settld 0.1.2 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +93 -3
- package/SETTLD_VERSION +1 -1
- package/bin/settld-mcp +2 -0
- package/bin/settld.js +71 -0
- package/conformance/kernel-v0/README.md +7 -0
- package/conformance/kernel-v0/run.mjs +292 -4
- package/docs/ACCESS.md +57 -0
- package/docs/ADOPTION_CHECKLIST.md +44 -0
- package/docs/ALERTS.md +198 -0
- package/docs/ARCHITECTURE.md +69 -0
- package/docs/ARCHITECTURE_FOUNDER_GUIDE.md +284 -0
- package/docs/ARTIFACTS.md +60 -0
- package/docs/CERTIFICATION_CHECKLIST.md +33 -0
- package/docs/CIRCLE_SANDBOX_E2E.md +152 -0
- package/docs/CONFIG.md +297 -0
- package/docs/CONTRACTS_APIS.md +23 -0
- package/docs/DEPRECATION.md +31 -0
- package/docs/DOMAIN_MODEL.md +92 -0
- package/docs/EVENT_ENVELOPE.md +53 -0
- package/docs/FINANCE_PACK_FORMAT.md +53 -0
- package/docs/INCIDENT_TAXONOMY.md +30 -0
- package/docs/JOB_STATE_MACHINE.md +66 -0
- package/docs/KERNEL_COMPATIBLE.md +60 -0
- package/docs/KERNEL_V0.md +40 -0
- package/docs/KEY_ROTATION.md +80 -0
- package/docs/LEDGER.md +82 -0
- package/docs/LIVENESS.md +76 -0
- package/docs/MVP_BUILD_ORDER.md +36 -0
- package/docs/ONCALL_PLAYBOOK.md +39 -0
- package/docs/OPERATIONS_SIGNING.md +20 -0
- package/docs/OVERVIEW.md +190 -0
- package/docs/PERF_BASELINE.md +85 -0
- package/docs/PRD.md +77 -0
- package/docs/QUICKSTART_KERNEL_V0.md +96 -0
- package/docs/QUICKSTART_MCP.md +377 -0
- package/docs/QUICKSTART_MCP_HOSTS.md +210 -0
- package/docs/QUICKSTART_POLICY_PACKS.md +65 -0
- package/docs/QUICKSTART_PRODUCE.md +61 -0
- package/docs/QUICKSTART_PROFILES.md +198 -0
- package/docs/QUICKSTART_RELEASE_VERIFY.md +39 -0
- package/docs/QUICKSTART_SDK.md +125 -0
- package/docs/QUICKSTART_SDK_PYTHON.md +111 -0
- package/docs/QUICKSTART_VERIFY.md +54 -0
- package/docs/QUICKSTART_X402_GATEWAY.md +317 -0
- package/docs/README.md +33 -0
- package/docs/RELEASE_CHECKLIST.md +182 -0
- package/docs/RELEASING.md +82 -0
- package/docs/REPO_SETTINGS.md +37 -0
- package/docs/RUNBOOK.md +86 -0
- package/docs/SKILLS.md +42 -0
- package/docs/SKILL_BUNDLE_FORMAT.md +48 -0
- package/docs/SLO.md +131 -0
- package/docs/SUMMARY.md +17 -0
- package/docs/SUPPORT.md +31 -0
- package/docs/THREAT_MODEL.md +36 -0
- package/docs/TRUST.md +59 -0
- package/docs/WORKFLOW.md +35 -0
- package/docs/X402_BATCH_SETTLEMENT.md +126 -0
- package/docs/blog/2026-02-14-your-ai-agent-just-spent-500-where-is-the-receipt.md +73 -0
- package/docs/examples/x402-provider-payout-registry.example.json +14 -0
- package/docs/gitbook/README.md +64 -0
- package/docs/gitbook/SETUP.md +25 -0
- package/docs/gitbook/SUMMARY.md +15 -0
- package/docs/gitbook/api-reference.md +73 -0
- package/docs/gitbook/closepacks.md +55 -0
- package/docs/gitbook/conformance.md +59 -0
- package/docs/gitbook/core-primitives.md +85 -0
- package/docs/gitbook/dispute-lifecycle.md +33 -0
- package/docs/gitbook/faq.md +21 -0
- package/docs/gitbook/guides.md +49 -0
- package/docs/gitbook/operations-runbook.md +36 -0
- package/docs/gitbook/quickstart.md +103 -0
- package/docs/gitbook/replay-and-audit.md +30 -0
- package/docs/gitbook/sdk-reference.md +35 -0
- package/docs/gitbook/security-model.md +58 -0
- package/docs/integrations/README.md +15 -0
- package/docs/integrations/github-actions-verify.yml +31 -0
- package/docs/integrations/github-actions.md +34 -0
- package/docs/integrations/openclaw/CLAWHUB_PUBLISH_CHECKLIST.md +65 -0
- package/docs/integrations/openclaw/PUBLIC_QUICKSTART.md +95 -0
- package/docs/integrations/openclaw/settld-mcp-skill/SKILL.md +69 -0
- package/docs/integrations/openclaw/settld-mcp-skill/mcp-server.example.json +12 -0
- package/docs/kernel-compatible/capabilities.json +36 -0
- package/docs/marketing/agent-commerce-substrate.md +78 -0
- package/docs/marketing/hn-repost-2026-02-17.md +102 -0
- package/docs/marketing/show-hn-post.md +45 -0
- package/docs/ops/ARTIFACT_VERIFICATION_STATUS.md +43 -0
- package/docs/ops/BILLING_WEBHOOK_REPLAY.md +105 -0
- package/docs/ops/CI_FLAKE_BUDGET.md +31 -0
- package/docs/ops/DISPUTE_FINANCE_RECONCILIATION_PACKET.md +56 -0
- package/docs/ops/GO_LIVE_GATE_S13.md +27 -0
- package/docs/ops/HOSTED_BASELINE_R2.md +129 -0
- package/docs/ops/KERNEL_V0_SHIP_GATE.md +69 -0
- package/docs/ops/LIGHTHOUSE_PRODUCTION_CLOSE.md +51 -0
- package/docs/ops/MCP_COMPATIBILITY_MATRIX.md +30 -0
- package/docs/ops/MINIMUM_PRODUCTION_TOPOLOGY.md +89 -0
- package/docs/ops/P0_BACKEND_PROGRESS.md +150 -0
