifest.v1.md +47 -0
  191. package/docs/spec/VERIFIER_ENVIRONMENT.md +38 -0
  192. package/docs/spec/VERSIONING.md +107 -0
  193. package/docs/spec/VerificationReport.v1.md +50 -0
  194. package/docs/spec/VerifyAboutOutput.v1.md +10 -0
  195. package/docs/spec/VerifyCliOutput.v1.md +28 -0
  196. package/docs/spec/WARNINGS.md +83 -0
  197. package/docs/spec/error-codes.v1.txt +285 -0
  198. package/docs/spec/examples/agreement_delegation_v1.example.json +21 -0
  199. package/docs/spec/examples/arbitration_case_v1.example.json +26 -0
  200. package/docs/spec/examples/arbitration_verdict_v1.example.json +32 -0
  201. package/docs/spec/examples/dispute_open_envelope_v1.example.json +18 -0
  202. package/docs/spec/examples/produce_cli_output_v1.example.json +32 -0
  203. package/docs/spec/examples/release_index_signature_v1.example.json +9 -0
  204. package/docs/spec/examples/release_index_signatures_v1.example.json +14 -0
  205. package/docs/spec/examples/release_index_v1.example.json +15 -0
  206. package/docs/spec/examples/release_trust_v1.example.json +7 -0
  207. package/docs/spec/examples/release_trust_v2.example.json +22 -0
  208. package/docs/spec/examples/remote_signer_request_v1.example.json +18 -0
  209. package/docs/spec/examples/remote_signer_response_v1.example.json +8 -0
  210. package/docs/spec/examples/reputation_event_v1.example.json +29 -0
  211. package/docs/spec/examples/verification_report_v1.example.json +24 -0
  212. package/docs/spec/examples/verify_about_output_v1.example.json +29 -0
  213. package/docs/spec/examples/verify_cli_output_v1.example.json +13 -0
  214. package/docs/spec/legacy/MarketplaceAcceptance.v1.md +48 -0
  215. package/docs/spec/legacy/MarketplaceOffer.v1.md +56 -0
  216. package/docs/spec/legacy/schemas/MarketplaceAcceptance.v1.schema.json +53 -0
  217. package/docs/spec/legacy/schemas/MarketplaceOffer.v1.schema.json +61 -0
  218. package/docs/spec/producer-error-codes.v1.txt +14 -0
  219. package/docs/spec/schemas/AcceptanceCriteria.v1.schema.json +24 -0
  220. package/docs/spec/schemas/AcceptanceEvaluation.v1.schema.json +26 -0
  221. package/docs/spec/schemas/AgentEvent.v1.schema.json +49 -0
  222. package/docs/spec/schemas/AgentIdentity.v1.schema.json +129 -0
  223. package/docs/spec/schemas/AgentPassport.v1.schema.json +112 -0
  224. package/docs/spec/schemas/AgentReputation.v1.schema.json +151 -0
  225. package/docs/spec/schemas/AgentReputation.v2.schema.json +120 -0
  226. package/docs/spec/schemas/AgentRun.v1.schema.json +71 -0
  227. package/docs/spec/schemas/AgentRunSettlement.v1.schema.json +75 -0
  228. package/docs/spec/schemas/AgentWallet.v1.schema.json +54 -0
  229. package/docs/spec/schemas/AgreementDelegation.v1.schema.json +50 -0
  230. package/docs/spec/schemas/ArbitrationCase.v1.schema.json +133 -0
  231. package/docs/spec/schemas/ArbitrationVerdict.v1.schema.json +149 -0
  232. package/docs/spec/schemas/BundleHeadAttestation.v1.schema.json +21 -0
  233. package/docs/spec/schemas/ClosePackManifest.v1.schema.json +38 -0
  234. package/docs/spec/schemas/DelegationGrant.v1.schema.json +102 -0
  235. package/docs/spec/schemas/DisputeOpenEnvelope.v1.schema.json +78 -0
  236. package/docs/spec/schemas/EvidenceIndex.v1.schema.json +41 -0
  237. package/docs/spec/schemas/ExecutionIntent.v1.schema.json +85 -0
  238. package/docs/spec/schemas/FinancePackBundleManifest.v1.schema.json +38 -0
  239. package/docs/spec/schemas/FundingHold.v1.schema.json +46 -0
  240. package/docs/spec/schemas/GovernancePolicy.v1.schema.json +45 -0
  241. package/docs/spec/schemas/GovernancePolicy.v2.schema.json +70 -0
  242. package/docs/spec/schemas/InteractionDirectionMatrix.v1.schema.json +43 -0
  243. package/docs/spec/schemas/InvoiceBundleManifest.v1.schema.json +38 -0
  244. package/docs/spec/schemas/InvoiceClaim.v1.schema.json +39 -0
  245. package/docs/spec/schemas/MarketplaceAcceptance.v2.schema.json +53 -0
  246. package/docs/spec/schemas/MarketplaceOffer.v2.schema.json +61 -0
  247. package/docs/spec/schemas/MeteringReport.v1.schema.json +45 -0
  248. package/docs/spec/schemas/PricingMatrix.v1.schema.json +24 -0
  249. package/docs/spec/schemas/PricingMatrixSignatures.v1.schema.json +24 -0
  250. package/docs/spec/schemas/PricingMatrixSignatures.v2.schema.json +24 -0
  251. package/docs/spec/schemas/ProduceCliOutput.v1.schema.json +107 -0
  252. package/docs/spec/schemas/ProofBundleManifest.v1.schema.json +37 -0
  253. package/docs/spec/schemas/PublicKeys.v1.schema.json +33 -0
  254. package/docs/spec/schemas/ReleaseIndex.v1.schema.json +45 -0
  255. package/docs/spec/schemas/ReleaseIndexSignature.v1.schema.json +16 -0
  256. package/docs/spec/schemas/ReleaseIndexSignatures.v1.schema.json +16 -0
  257. package/docs/spec/schemas/ReleaseTrust.v1.schema.json +15 -0
  258. package/docs/spec/schemas/ReleaseTrust.v2.schema.json +37 -0
  259. package/docs/spec/schemas/RemoteSignerPublicKeyResponse.v1.schema.json +14 -0
  260. package/docs/spec/schemas/RemoteSignerRequest.v1.schema.json +24 -0
  261. package/docs/spec/schemas/RemoteSignerResponse.v1.schema.json +10 -0
  262. package/docs/spec/schemas/RemoteSignerSignRequest.v1.schema.json +27 -0
  263. package/docs/spec/schemas/RemoteSignerSignResponse.v1.schema.json +16 -0
  264. package/docs/spec/schemas/ReputationEvent.v1.schema.json +164 -0
  265. package/docs/spec/schemas/RevocationList.v1.schema.json +51 -0
  266. package/docs/spec/schemas/SettlementAdjustment.v1.schema.json +44 -0
  267. package/docs/spec/schemas/SettlementDecisionRecord.v1.schema.json +66 -0
  268. package/docs/spec/schemas/SettlementDecisionRecord.v2.schema.json +148 -0
  269. package/docs/spec/schemas/SettlementDecisionReport.v1.schema.json +61 -0
  270. package/docs/spec/schemas/SettlementReceipt.v1.schema.json +135 -0
  271. package/docs/spec/schemas/SlaDefinition.v1.schema.json +33 -0
  272. package/docs/spec/schemas/SlaEvaluation.v1.schema.json +26 -0
  273. package/docs/spec/schemas/TenantSettings.v1.schema.json +90 -0
  274. package/docs/spec/schemas/TenantSettings.v2.schema.json +161 -0
  275. package/docs/spec/schemas/TimestampProof.v1.schema.json +17 -0
  276. package/docs/spec/schemas/ToolCallAgreement.v1.schema.json +34 -0
  277. package/docs/spec/schemas/ToolCallEvidence.v1.schema.json +45 -0
  278. package/docs/spec/schemas/ToolManifest.v1.schema.json +54 -0
  279. package/docs/spec/schemas/VerificationReport.v1.schema.json +83 -0
  280. package/docs/spec/schemas/VerifyAboutOutput.v1.schema.json +54 -0
  281. package/docs/spec/schemas/VerifyCliOutput.v1.schema.json +75 -0
  282. package/docs/spec/schemas/VerifyReleaseOutput.v1.schema.json +47 -0
  283. package/docs/spec/x402-error-codes.v1.txt +21 -0
  284. package/docs/templates/buyer-email.txt +18 -0
  285. package/docs/templates/buyer-one-pager.md +24 -0
  286. package/package.json +40 -6
  287. package/scripts/acceptance/full-stack.mjs +734 -0
  288. package/scripts/acceptance/full-stack.sh +99 -0
  289. package/scripts/audit/build-audit-packet.mjs +242 -0
  290. package/scripts/backup-pg.sh +45 -0
  291. package/scripts/backup-restore/README.md +18 -0
  292. package/scripts/backup-restore/capture-state.mjs +130 -0
  293. package/scripts/backup-restore/client.mjs +97 -0
  294. package/scripts/backup-restore/seed-workload.mjs +235 -0
  295. package/scripts/backup-restore/verify-state.mjs +139 -0
  296. package/scripts/backup-restore-test.sh +217 -0
  297. package/scripts/chaos.js +221 -0
  298. package/scripts/ci/build-launch-cutover-packet.mjs +148 -0
  299. package/scripts/ci/build-self-serve-benchmark-report.mjs +122 -0
  300. package/scripts/ci/changelog-guard.mjs +145 -0
  301. package/scripts/ci/check-kernel-v0-launch-gate.mjs +233 -0
  302. package/scripts/ci/check-secret-hygiene.mjs +78 -0
  303. package/scripts/ci/check-version-consistency.mjs +42 -0
  304. package/scripts/ci/cli-pack-smoke.mjs +160 -0
  305. package/scripts/ci/flake-budget-guard.mjs +68 -0
  306. package/scripts/ci/generate-error-codes.mjs +54 -0
  307. package/scripts/ci/lib/lighthouse-tracker.mjs +90 -0
  308. package/scripts/ci/lib/self-serve-launch-gate.mjs +89 -0
  309. package/scripts/ci/npm-pack-smoke.mjs +454 -0
  310. package/scripts/ci/run-10x-throughput-drill.mjs +246 -0
  311. package/scripts/ci/run-10x-throughput-incident-rehearsal.mjs +325 -0
  312. package/scripts/ci/run-arbitration-workspace-browser-e2e.sh +22 -0
  313. package/scripts/ci/run-circle-sandbox-smoke.mjs +237 -0
  314. package/scripts/ci/run-go-live-gate.mjs +150 -0
  315. package/scripts/ci/run-kernel-v0-ship-gate.mjs +97 -0
  316. package/scripts/ci/run-mcp-host-smoke.mjs +275 -0
  317. package/scripts/ci/run-self-serve-launch-gate.mjs +56 -0
  318. package/scripts/ci/runtime-import-smoke.mjs +58 -0
  319. package/scripts/ci/update-lighthouse-tracker.mjs +112 -0
  320. package/scripts/closepack/lib.mjs +286 -0
  321. package/scripts/collect-debug.sh +263 -0
  322. package/scripts/demo/compositional-settlement-3hop.mjs +237 -0