- package/docs/ops/PAYMENTS_ALPHA_R5.md +105 -0
- package/docs/ops/PILOT_ONBOARDING_RUNBOOK.md +112 -0
- package/docs/ops/PRODUCTION_DEPLOYMENT_CHECKLIST.md +140 -0
- package/docs/ops/R1_SLOS.md +66 -0
- package/docs/ops/RELEASE_SIGNING_INCIDENT.md +58 -0
- package/docs/ops/SELF_SERVE_LAUNCH_AUTOMATION.md +89 -0
- package/docs/ops/THROUGHPUT_DRILL_10X.md +48 -0
- package/docs/ops/TRUST_CONFIG_WIZARD.md +60 -0
- package/docs/ops/X402_PILOT_WEEKLY_METRICS.md +76 -0
- package/docs/ops/tool-call-disputes-holdback.md +52 -0
- package/docs/pilot-kit/PILOT_PACKAGE_SCORECARD_X402.md +46 -0
- package/docs/pilot-kit/README.md +29 -0
- package/docs/pilot-kit/architecture-one-pager.md +48 -0
- package/docs/pilot-kit/buyer-email.txt +19 -0
- package/docs/pilot-kit/buyer-one-pager.md +31 -0
- package/docs/pilot-kit/gtm-pilot-playbook.md +182 -0
- package/docs/pilot-kit/offline-verify.md +33 -0
- package/docs/pilot-kit/procurement-one-pager.md +50 -0
- package/docs/pilot-kit/rfp-clause.md +46 -0
- package/docs/pilot-kit/roi-calculator-template.csv +2 -0
- package/docs/pilot-kit/security-qa.md +153 -0
- package/docs/pilot-kit/security-summary.md +35 -0
- package/docs/plans/2026-02-13-mcp-spike-design.md +113 -0
- package/docs/plans/2026-02-20-trust-os-v1-jira-backlog.md +348 -0
- package/docs/plans/2026-02-21-agent-economic-actor-operating-model.md +169 -0
- package/docs/plans/2026-02-21-trust-os-v1-strategy.md +241 -0
- package/docs/research/2026-02-21-agent-spend-host-landscape.md +57 -0
- package/docs/spec/AcceptanceCriteria.v1.md +17 -0
- package/docs/spec/AcceptanceEvaluation.v1.md +10 -0
- package/docs/spec/AgentEvent.v1.md +47 -0
- package/docs/spec/AgentIdentity.v1.md +62 -0
- package/docs/spec/AgentPassport.v1.md +95 -0
- package/docs/spec/AgentReputation.v1.md +59 -0
- package/docs/spec/AgentReputation.v2.md +52 -0
- package/docs/spec/AgentRun.v1.md +47 -0
- package/docs/spec/AgentRunSettlement.v1.md +52 -0
- package/docs/spec/AgentWallet.v1.md +43 -0
- package/docs/spec/AgreementDelegation.v1.md +109 -0
- package/docs/spec/ArbitrationCase.v1.md +67 -0
- package/docs/spec/ArbitrationOutcomeMapping.v1.md +62 -0
- package/docs/spec/ArbitrationVerdict.v1.md +60 -0
- package/docs/spec/BundleHeadAttestation.v1.md +32 -0
- package/docs/spec/CANONICAL_JSON.md +31 -0
- package/docs/spec/CRYPTOGRAPHY.md +61 -0
- package/docs/spec/ClosePack.v1.md +49 -0
- package/docs/spec/ClosePackManifest.v1.md +24 -0
- package/docs/spec/DelegationGrant.v1.md +90 -0
- package/docs/spec/DisputeCaseLifecycle.v1.md +51 -0
- package/docs/spec/DisputeOpenEnvelope.v1.md +43 -0
- package/docs/spec/ERRORS.md +76 -0
- package/docs/spec/ESCROW_NETTING_INVARIANTS.md +71 -0
- package/docs/spec/EvidenceIndex.v1.md +20 -0
- package/docs/spec/ExecutionIntent.v1.md +90 -0
- package/docs/spec/FinancePackBundleManifest.v1.md +24 -0
- package/docs/spec/FundingHold.v1.md +60 -0
- package/docs/spec/GovernancePolicy.v1.md +34 -0
- package/docs/spec/GovernancePolicy.v2.md +30 -0
- package/docs/spec/INVARIANTS.md +389 -0
- package/docs/spec/InteractionDirectionMatrix.v1.md +30 -0
- package/docs/spec/InvoiceBundleManifest.v1.md +24 -0
- package/docs/spec/InvoiceClaim.v1.md +11 -0
- package/docs/spec/MONEY_RAIL_STATE_MACHINE.md +58 -0
- package/docs/spec/MarketplaceAcceptance.v2.md +46 -0
- package/docs/spec/MarketplaceOffer.v2.md +54 -0
- package/docs/spec/MeteringReport.v1.md +18 -0
- package/docs/spec/OperatorAction.v1.md +90 -0
- package/docs/spec/PRODUCER_ERRORS.md +42 -0
- package/docs/spec/PolicyDecision.v1.md +83 -0
- package/docs/spec/PricingMatrix.v1.md +20 -0
- package/docs/spec/PricingMatrixSignatures.v1.md +30 -0
- package/docs/spec/PricingMatrixSignatures.v2.md +29 -0
- package/docs/spec/ProduceCliOutput.v1.md +46 -0
- package/docs/spec/ProofBundleManifest.v1.md +24 -0
- package/docs/spec/README.md +109 -0
- package/docs/spec/REFERENCE_IMPLEMENTATIONS.md +29 -0
- package/docs/spec/REFERENCE_VERIFIER_BEHAVIOR.md +68 -0
- package/docs/spec/REMOTE_SIGNER.md +66 -0
- package/docs/spec/ReleaseIndex.v1.md +32 -0
- package/docs/spec/ReleaseIndexSignatures.v1.md +17 -0
- package/docs/spec/ReleaseTrust.v1.md +13 -0
- package/docs/spec/ReleaseTrust.v2.md +26 -0
- package/docs/spec/RemoteSignerRequest.v1.md +21 -0
- package/docs/spec/RemoteSignerResponse.v1.md +16 -0
- package/docs/spec/ReputationEvent.v1.md +63 -0
- package/docs/spec/RevocationList.v1.md +28 -0
- package/docs/spec/SIGNER_PROVIDER_PLUGIN.md +32 -0