  323. package/scripts/demo/delivery-robot/export-ui-fixture.mjs +188 -0
  324. package/scripts/demo/delivery-robot/generate.mjs +377 -0
  325. package/scripts/demo/kernel-agent-goes-shopping.mjs +202 -0
  326. package/scripts/demo/magic-link-first-green.mjs +118 -0
  327. package/scripts/demo/magic-link-kind-smoke.mjs +577 -0
  328. package/scripts/demo/mcp-paid-exa.mjs +1110 -0
  329. package/scripts/dev/billing-doctor.sh +145 -0
  330. package/scripts/dev/billing-smoke-prod.sh +219 -0
  331. package/scripts/dev/billing-webhook-replay.sh +161 -0
  332. package/scripts/dev/env.dev.example +29 -0
  333. package/scripts/dev/env.sh +37 -0
  334. package/scripts/dev/new-sdk-key.sh +81 -0
  335. package/scripts/dev/sdk-first-run.sh +21 -0
  336. package/scripts/dev/smoke-x402-gateway.sh +115 -0
  337. package/scripts/dev/start-api.sh +24 -0
  338. package/scripts/examples/produce-and-verify-jobproof.mjs +191 -0
  339. package/scripts/examples/sdk-first-paid-rfq.py +105 -0
  340. package/scripts/examples/sdk-first-verified-run.mjs +85 -0
  341. package/scripts/examples/sdk-first-verified-run.py +99 -0
  342. package/scripts/examples/sdk-tenant-analytics.mjs +103 -0
  343. package/scripts/examples/sdk-tenant-analytics.py +118 -0
  344. package/scripts/finance-pack/bundle.mjs +284 -0
  345. package/scripts/fixtures/generate-bundle-fixtures.mjs +877 -0
  346. package/scripts/governance/export.mjs +169 -0
  347. package/scripts/load/delivery-stress.k6.js +183 -0
  348. package/scripts/load/ingest-burst.k6.js +236 -0
  349. package/scripts/load/run-delivery-load.js +66 -0
  350. package/scripts/load/webhook-receiver.js +131 -0
  351. package/scripts/magic-link/migrate-run-records-to-db.mjs +35 -0
  352. package/scripts/mcp/probe.mjs +238 -0
  353. package/scripts/mcp/settld-mcp-http-gateway.mjs +178 -0
  354. package/scripts/mcp/settld-mcp-server.mjs +1201 -0
  355. package/scripts/openapi/write.mjs +13 -0
  356. package/scripts/ops/bootstrap-tenant-conformance.mjs +185 -0
  357. package/scripts/ops/build-x402-pilot-reliability-report.mjs +489 -0
  358. package/scripts/ops/check-x402-receipt-sample.mjs +181 -0
  359. package/scripts/ops/design-partner-run-packet.mjs +466 -0
  360. package/scripts/ops/hosted-baseline-evidence.mjs +681 -0
  361. package/scripts/ops/money-rails-chargeback-evidence.mjs +509 -0
  362. package/scripts/ops/money-rails-reconcile-evidence.mjs +180 -0
  363. package/scripts/ops/p0-seed-money-rail-operation.mjs +432 -0
  364. package/scripts/pilot/finance-pack.mjs +495 -0
  365. package/scripts/pilot/fixtures/robot-keypair.json +4 -0
  366. package/scripts/pilot/fixtures/server-signer.json +4 -0
  367. package/scripts/proof-bundle/job.mjs +109 -0
  368. package/scripts/proof-bundle/lib.mjs +92 -0
  369. package/scripts/proof-bundle/month.mjs +103 -0
  370. package/scripts/provider/conformance-run.mjs +159 -0
  371. package/scripts/provider/keys-generate.mjs +135 -0
  372. package/scripts/provider/publish.mjs +420 -0
  373. package/scripts/quickstart/x402.mjs +334 -0
  374. package/scripts/release/build-artifacts.mjs +181 -0
  375. package/scripts/release/generate-release-index.mjs +112 -0
  376. package/scripts/release/release-index-lib.mjs +232 -0
  377. package/scripts/release/sign-release-index.mjs +85 -0
  378. package/scripts/release/validate-release-assets.mjs +170 -0
  379. package/scripts/release/verify-release.mjs +261 -0
  380. package/scripts/restore-pg.sh +34 -0
  381. package/scripts/scaffold/create-settld-paid-tool.mjs +19 -0
  382. package/scripts/sdk/smoke-python.py +30 -0
  383. package/scripts/sdk/smoke.mjs +16 -0
  384. package/scripts/settlement/x402-batch-worker.mjs +1091 -0
  385. package/scripts/slo/check.mjs +178 -0
  386. package/scripts/smoke/k8s-smoke.mjs +214 -0
  387. package/scripts/spec/generate-protocol-vectors.mjs +931 -0
  388. package/scripts/test/check-no-generated-artifacts.sh +12 -0
  389. package/scripts/test/run.sh +45 -0
  390. package/scripts/trust/validate-trust-file.mjs +57 -0
  391. package/scripts/trust-config/rotate-settld-pay.mjs +277 -0
  392. package/scripts/trust-config/wizard.mjs +161 -0
  393. package/scripts/vendor-contract-test-lib.mjs +182 -0
  394. package/scripts/vendor-contract-test.mjs +55 -0
  395. package/scripts/vercel/build-mkdocs.sh +9 -0
  396. package/scripts/vercel/ignore-mkdocs.sh +25 -0
  397. package/scripts/vercel/install-mkdocs.sh +6 -0
  398. package/scripts/verify-pg.js +217 -0
  399. package/scripts/x402/receipt-verify.mjs +289 -0
  400. package/services/finance-sink/src/dedupe-store.js +29 -6
  401. package/services/receiver/src/dedupe-store.js +29 -5
  402. package/services/x402-gateway/Dockerfile +13 -0
  403. package/services/x402-gateway/README.md +58 -0
  404. package/services/x402-gateway/examples/upstream-mock.js +337 -0
  405. package/services/x402-gateway/src/server.js +947 -0
  406. package/src/api/app.js +32517 -16877
  407. package/src/api/maintenance.js +70 -0
  408. package/src/api/openapi.js +1130 -17
  409. package/src/api/persistence.js +272 -0
  410. package/src/api/server.js +81 -5
  411. package/src/api/store.js +1248 -6
  412. package/src/api/workers/deliveries.js +99 -4
  413. package/src/api/workers/insolvency-sweep.js +159 -0
  414. package/src/core/agent-card.js +69 -0
  415. package/src/core/agent-wallets.js +97 -0
  416. package/src/core/agreement-delegation.js +549 -0
  417. package/src/core/billing-plans.js +40 -6
  418. package/src/core/circle-reserve-adapter.js +845 -0
  419. package/src/core/maintenance-locks.js +1 -0
  420. package/src/core/paid-tool-manifest.js +318 -0
  421. package/src/core/provider-publish-conformance.js +525 -0
  422. package/src/core/provider-publish-proof.js +396 -0
  423. package/src/core/provider-quote-signature.js +170 -0
  424. package/src/core/settld-keys.js +112 -0
  425. package/src/core/settld-pay-token.js +344 -0
  426. package/src/core/settlement-kernel.js +213 -2
  427. package/src/core/settlement-verifier.js +335 -0
  428. package/src/core/tool-call-agreement.js +112 -0
  429. package/src/core/tool-call-evidence.js +144 -0
  430. package/src/core/tool-provider-signature.js +98 -0
  431. package/src/core/x402-escalation-override.js +258 -0
  432. package/src/core/x402-gate.js +118 -0
  433. package/src/core/x402-provider-refund-decision.js +220 -0
  434. package/src/core/x402-receipt-verifier.js +708 -0
  435. package/src/core/x402-reversal-command.js +251 -0
  436. package/src/core/x402-wallet-issuer-decision.js +252 -0
  437. package/src/core/zk-verifier.js +300 -0
  438. package/src/db/migrations/029_reputation_event_index.sql +54 -0
  439. package/src/db/migrations/030_artifacts_source_event_unique_job_only.sql +15 -0
  440. package/src/db/pg.js +18 -7
  441. package/src/db/store-pg.js +838 -72
@@ -0,0 +1,149 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/ArbitrationVerdict.v1.schema.json",
4
+ "title": "ArbitrationVerdict.v1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "verdictId",
10
+ "caseId",
11
+ "tenantId",
12
+ "runId",
13
+ "settlementId",
14
+ "disputeId",
15
+ "arbiterAgentId",
16
+ "outcome",
17
+ "releaseRatePct",
18
+ "rationale",
19
+ "evidenceRefs",
20
+ "issuedAt",
21
+ "signature",
22
+ "revision",
23
+ "createdAt",
24
+ "updatedAt"
25
+ ],
26
+ "properties": {
27
+ "schemaVersion": { "const": "ArbitrationVerdict.v1" },
28
+ "verdictId": {
29
+ "type": "string",
30
+ "minLength": 3,
31
+ "maxLength": 200
32
+ },
33
+ "caseId": {
34
+ "type": "string",
35
+ "minLength": 3,
36
+ "maxLength": 200
37
+ },
38
+ "tenantId": {
39
+ "type": "string",
40
+ "minLength": 1,
41
+ "maxLength": 128,
42
+ "pattern": "^[A-Za-z0-9:_-]+$"
43
+ },
44
+ "runId": {
45
+ "type": "string",
46
+ "minLength": 3,
47
+ "maxLength": 128,
48
+ "pattern": "^[A-Za-z0-9:_-]+$"
49
+ },
50
+ "settlementId": {
51
+ "type": "string",
52
+ "minLength": 3,
53
+ "maxLength": 200
54
+ },
55
+ "disputeId": {
56
+ "type": "string",
57
+ "minLength": 3,
58
+ "maxLength": 200
59
+ },
60
+ "arbiterAgentId": {
61
+ "type": "string",
62
+ "minLength": 3,
63
+ "maxLength": 128,
64
+ "pattern": "^[A-Za-z0-9:_-]+$"
65
+ },
66
+ "outcome": {
67
+ "type": "string",
68
+ "enum": ["accepted", "rejected", "partial"]
69
+ },
70
+ "releaseRatePct": {
71
+ "type": "integer",
72
+ "minimum": 0,
73
+ "maximum": 100
74
+ },
75
+ "rationale": {
76
+ "type": "string",
77
+ "minLength": 1,
78
+ "maxLength": 4000
79
+ },
80
+ "evidenceRefs": {
81
+ "type": "array",
82
+ "maxItems": 1000,
83
+ "uniqueItems": true,
84
+ "items": {
85
+ "type": "string",
86
+ "minLength": 1,
87
+ "maxLength": 512
88
+ }
89
+ },
90
+ "issuedAt": { "type": "string", "format": "date-time" },
91
+ "appealRef": {
92
+ "type": "object",
93
+ "additionalProperties": false,
94
+ "required": ["appealCaseId", "parentVerdictId"],
95
+ "properties": {
96
+ "appealCaseId": {
97
+ "type": "string",
98
+ "minLength": 3,
99
+ "maxLength": 200
100
+ },
101
+ "parentVerdictId": {
102
+ "type": "string",
103
+ "minLength": 3,
104
+ "maxLength": 200
105