- package/docs/spec/STRICTNESS.md +68 -0
- package/docs/spec/SUPPLY_CHAIN.md +33 -0
- package/docs/spec/SettlementAdjustment.v1.md +45 -0
- package/docs/spec/SettlementDecisionRecord.v1.md +48 -0
- package/docs/spec/SettlementDecisionRecord.v2.md +53 -0
- package/docs/spec/SettlementDecisionReport.v1.md +44 -0
- package/docs/spec/SettlementKernel.v1.md +59 -0
- package/docs/spec/SettlementReceipt.v1.md +63 -0
- package/docs/spec/SlaDefinition.v1.md +24 -0
- package/docs/spec/SlaEvaluation.v1.md +12 -0
- package/docs/spec/THREAT_MODEL.md +113 -0
- package/docs/spec/TOOL_PROVENANCE.md +30 -0
- package/docs/spec/TRUST_ANCHORS.md +84 -0
- package/docs/spec/TenantSettings.v1.md +90 -0
- package/docs/spec/TenantSettings.v2.md +99 -0
- package/docs/spec/TimestampProof.v1.md +25 -0
- package/docs/spec/ToolCallAgreement.v1.md +34 -0
- package/docs/spec/ToolCallEvidence.v1.md +47 -0
- package/docs/spec/ToolManifest.v1.md +47 -0
- package/docs/spec/VERIFIER_ENVIRONMENT.md +38 -0
- package/docs/spec/VERSIONING.md +107 -0
- package/docs/spec/VerificationReport.v1.md +50 -0
- package/docs/spec/VerifyAboutOutput.v1.md +10 -0
- package/docs/spec/VerifyCliOutput.v1.md +28 -0
- package/docs/spec/WARNINGS.md +83 -0
- package/docs/spec/error-codes.v1.txt +285 -0
- package/docs/spec/examples/agreement_delegation_v1.example.json +21 -0
- package/docs/spec/examples/arbitration_case_v1.example.json +26 -0
- package/docs/spec/examples/arbitration_verdict_v1.example.json +32 -0
- package/docs/spec/examples/dispute_open_envelope_v1.example.json +18 -0
- package/docs/spec/examples/produce_cli_output_v1.example.json +32 -0
- package/docs/spec/examples/release_index_signature_v1.example.json +9 -0
- package/docs/spec/examples/release_index_signatures_v1.example.json +14 -0
- package/docs/spec/examples/release_index_v1.example.json +15 -0
- package/docs/spec/examples/release_trust_v1.example.json +7 -0
- package/docs/spec/examples/release_trust_v2.example.json +22 -0
- package/docs/spec/examples/remote_signer_request_v1.example.json +18 -0
- package/docs/spec/examples/remote_signer_response_v1.example.json +8 -0
- package/docs/spec/examples/reputation_event_v1.example.json +29 -0
- package/docs/spec/examples/verification_report_v1.example.json +24 -0
- package/docs/spec/examples/verify_about_output_v1.example.json +29 -0
- package/docs/spec/examples/verify_cli_output_v1.example.json +13 -0
- package/docs/spec/legacy/MarketplaceAcceptance.v1.md +48 -0
- package/docs/spec/legacy/MarketplaceOffer.v1.md +56 -0
- package/docs/spec/legacy/schemas/MarketplaceAcceptance.v1.schema.json +53 -0
- package/docs/spec/legacy/schemas/MarketplaceOffer.v1.schema.json +61 -0
- package/docs/spec/producer-error-codes.v1.txt +14 -0
- package/docs/spec/schemas/AcceptanceCriteria.v1.schema.json +24 -0
- package/docs/spec/schemas/AcceptanceEvaluation.v1.schema.json +26 -0
- package/docs/spec/schemas/AgentEvent.v1.schema.json +49 -0
- package/docs/spec/schemas/AgentIdentity.v1.schema.json +129 -0
- package/docs/spec/schemas/AgentPassport.v1.schema.json +112 -0
- package/docs/spec/schemas/AgentReputation.v1.schema.json +151 -0
- package/docs/spec/schemas/AgentReputation.v2.schema.json +120 -0
- package/docs/spec/schemas/AgentRun.v1.schema.json +71 -0
- package/docs/spec/schemas/AgentRunSettlement.v1.schema.json +75 -0
- package/docs/spec/schemas/AgentWallet.v1.schema.json +54 -0
- package/docs/spec/schemas/AgreementDelegation.v1.schema.json +50 -0
- package/docs/spec/schemas/ArbitrationCase.v1.schema.json +133 -0
- package/docs/spec/schemas/ArbitrationVerdict.v1.schema.json +149 -0
- package/docs/spec/schemas/BundleHeadAttestation.v1.schema.json +21 -0
- package/docs/spec/schemas/ClosePackManifest.v1.schema.json +38 -0
- package/docs/spec/schemas/DelegationGrant.v1.schema.json +102 -0
- package/docs/spec/schemas/DisputeOpenEnvelope.v1.schema.json +78 -0
- package/docs/spec/schemas/EvidenceIndex.v1.schema.json +41 -0
- package/docs/spec/schemas/ExecutionIntent.v1.schema.json +85 -0
- package/docs/spec/schemas/FinancePackBundleManifest.v1.schema.json +38 -0
- package/docs/spec/schemas/FundingHold.v1.schema.json +46 -0
- package/docs/spec/schemas/GovernancePolicy.v1.schema.json +45 -0
- package/docs/spec/schemas/GovernancePolicy.v2.schema.json +70 -0
- package/docs/spec/schemas/InteractionDirectionMatrix.v1.schema.json +43 -0
- package/docs/spec/schemas/InvoiceBundleManifest.v1.schema.json +38 -0
- package/docs/spec/schemas/InvoiceClaim.v1.schema.json +39 -0