+ },
106
+ "reason": {
107
+ "type": "string",
108
+ "minLength": 1,
109
+ "maxLength": 1000
110
+ }
111
+ }
112
+ },
113
+ "signature": {
114
+ "type": "object",
115
+ "additionalProperties": false,
116
+ "required": ["algorithm", "signerKeyId", "verdictHash", "signature"],
117
+ "properties": {
118
+ "algorithm": {
119
+ "type": "string",
120
+ "enum": ["ed25519"]
121
+ },
122
+ "signerKeyId": {
123
+ "type": "string",
124
+ "minLength": 1,
125
+ "maxLength": 200
126
+ },
127
+ "verdictHash": {
128
+ "type": "string",
129
+ "pattern": "^[a-f0-9]{64}$"
130
+ },
131
+ "signature": {
132
+ "type": "string",
133
+ "minLength": 1,
134
+ "maxLength": 4096
135
+ }
136
+ }
137
+ },
138
+ "metadata": {
139
+ "type": "object",
140
+ "additionalProperties": true
141
+ },
142
+ "revision": {
143
+ "type": "integer",
144
+ "minimum": 0
145
+ },
146
+ "createdAt": { "type": "string", "format": "date-time" },
147
+ "updatedAt": { "type": "string", "format": "date-time" }
148
+ }
149
+ }
@@ -0,0 +1,21 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/BundleHeadAttestation.v1.schema.json",
4
+ "title": "BundleHeadAttestation.v1",
5
+ "type": "object",
6
+ "required": ["schemaVersion", "kind", "tenantId", "scope", "generatedAt", "manifestHash", "heads", "signedAt", "signerKeyId", "attestationHash", "signature"],
7
+ "properties": {
8
+ "schemaVersion": { "const": "BundleHeadAttestation.v1" },
9
+ "kind": { "type": "string" },
10
+ "tenantId": { "type": "string" },
11
+ "scope": { "type": "object" },
12
+ "generatedAt": { "type": "string" },
13
+ "manifestHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
14
+ "heads": { "type": "object" },
15
+ "timestampProof": { "$ref": "https://settld.local/schemas/TimestampProof.v1.schema.json" },
16
+ "signedAt": { "type": "string" },
17
+ "signerKeyId": { "type": "string" },
18
+ "attestationHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
19
+ "signature": { "type": "string" }
20
+ }
21
+ }
@@ -0,0 +1,38 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/ClosePackManifest.v1.schema.json",
4
+ "title": "ClosePackManifest.v1",
5
+ "type": "object",
6
+ "required": ["schemaVersion", "type", "tenantId", "invoiceId", "createdAt", "protocol", "hashing", "files"],
7
+ "properties": {
8
+ "schemaVersion": { "const": "ClosePackManifest.v1" },
9
+ "type": { "const": "ClosePack.v1" },
10
+ "tenantId": { "type": "string" },
11
+ "invoiceId": { "type": "string" },
12
+ "createdAt": { "type": "string" },
13
+ "protocol": { "type": "string" },
14
+ "hashing": {
15
+ "type": "object",
16
+ "required": ["schemaVersion", "fileOrder", "excludes"],
17
+ "properties": {
18
+ "schemaVersion": { "const": "ClosePackManifestHash.v1" },
19
+ "fileOrder": { "const": "path_asc" },
20
+ "excludes": { "type": "array", "items": { "type": "string" } }
21
+ }
22
+ },
23
+ "files": {
24
+ "type": "array",
25
+ "items": {
26
+ "type": "object",
27
+ "required": ["name", "sha256", "bytes"],
28
+ "properties": {
29
+ "name": { "type": "string" },
30
+ "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
31
+ "bytes": { "type": "integer", "minimum": 0 }
32
+ }
33
+ }
34
+ },
35
+ "manifestHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
36
+ }
37
+ }
38
+
@@ -0,0 +1,102 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/DelegationGrant.v1.schema.json",
4
+ "title": "DelegationGrant.v1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "grantId",
10
+ "tenantId",
11
+ "delegatorAgentId",
12
+ "delegateeAgentId",
13
+ "scope",
14
+ "spendLimit",
15
+ "chainBinding",
16
+ "validity",
17
+ "revocation",
18
+ "createdAt",
19
+ "grantHash"
20
+ ],
21
+ "properties": {
22
+ "schemaVersion": { "const": "DelegationGrant.v1" },
23
+ "grantId": { "type": "string", "minLength": 1, "maxLength": 200 },
24
+ "tenantId": { "type": "string", "minLength": 1, "maxLength": 200 },
25
+ "delegatorAgentId": { "type": "string", "minLength": 1, "maxLength": 200 },
26
+ "delegateeAgentId": { "type": "string", "minLength": 1, "maxLength": 200 },
27
+ "scope": {
28
+ "type": "object",
29
+ "additionalProperties": false,
30
+ "required": ["allowedRiskClasses", "sideEffectingAllowed"],
31
+ "properties": {
32
+ "allowedProviderIds": {
33
+ "type": "array",
34
+ "uniqueItems": true,
35
+ "items": { "type": "string", "minLength": 1, "maxLength": 200 }
36
+ },
37
+ "allowedToolIds": {
38
+ "type": "array",
39
+ "uniqueItems": true,
40
+ "items": { "type": "string", "minLength": 1, "maxLength": 200 }
41
+ },
42
+ "allowedRiskClasses": {