- package/docs/spec/schemas/MarketplaceAcceptance.v2.schema.json +53 -0
- package/docs/spec/schemas/MarketplaceOffer.v2.schema.json +61 -0
- package/docs/spec/schemas/MeteringReport.v1.schema.json +45 -0
- package/docs/spec/schemas/OperatorAction.v1.schema.json +113 -0
- package/docs/spec/schemas/PolicyDecision.v1.schema.json +74 -0
- package/docs/spec/schemas/PricingMatrix.v1.schema.json +24 -0
- package/docs/spec/schemas/PricingMatrixSignatures.v1.schema.json +24 -0
- package/docs/spec/schemas/PricingMatrixSignatures.v2.schema.json +24 -0
- package/docs/spec/schemas/ProduceCliOutput.v1.schema.json +107 -0
- package/docs/spec/schemas/ProofBundleManifest.v1.schema.json +37 -0
- package/docs/spec/schemas/PublicKeys.v1.schema.json +33 -0
- package/docs/spec/schemas/ReleaseIndex.v1.schema.json +45 -0
- package/docs/spec/schemas/ReleaseIndexSignature.v1.schema.json +16 -0
- package/docs/spec/schemas/ReleaseIndexSignatures.v1.schema.json +16 -0
- package/docs/spec/schemas/ReleaseTrust.v1.schema.json +15 -0
- package/docs/spec/schemas/ReleaseTrust.v2.schema.json +37 -0
- package/docs/spec/schemas/RemoteSignerPublicKeyResponse.v1.schema.json +14 -0
- package/docs/spec/schemas/RemoteSignerRequest.v1.schema.json +24 -0
- package/docs/spec/schemas/RemoteSignerResponse.v1.schema.json +10 -0
- package/docs/spec/schemas/RemoteSignerSignRequest.v1.schema.json +27 -0
- package/docs/spec/schemas/RemoteSignerSignResponse.v1.schema.json +16 -0
- package/docs/spec/schemas/ReputationEvent.v1.schema.json +164 -0
- package/docs/spec/schemas/RevocationList.v1.schema.json +51 -0
- package/docs/spec/schemas/SettlementAdjustment.v1.schema.json +44 -0
- package/docs/spec/schemas/SettlementDecisionRecord.v1.schema.json +66 -0
- package/docs/spec/schemas/SettlementDecisionRecord.v2.schema.json +149 -0
- package/docs/spec/schemas/SettlementDecisionReport.v1.schema.json +61 -0
- package/docs/spec/schemas/SettlementReceipt.v1.schema.json +135 -0
- package/docs/spec/schemas/SlaDefinition.v1.schema.json +33 -0
- package/docs/spec/schemas/SlaEvaluation.v1.schema.json +26 -0
- package/docs/spec/schemas/TenantSettings.v1.schema.json +90 -0
- package/docs/spec/schemas/TenantSettings.v2.schema.json +161 -0
- package/docs/spec/schemas/TimestampProof.v1.schema.json +17 -0
- package/docs/spec/schemas/ToolCallAgreement.v1.schema.json +34 -0
- package/docs/spec/schemas/ToolCallEvidence.v1.schema.json +45 -0
- package/docs/spec/schemas/ToolManifest.v1.schema.json +54 -0
- package/docs/spec/schemas/VerificationReport.v1.schema.json +83 -0
- package/docs/spec/schemas/VerifyAboutOutput.v1.schema.json +54 -0
- package/docs/spec/schemas/VerifyCliOutput.v1.schema.json +75 -0
- package/docs/spec/schemas/VerifyReleaseOutput.v1.schema.json +47 -0
- package/docs/spec/x402-error-codes.v1.txt +35 -0
- package/docs/templates/buyer-email.txt +18 -0
- package/docs/templates/buyer-one-pager.md +24 -0
- package/package.json +53 -6
- package/scripts/acceptance/full-stack.mjs +734 -0
- package/scripts/acceptance/full-stack.sh +99 -0
- package/scripts/audit/build-audit-packet.mjs +242 -0
- package/scripts/backup-pg.sh +45 -0
- package/scripts/backup-restore/README.md +18 -0
- package/scripts/backup-restore/capture-state.mjs +130 -0
- package/scripts/backup-restore/client.mjs +97 -0
- package/scripts/backup-restore/seed-workload.mjs +235 -0
- package/scripts/backup-restore/verify-state.mjs +139 -0
- package/scripts/backup-restore-test.sh +217 -0
- package/scripts/chaos.js +221 -0
- package/scripts/ci/build-launch-cutover-packet.mjs +304 -0
- package/scripts/ci/build-self-serve-benchmark-report.mjs +122 -0
- package/scripts/ci/changelog-guard.mjs +145 -0
- package/scripts/ci/check-kernel-v0-launch-gate.mjs +233 -0
- package/scripts/ci/check-secret-hygiene.mjs +78 -0
- package/scripts/ci/check-version-consistency.mjs +42 -0
- package/scripts/ci/cli-pack-smoke.mjs +160 -0
- package/scripts/ci/flake-budget-guard.mjs +68 -0
- package/scripts/ci/generate-error-codes.mjs +54 -0
- package/scripts/ci/lib/lighthouse-tracker.mjs +90 -0
- package/scripts/ci/lib/self-serve-launch-gate.mjs +89 -0
- package/scripts/ci/npm-pack-smoke.mjs +454 -0
- package/scripts/ci/run-10x-throughput-drill.mjs +318 -0
- package/scripts/ci/run-10x-throughput-incident-rehearsal.mjs +368 -0
- package/scripts/ci/run-arbitration-workspace-browser-e2e.sh +22 -0
- package/scripts/ci/run-circle-sandbox-smoke.mjs +237 -0
- package/scripts/ci/run-go-live-gate.mjs +150 -0