43
+ "type": "array",
44
+ "minItems": 1,
45
+ "uniqueItems": true,
46
+ "items": {
47
+ "type": "string",
48
+ "enum": ["read", "compute", "action", "financial"]
49
+ }
50
+ },
51
+ "sideEffectingAllowed": { "type": "boolean" }
52
+ }
53
+ },
54
+ "spendLimit": {
55
+ "type": "object",
56
+ "additionalProperties": false,
57
+ "required": ["currency", "maxPerCallCents", "maxTotalCents"],
58
+ "properties": {
59
+ "currency": { "type": "string", "minLength": 3, "maxLength": 8 },
60
+ "maxPerCallCents": { "type": "integer", "minimum": 0 },
61
+ "maxTotalCents": { "type": "integer", "minimum": 0 }
62
+ }
63
+ },
64
+ "chainBinding": {
65
+ "type": "object",
66
+ "additionalProperties": false,
67
+ "required": ["rootGrantHash", "parentGrantHash", "depth", "maxDelegationDepth"],
68
+ "properties": {
69
+ "rootGrantHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
70
+ "parentGrantHash": { "type": ["string", "null"], "pattern": "^[0-9a-f]{64}$" },
71
+ "depth": { "type": "integer", "minimum": 0 },
72
+ "maxDelegationDepth": { "type": "integer", "minimum": 0 }
73
+ }
74
+ },
75
+ "validity": {
76
+ "type": "object",
77
+ "additionalProperties": false,
78
+ "required": ["issuedAt", "notBefore", "expiresAt"],
79
+ "properties": {
80
+ "issuedAt": { "type": "string", "format": "date-time" },
81
+ "notBefore": { "type": "string", "format": "date-time" },
82
+ "expiresAt": { "type": "string", "format": "date-time" }
83
+ }
84
+ },
85
+ "revocation": {
86
+ "type": "object",
87
+ "additionalProperties": false,
88
+ "required": ["revocable", "revokedAt", "revocationReasonCode"],
89
+ "properties": {
90
+ "revocable": { "type": "boolean" },
91
+ "revokedAt": { "type": ["string", "null"], "format": "date-time" },
92
+ "revocationReasonCode": { "type": ["string", "null"], "maxLength": 120 }
93
+ }
94
+ },
95
+ "metadata": {
96
+ "type": "object",
97
+ "additionalProperties": true
98
+ },
99
+ "createdAt": { "type": "string", "format": "date-time" },
100
+ "grantHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
101
+ }
102
+ }
@@ -0,0 +1,78 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/DisputeOpenEnvelope.v1.schema.json",
4
+ "title": "DisputeOpenEnvelope.v1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "artifactType",
10
+ "artifactId",
11
+ "envelopeId",
12
+ "caseId",
13
+ "tenantId",
14
+ "agreementHash",
15
+ "receiptHash",
16
+ "holdHash",
17
+ "openedByAgentId",
18
+ "openedAt",
19
+ "reasonCode",
20
+ "nonce",
21
+ "signerKeyId",
22
+ "envelopeHash",
23
+ "signature"
24
+ ],
25
+ "properties": {
26
+ "schemaVersion": { "const": "DisputeOpenEnvelope.v1" },
27
+ "artifactType": { "const": "DisputeOpenEnvelope.v1" },
28
+ "artifactId": {
29
+ "type": "string",
30
+ "minLength": 3,
31
+ "maxLength": 240,
32
+ "pattern": "^[A-Za-z0-9:_-]+$"
33
+ },
34
+ "envelopeId": {
35
+ "type": "string",
36
+ "minLength": 3,
37
+ "maxLength": 240,
38
+ "pattern": "^[A-Za-z0-9:_-]+$"
39
+ },
40
+ "caseId": {
41
+ "type": "string",
42
+ "minLength": 3,
43
+ "maxLength": 240,
44
+ "pattern": "^[A-Za-z0-9:_-]+$"
45
+ },
46
+ "tenantId": {
47
+ "type": "string",
48
+ "minLength": 1,
49
+ "maxLength": 128,
50
+ "pattern": "^[A-Za-z0-9:_-]+$"
51
+ },
52
+ "agreementHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
53
+ "receiptHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
54
+ "holdHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
55
+ "openedByAgentId": {
56
+ "type": "string",
57
+ "minLength": 3,
58
+ "maxLength": 128,
59
+ "pattern": "^[A-Za-z0-9:_-]+$"
60
+ },
61
+ "openedAt": { "type": "string", "format": "date-time" },
62
+ "reasonCode": { "type": "string", "pattern": "^[A-Z0-9_]{2,64}$" },
63
+ "nonce": {
64
+ "type": "string",
65
+ "minLength": 8,
66
+ "maxLength": 240,
67
+ "pattern": "^[A-Za-z0-9:_-]+$"
68
+ },
69
+ "signerKeyId": {
70
+ "type": "string",
71
+ "minLength": 8,
72
+ "maxLength": 240,
73
+ "pattern": "^[A-Za-z0-9:_-]+$"
74
+ },
75
+ "envelopeHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
76
+ "signature": { "type": "string", "minLength": 16 }
77
+ }
78
+ }
@@ -0,0 +1,41 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/EvidenceIndex.v1.schema.json",
4
+ "title": "EvidenceIndex.v1",
5
+ "type": "object",
6
+ "required": ["schemaVersion", "generatedAt", "jobProof", "items"],
7
+ "properties": {
8
+ "schemaVersion": { "const": "EvidenceIndex.v1" },
9
+ "generatedAt": { "type": "string" },
10
+ "jobProof": {
11
+ "type": "object",
12