- package/scripts/ci/run-kernel-v0-ship-gate.mjs +97 -0
- package/scripts/ci/run-mcp-host-cert-matrix.mjs +201 -0
- package/scripts/ci/run-mcp-host-smoke.mjs +473 -0
- package/scripts/ci/run-offline-verification-parity-gate.mjs +762 -0
- package/scripts/ci/run-onboarding-host-success-gate.mjs +516 -0
- package/scripts/ci/run-onboarding-policy-slo-gate.mjs +537 -0
- package/scripts/ci/run-production-cutover-gate.mjs +540 -0
- package/scripts/ci/run-public-openclaw-npx-smoke.mjs +148 -0
- package/scripts/ci/run-release-promotion-guard.mjs +756 -0
- package/scripts/ci/run-self-serve-launch-gate.mjs +56 -0
- package/scripts/ci/runtime-import-smoke.mjs +58 -0
- package/scripts/ci/update-lighthouse-tracker.mjs +112 -0
- package/scripts/closepack/lib.mjs +286 -0
- package/scripts/collect-debug.sh +263 -0
- package/scripts/demo/compositional-settlement-3hop.mjs +237 -0
- package/scripts/demo/delivery-robot/export-ui-fixture.mjs +188 -0
- package/scripts/demo/delivery-robot/generate.mjs +377 -0
- package/scripts/demo/kernel-agent-goes-shopping.mjs +202 -0
- package/scripts/demo/magic-link-first-green.mjs +118 -0
- package/scripts/demo/magic-link-kind-smoke.mjs +577 -0
- package/scripts/demo/mcp-paid-exa.mjs +1110 -0
- package/scripts/dev/billing-doctor.sh +145 -0
- package/scripts/dev/billing-smoke-prod.sh +219 -0
- package/scripts/dev/billing-webhook-replay.sh +161 -0
- package/scripts/dev/env.dev.example +29 -0
- package/scripts/dev/env.sh +37 -0
- package/scripts/dev/new-sdk-key.sh +81 -0
- package/scripts/dev/sdk-first-run.sh +21 -0
- package/scripts/dev/smoke-x402-gateway.sh +115 -0
- package/scripts/dev/start-api.sh +24 -0
- package/scripts/doctor/mcp-host.mjs +120 -0
- package/scripts/examples/produce-and-verify-jobproof.mjs +191 -0
- package/scripts/examples/sdk-first-paid-rfq.py +105 -0
- package/scripts/examples/sdk-first-verified-run.mjs +85 -0
- package/scripts/examples/sdk-first-verified-run.py +99 -0
- package/scripts/examples/sdk-tenant-analytics.mjs +103 -0
- package/scripts/examples/sdk-tenant-analytics.py +118 -0
- package/scripts/finance-pack/bundle.mjs +284 -0
- package/scripts/fixtures/generate-bundle-fixtures.mjs +877 -0
- package/scripts/governance/export.mjs +169 -0
- package/scripts/load/delivery-stress.k6.js +183 -0
- package/scripts/load/ingest-burst.k6.js +236 -0
- package/scripts/load/run-delivery-load.js +66 -0
- package/scripts/load/webhook-receiver.js +131 -0
- package/scripts/magic-link/migrate-run-records-to-db.mjs +35 -0
- package/scripts/mcp/probe.mjs +238 -0
- package/scripts/mcp/settld-mcp-http-gateway.mjs +178 -0
- package/scripts/mcp/settld-mcp-server.mjs +1511 -0
- package/scripts/openapi/write.mjs +13 -0
- package/scripts/ops/bootstrap-tenant-conformance.mjs +185 -0
- package/scripts/ops/build-x402-pilot-reliability-report.mjs +489 -0
- package/scripts/ops/check-x402-receipt-sample.mjs +181 -0
- package/scripts/ops/design-partner-run-packet.mjs +466 -0
- package/scripts/ops/dispute-finance-reconciliation-packet.mjs +313 -0
- package/scripts/ops/hosted-baseline-evidence.mjs +890 -0
- package/scripts/ops/money-rails-chargeback-evidence.mjs +509 -0
- package/scripts/ops/money-rails-reconcile-evidence.mjs +180 -0
- package/scripts/ops/p0-seed-money-rail-operation.mjs +432 -0
- package/scripts/ops/run-x402-hitl-smoke.mjs +607 -0
- package/scripts/pilot/finance-pack.mjs +495 -0
- package/scripts/pilot/fixtures/robot-keypair.json +4 -0
- package/scripts/pilot/fixtures/server-signer.json +4 -0
- package/scripts/policy/cli.mjs +600 -0
- package/scripts/profile/cli.mjs +1324 -0
- package/scripts/proof-bundle/job.mjs +109 -0
- package/scripts/proof-bundle/lib.mjs +92 -0
- package/scripts/proof-bundle/month.mjs +103 -0
- package/scripts/provider/conformance-run.mjs +159 -0
- package/scripts/provider/keys-generate.mjs +135 -0
- package/scripts/provider/publish.mjs +420 -0
- package/scripts/quickstart/x402.mjs +334 -0
- package/scripts/register-entity-secret.mjs +102 -0
- package/scripts/release/build-artifacts.mjs +181 -0
- package/scripts/release/generate-release-index.mjs +112 -0
- package/scripts/release/release-index-lib.mjs +232 -0
- package/scripts/release/sign-release-index.mjs +85 -0
- package/scripts/release/validate-release-assets.mjs +170 -0
- package/scripts/release/verify-release.mjs +261 -0
- package/scripts/restore-pg.sh +34 -0
- package/scripts/scaffold/create-settld-paid-tool.mjs +19 -0
- package/scripts/sdk/smoke-python.py +30 -0
- package/scripts/sdk/smoke.mjs +16 -0
- package/scripts/settlement/x402-batch-worker.mjs +1091 -0
- package/scripts/setup/circle-bootstrap.mjs +310 -0
- package/scripts/setup/host-config.mjs +617 -0
- package/scripts/setup/onboard.mjs +1337 -0
- package/scripts/setup/openclaw-onboard.mjs +423 -0
- package/scripts/setup/wizard.mjs +986 -0
- package/scripts/slo/check.mjs +239 -0
- package/scripts/smoke/k8s-smoke.mjs +214 -0
- package/scripts/spec/generate-protocol-vectors.mjs +1019 -0
- package/scripts/test/check-no-generated-artifacts.sh +12 -0
- package/scripts/test/run.sh +59 -0
- package/scripts/trust/validate-trust-file.mjs +57 -0
- package/scripts/trust-config/rotate-settld-pay.mjs +277 -0
- package/scripts/trust-config/wizard.mjs +161 -0
- package/scripts/vendor-contract-test-lib.mjs +182 -0
- package/scripts/vendor-contract-test.mjs +55 -0
- package/scripts/vercel/build-mkdocs.sh +9 -0
- package/scripts/vercel/ignore-mkdocs.sh +25 -0
- package/scripts/vercel/install-mkdocs.sh +6 -0
- package/scripts/verify-pg.js +217 -0
- package/scripts/x402/receipt-verify.mjs +289 -0
- package/services/finance-sink/src/dedupe-store.js +29 -6
- package/services/receiver/src/dedupe-store.js +29 -5
- package/services/x402-gateway/Dockerfile +13 -0
- package/services/x402-gateway/README.md +58 -0
- package/services/x402-gateway/examples/upstream-mock.js +337 -0
- package/services/x402-gateway/src/server.js +1058 -0
- package/src/api/app.js +34658 -16940
- package/src/api/maintenance.js +70 -0
- package/src/api/middleware/trust-kernel.js +114 -0
- package/src/api/openapi.js +1778 -70
- package/src/api/persistence.js +456 -0
- package/src/api/server.js +81 -5
- package/src/api/store.js +1581 -62
- package/src/api/workers/deliveries.js +99 -4
- package/src/api/workers/insolvency-sweep.js +159 -0
- package/src/core/agent-card.js +69 -0
- package/src/core/agent-wallets.js +231 -0
- package/src/core/agreement-delegation.js +549 -0
- package/src/core/billing-plans.js +40 -6
- package/src/core/circle-reserve-adapter.js +845 -0
- package/src/core/event-policy.js +21 -2
- package/src/core/maintenance-locks.js +1 -0
- package/src/core/operator-action.js +303 -0
- package/src/core/paid-tool-manifest.js +318 -0
- package/src/core/policy-decision.js +322 -0
- package/src/core/policy-packs.js +207 -0
- package/src/core/profile-fingerprint.js +27 -0
- package/src/core/profile-simulation-reasons.js +84 -0
- package/src/core/profile-templates.js +242 -0
- package/src/core/provider-publish-conformance.js +525 -0
- package/src/core/provider-publish-proof.js +396 -0
- package/src/core/provider-quote-signature.js +170 -0
- package/src/core/settld-keys.js +112 -0
- package/src/core/settld-pay-token.js +344 -0
- package/src/core/settlement-kernel.js +239 -2
- package/src/core/settlement-verifier.js +335 -0
- package/src/core/tool-call-agreement.js +112 -0
- package/src/core/tool-call-evidence.js +144 -0
- package/src/core/tool-provider-signature.js +98 -0
- package/src/core/wallet-assignment-resolver.js +129 -0
- package/src/core/wallet-provider-bootstrap.js +365 -0
- package/src/core/x402-escalation-override.js +258 -0
- package/src/core/x402-gate.js +118 -0
- package/src/core/x402-provider-refund-decision.js +220 -0
- package/src/core/x402-receipt-verifier.js +708 -0
- package/src/core/x402-reversal-command.js +251 -0
- package/src/core/x402-wallet-issuer-decision.js +252 -0
- package/src/core/zk-verifier.js +300 -0
- package/src/db/migrations/029_reputation_event_index.sql +54 -0
- package/src/db/migrations/030_artifacts_source_event_unique_job_only.sql +15 -0
- package/src/db/pg.js +18 -7
- package/src/db/store-pg.js +1508 -111
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/MeteringReport.v1.schema.json",
|
|
4
|
+
"title": "MeteringReport.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "tenantId", "invoiceId", "generatedAt", "jobProof", "items", "evidenceRefs"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "MeteringReport.v1" },
|
|
9
|
+
"tenantId": { "type": "string" },
|
|
10
|
+
"invoiceId": { "type": "string" },
|
|
11
|
+
"generatedAt": { "type": "string" },
|
|
12
|
+
"jobProof": {
|
|
13
|
+
"type": "object",
|
|
14
|
+
"required": ["embeddedPath", "manifestHash", "headAttestationHash"],
|
|
15
|
+
"properties": {
|
|
16
|
+
"embeddedPath": { "const": "payload/job_proof_bundle" },
|
|
17
|
+
"manifestHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
18