+ "required": ["embeddedPath", "manifestHash", "headAttestationHash"],
13
+ "properties": {
14
+ "embeddedPath": { "type": "string" },
15
+ "manifestHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
16
+ "headAttestationHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
17
+ }
18
+ },
19
+ "items": {
20
+ "type": "array",
21
+ "items": {
22
+ "type": "object",
23
+ "required": ["key", "source"],
24
+ "properties": {
25
+ "key": { "type": "string" },
26
+ "source": { "enum": ["metering_evidence_ref", "job_evidence_event"] },
27
+ "path": { "type": ["string", "null"] },
28
+ "sha256": { "type": ["string", "null"], "pattern": "^[0-9a-f]{64}$" },
29
+ "eventId": { "type": ["string", "null"] },
30
+ "at": { "type": ["string", "null"] },
31
+ "evidenceId": { "type": ["string", "null"] },
32
+ "kind": { "type": ["string", "null"] },
33
+ "contentType": { "type": ["string", "null"] },
34
+ "sizeBytes": { "type": ["integer", "null"], "minimum": 0 },
35
+ "evidenceRefHash": { "type": ["string", "null"], "pattern": "^[0-9a-f]{64}$" }
36
+ }
37
+ }
38
+ }
39
+ }
40
+ }
41
+
@@ -0,0 +1,85 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/ExecutionIntent.v1.schema.json",
4
+ "title": "ExecutionIntent.v1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "intentId",
10
+ "tenantId",
11
+ "agentId",
12
+ "requestFingerprint",
13
+ "riskProfile",
14
+ "spendBounds",
15
+ "policyBinding",
16
+ "idempotencyKey",
17
+ "nonce",
18
+ "expiresAt",
19
+ "createdAt",
20
+ "intentHash"
21
+ ],
22
+ "properties": {
23
+ "schemaVersion": { "const": "ExecutionIntent.v1" },
24
+ "intentId": { "type": "string", "minLength": 1, "maxLength": 200 },
25
+ "tenantId": { "type": "string", "minLength": 1, "maxLength": 200 },
26
+ "agentId": { "type": "string", "minLength": 1, "maxLength": 200 },
27
+ "runId": { "type": "string", "maxLength": 200 },
28
+ "agreementHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
29
+ "quoteId": { "type": "string", "maxLength": 200 },
30
+ "requestFingerprint": {
31
+ "type": "object",
32
+ "additionalProperties": false,
33
+ "required": ["canonicalization", "method", "path", "querySha256", "bodySha256", "requestSha256"],
34
+ "properties": {
35
+ "canonicalization": { "const": "rfc8785-jcs" },
36
+ "method": { "type": "string", "minLength": 1, "maxLength": 16 },
37
+ "path": { "type": "string", "minLength": 1, "maxLength": 2048 },
38
+ "querySha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
39
+ "bodySha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
40
+ "requestSha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
41
+ }
42
+ },
43
+ "riskProfile": {
44
+ "type": "object",
45
+ "additionalProperties": false,
46
+ "required": ["riskClass", "sideEffecting", "expectedDeterminism", "maxLossCents", "requiresHumanApproval"],
47
+ "properties": {
48
+ "riskClass": { "type": "string", "enum": ["read", "compute", "action", "financial"] },
49
+ "sideEffecting": { "type": "boolean" },
50
+ "expectedDeterminism": {
51
+ "type": "string",
52
+ "enum": ["deterministic", "bounded_nondeterministic", "open_nondeterministic"]
53
+ },
54
+ "maxLossCents": { "type": "integer", "minimum": 0 },
55
+ "requiresHumanApproval": { "type": "boolean" }
56
+ }
57
+ },
58
+ "spendBounds": {
59
+ "type": "object",
60
+ "additionalProperties": false,
61
+ "required": ["currency", "maxAmountCents"],
62
+ "properties": {
63
+ "currency": { "type": "string", "minLength": 3, "maxLength": 8 },
64
+ "maxAmountCents": { "type": "integer", "minimum": 0 }
65
+ }
66
+ },
67
+ "policyBinding": {
68
+ "type": "object",
69
+ "additionalProperties": false,
70
+ "required": ["policyId", "policyVersion", "policyHash", "verificationMethodHash"],
71
+ "properties": {
72
+ "policyId": { "type": "string", "minLength": 1, "maxLength": 200 },
73
+ "policyVersion": { "type": "integer", "minimum": 1 },
74
+ "policyHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
75
+ "verificationMethodHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
76
+ }
77
+ },
78
+ "idempotencyKey": { "type": "string", "minLength": 1, "maxLength": 200 },
79
+ "nonce": { "type": "string", "minLength": 8, "maxLength": 256 },
80
+ "expiresAt": { "type": "string", "format": "date-time" },
81
+ "metadata": { "type": "object", "additionalProperties": true },
82
+ "createdAt": { "type": "string", "format": "date-time" },
83
+ "intentHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
84
+ }
85
+ }
@@ -0,0 +1,38 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/FinancePackBundleManifest.v1.schema.json",