|
+
"headAttestationHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
|
|
19
|
+
}
|
|
20
|
+
},
|
|
21
|
+
"items": {
|
|
22
|
+
"type": "array",
|
|
23
|
+
"items": {
|
|
24
|
+
"type": "object",
|
|
25
|
+
"required": ["code", "quantity"],
|
|
26
|
+
"properties": {
|
|
27
|
+
"code": { "type": "string" },
|
|
28
|
+
"quantity": { "type": "string", "pattern": "^[0-9]+$" }
|
|
29
|
+
}
|
|
30
|
+
}
|
|
31
|
+
},
|
|
32
|
+
"evidenceRefs": {
|
|
33
|
+
"type": "array",
|
|
34
|
+
"items": {
|
|
35
|
+
"type": "object",
|
|
36
|
+
"required": ["path", "sha256"],
|
|
37
|
+
"properties": {
|
|
38
|
+
"path": { "type": "string" },
|
|
39
|
+
"sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
|
|
@@ -0,0 +1,113 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/OperatorAction.v1.schema.json",
|
|
4
|
+
"title": "OperatorAction.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": [
|
|
8
|
+
"schemaVersion",
|
|
9
|
+
"caseRef",
|
|
10
|
+
"action",
|
|
11
|
+
"justificationCode",
|
|
12
|
+
"actor",
|
|
13
|
+
"actedAt"
|
|
14
|
+
],
|
|
15
|
+
"properties": {
|
|
16
|
+
"schemaVersion": { "const": "OperatorAction.v1" },
|
|
17
|
+
"actionId": {
|
|
18
|
+
"type": "string",
|
|
19
|
+
"maxLength": 240,
|
|
20
|
+
"pattern": "^[A-Za-z0-9:._/-]+$"
|
|
21
|
+
},
|
|
22
|
+
"caseRef": {
|
|
23
|
+
"type": "object",
|
|
24
|
+
"additionalProperties": false,
|
|
25
|
+
"required": ["kind", "caseId"],
|
|
26
|
+
"properties": {
|
|
27
|
+
"kind": {
|
|
28
|
+
"type": "string",
|
|
29
|
+
"enum": ["challenge", "dispute", "escalation"]
|
|
30
|
+
},
|
|
31
|
+
"caseId": {
|
|
32
|
+
"type": "string",
|
|
33
|
+
"minLength": 1,
|
|
34
|
+
"maxLength": 240,
|
|
35
|
+
"pattern": "^[A-Za-z0-9:._/-]+$"
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
},
|
|
39
|
+
"action": {
|
|
40
|
+
"type": "string",
|
|
41
|
+
"enum": ["APPROVE", "REJECT", "REQUEST_INFO", "OVERRIDE_ALLOW", "OVERRIDE_DENY"]
|
|
42
|
+
},
|
|
43
|
+
"justificationCode": {
|
|
44
|
+
"type": "string",
|
|
45
|
+
"minLength": 1,
|
|
46
|
+
"maxLength": 128,
|
|
47
|
+
"pattern": "^[A-Z][A-Z0-9._:-]*$"
|
|
48
|
+
},
|
|
49
|
+
"justification": {
|
|
50
|
+
"type": "string",
|
|
51
|
+
"minLength": 1,
|
|
52
|
+
"maxLength": 2000
|
|
53
|
+
},
|
|
54
|
+
"actor": {
|
|
55
|
+
"type": "object",
|
|
56
|
+
"additionalProperties": false,
|
|
57
|
+
"required": ["operatorId"],
|
|
58
|
+
"properties": {
|
|
59
|
+
"operatorId": {
|
|
60
|
+
"type": "string",
|
|
61
|
+
"minLength": 1,
|
|
62
|
+
"maxLength": 200,
|
|
63
|
+
"pattern": "^[A-Za-z0-9:._/-]+$"
|
|
64
|
+
},
|
|
65
|
+
"role": {
|
|
66
|
+
"type": "string",
|
|
67
|
+
"minLength": 1,
|
|
68
|
+
"maxLength": 128,
|
|
69
|
+
"pattern": "^[a-z0-9._:-]+$"
|
|
70
|
+
},
|
|
71
|
+
"tenantId": {
|
|
72
|
+
"type": "string",
|
|
73
|
+
"minLength": 1,
|
|
74
|
+
"maxLength": 128,
|
|
75
|
+
"pattern": "^[A-Za-z0-9:._/-]+$"
|
|
76
|
+
},
|
|
77
|
+
"sessionId": {
|
|
78
|
+
"type": "string",
|
|
79
|
+
"minLength": 1,
|
|
80
|
+
"maxLength": 256,
|
|
81
|
+
"pattern": "^[A-Za-z0-9:._/-]+$"
|
|
82
|
+
},
|
|
83
|
+
"metadata": {
|
|
84
|
+
"type": "object",
|
|
85
|
+
"additionalProperties": true
|
|
86
|
+
}
|
|
87
|
+
}
|
|
88
|
+
},
|
|
89
|
+
"actedAt": { "type": "string", "format": "date-time" },
|
|
90
|
+
"metadata": {
|
|
91
|
+
"type": "object",
|
|
92
|
+
"additionalProperties": true
|
|
93
|
+
},
|
|
94
|
+
"signature": {
|
|
95
|
+
"type": "object",
|
|
96
|
+
"additionalProperties": false,
|
|
97
|
+
"required": ["schemaVersion", "algorithm", "keyId", "signedAt", "actionHash", "signatureBase64"],
|
|
98
|
+
"properties": {
|
|
99
|
+
"schemaVersion": { "const": "OperatorActionSignature.v1" },
|
|
100
|
+
"algorithm": { "const": "ed25519" },
|
|
101
|
+
"keyId": {
|
|
102
|
+
"type": "string",
|
|
103
|
+
"minLength": 1,
|
|
104
|
+
"maxLength": 256,
|
|
105
|
+
"pattern": "^[A-Za-z0-9:._/-]+$"
|
|
106
|
+
},
|
|
107
|
+
"actionHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
108
|
+
"signatureBase64": { "type": "string", "minLength": 1, "maxLength": 16384 },
|
|
109
|
+
"signedAt": { "type": "string", "format": "date-time" }
|
|
110
|
+
}
|
|
111
|
+
}
|
|
112
|
+
}
|
|
113
|
+
}
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/PolicyDecision.v1.schema.json",
|
|
4
|
+
"title": "PolicyDecision.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": [
|
|
8
|
+
"schemaVersion",
|
|
9
|
+
"decisionId",
|
|
10
|
+
"tenantId",