4
+ "title": "FinancePackBundleManifest.v1",
5
+ "type": "object",
6
+ "required": ["schemaVersion", "type", "tenantId", "period", "createdAt", "protocol", "hashing", "files"],
7
+ "properties": {
8
+ "schemaVersion": { "const": "FinancePackBundleManifest.v1" },
9
+ "type": { "const": "FinancePackBundle.v1" },
10
+ "tenantId": { "type": "string" },
11
+ "period": { "type": "string" },
12
+ "createdAt": { "type": "string" },
13
+ "protocol": { "type": "string" },
14
+ "hashing": {
15
+ "type": "object",
16
+ "required": ["schemaVersion", "fileOrder", "excludes"],
17
+ "properties": {
18
+ "schemaVersion": { "const": "FinancePackBundleManifestHash.v1" },
19
+ "fileOrder": { "const": "path_asc" },
20
+ "excludes": { "type": "array", "items": { "type": "string" } }
21
+ }
22
+ },
23
+ "files": {
24
+ "type": "array",
25
+ "items": {
26
+ "type": "object",
27
+ "required": ["name", "sha256", "bytes"],
28
+ "properties": {
29
+ "name": { "type": "string" },
30
+ "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
31
+ "bytes": { "type": "integer", "minimum": 0 }
32
+ }
33
+ }
34
+ },
35
+ "manifestHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
36
+ }
37
+ }
38
+
@@ -0,0 +1,46 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/FundingHold.v1.schema.json",
4
+ "title": "FundingHold.v1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "tenantId",
10
+ "agreementHash",
11
+ "receiptHash",
12
+ "payerAgentId",
13
+ "payeeAgentId",
14
+ "amountCents",
15
+ "heldAmountCents",
16
+ "currency",
17
+ "holdbackBps",
18
+ "challengeWindowMs",
19
+ "createdAt",
20
+ "holdHash",
21
+ "status",
22
+ "revision",
23
+ "updatedAt"
24
+ ],
25
+ "properties": {
26
+ "schemaVersion": { "const": "FundingHold.v1" },
27
+ "tenantId": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9:_-]+$" },
28
+ "agreementHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
29
+ "receiptHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
30
+ "payerAgentId": { "type": "string", "minLength": 3, "maxLength": 128, "pattern": "^[A-Za-z0-9:_-]+$" },
31
+ "payeeAgentId": { "type": "string", "minLength": 3, "maxLength": 128, "pattern": "^[A-Za-z0-9:_-]+$" },
32
+ "amountCents": { "type": "integer", "minimum": 1 },
33
+ "heldAmountCents": { "type": "integer", "minimum": 0 },
34
+ "currency": { "type": "string", "minLength": 3, "maxLength": 12, "pattern": "^[A-Z][A-Z0-9_]{2,11}$" },
35
+ "holdbackBps": { "type": "integer", "minimum": 0 },
36
+ "challengeWindowMs": { "type": "integer", "minimum": 0 },
37
+ "createdAt": { "type": "string", "format": "date-time" },
38
+ "holdHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
39
+ "status": { "type": "string", "enum": ["held", "released", "refunded"] },
40
+ "resolvedAt": { "type": "string", "format": "date-time" },
41
+ "revision": { "type": "integer", "minimum": 0 },
42
+ "updatedAt": { "type": "string", "format": "date-time" },
43
+ "metadata": { "type": "object", "additionalProperties": true }
44
+ }
45
+ }
46
+
@@ -0,0 +1,45 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://settld.local/schemas/GovernancePolicy.v1.schema.json",
4
+ "title": "GovernancePolicy.v1",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": ["schemaVersion", "policyId", "generatedAt", "algorithms", "verificationReportSigners", "bundleHeadAttestationSigners"],
8
+ "properties": {
9
+ "schemaVersion": { "const": "GovernancePolicy.v1" },
10
+ "policyId": { "type": "string" },
11
+ "generatedAt": { "type": "string" },
12
+ "algorithms": {
13
+ "type": "array",
14
+ "minItems": 1,
15
+ "items": { "type": "string", "enum": ["ed25519"] }
16
+ },
17
+ "verificationReportSigners": {
18
+ "type": "array",
19
+ "items": { "$ref": "#/$defs/SignerRule" }
20
+ },
21
+ "bundleHeadAttestationSigners": {
22
+ "type": "array",
23
+ "items": { "$ref": "#/$defs/SignerRule" }
24
+ }
25
+ },
26
+ "$defs": {
27
+ "SignerRule": {
28
+ "type": "object",
29
+ "additionalProperties": false,
30
+ "required": ["subjectType", "allowedScopes", "allowedKeyIds", "requireGoverned", "requiredPurpose"],
31
+ "properties": {
32
+ "subjectType": { "type": "string" },
33
+ "allowedScopes": {
34
+ "type": "array",
35
+ "minItems": 1,
36
+ "items": { "type": "string", "enum": ["global", "tenant"] }
37
+ },
38
+ "allowedKeyIds": { "type": ["array", "null"], "items": { "type": "string" } },
39
+ "requireGoverned": { "type": "boolean" },
40
+ "requiredPurpose": { "type": "string", "enum": ["server"] }
41
+ }
42
+ }
43
+ }
44
+ }
45
+