|
|
11
|
+
"runId",
|
|
12
|
+
"settlementId",
|
|
13
|
+
"policyRef",
|
|
14
|
+
"decisionMode",
|
|
15
|
+
"verificationStatus",
|
|
16
|
+
"runStatus",
|
|
17
|
+
"shouldAutoResolve",
|
|
18
|
+
"settlementStatus",
|
|
19
|
+
"releaseRatePct",
|
|
20
|
+
"releaseAmountCents",
|
|
21
|
+
"refundAmountCents",
|
|
22
|
+
"reasonCodes",
|
|
23
|
+
"evaluationHash",
|
|
24
|
+
"createdAt",
|
|
25
|
+
"policyDecisionHash"
|
|
26
|
+
],
|
|
27
|
+
"properties": {
|
|
28
|
+
"schemaVersion": { "const": "PolicyDecision.v1" },
|
|
29
|
+
"decisionId": { "type": "string", "minLength": 1, "maxLength": 240, "pattern": "^[A-Za-z0-9:_-]+$" },
|
|
30
|
+
"tenantId": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9:_-]+$" },
|
|
31
|
+
"runId": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9:_-]+$" },
|
|
32
|
+
"settlementId": { "type": "string", "minLength": 1, "maxLength": 200, "pattern": "^[A-Za-z0-9:_-]+$" },
|
|
33
|
+
"gateId": { "type": "string", "minLength": 1, "maxLength": 240, "pattern": "^[A-Za-z0-9:_-]+$" },
|
|
34
|
+
"policyRef": {
|
|
35
|
+
"type": "object",
|
|
36
|
+
"additionalProperties": false,
|
|
37
|
+
"required": ["policyId", "policyVersion", "policyHash", "verificationMethodHash"],
|
|
38
|
+
"properties": {
|
|
39
|
+
"policyId": { "type": ["string", "null"], "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9._:-]+$" },
|
|
40
|
+
"policyVersion": { "type": ["integer", "null"], "minimum": 1 },
|
|
41
|
+
"policyHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
42
|
+
"verificationMethodHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
|
|
43
|
+
}
|
|
44
|
+
},
|
|
45
|
+
"decisionMode": { "type": "string", "enum": ["automatic", "manual-review"] },
|
|
46
|
+
"verificationStatus": { "type": "string", "minLength": 1, "maxLength": 32, "pattern": "^[a-z0-9_-]+$" },
|
|
47
|
+
"runStatus": { "type": "string", "minLength": 1, "maxLength": 32, "pattern": "^[a-z0-9_-]+$" },
|
|
48
|
+
"shouldAutoResolve": { "type": "boolean" },
|
|
49
|
+
"settlementStatus": { "type": "string", "minLength": 1, "maxLength": 64, "pattern": "^[a-z0-9_-]+$" },
|
|
50
|
+
"releaseRatePct": { "type": "integer", "minimum": 0, "maximum": 100 },
|
|
51
|
+
"releaseAmountCents": { "type": "integer", "minimum": 0 },
|
|
52
|
+
"refundAmountCents": { "type": "integer", "minimum": 0 },
|
|
53
|
+
"reasonCodes": {
|
|
54
|
+
"type": "array",
|
|
55
|
+
"items": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9._:-]+$" },
|
|
56
|
+
"uniqueItems": true
|
|
57
|
+
},
|
|
58
|
+
"evaluationHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
59
|
+
"metadata": { "type": "object", "additionalProperties": true },
|
|
60
|
+
"createdAt": { "type": "string", "format": "date-time" },
|
|
61
|
+
"policyDecisionHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
62
|
+
"signature": {
|
|
63
|
+
"type": "object",
|
|
64
|
+
"additionalProperties": false,
|
|
65
|
+
"required": ["algorithm", "signerKeyId", "policyDecisionHash", "signature"],
|
|
66
|
+
"properties": {
|
|
67
|
+
"algorithm": { "const": "ed25519" },
|
|
68
|
+
"signerKeyId": { "type": "string", "minLength": 1, "maxLength": 256, "pattern": "^[A-Za-z0-9:_-]+$" },
|
|
69
|
+
"policyDecisionHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
70
|
+
"signature": { "type": "string", "minLength": 1, "maxLength": 16384 }
|
|
71
|
+
}
|
|
72
|
+
}
|
|
73
|
+
}
|
|
74
|
+
}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/PricingMatrix.v1.schema.json",
|
|
4
|
+
"title": "PricingMatrix.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "currency", "prices"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "PricingMatrix.v1" },
|
|
9
|
+
"currency": { "type": "string" },
|
|
10
|
+
"prices": {
|
|
11
|
+
"type": "array",
|
|
12
|
+
"items": {
|
|
13
|
+
"type": "object",
|
|
14
|
+
"required": ["code", "unitPriceCents"],
|
|
15
|
+
"properties": {
|
|
16
|
+
"code": { "type": "string" },
|
|
17
|
+
"unitPriceCents": { "type": "string", "pattern": "^[0-9]+$" }
|
|
18
|
+
}
|
|
19
|
+
}
|
|
20
|
+
},
|
|
21
|
+
"generatedAt": { "type": ["string", "null"] }
|
|
22
|
+
}
|
|
23
|
+
}
|
|
24
|
+
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/PricingMatrixSignatures.v1.schema.json",
|
|
4
|
+
"title": "PricingMatrixSignatures.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "pricingMatrixHash", "signatures"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "PricingMatrixSignatures.v1" },
|
|
9
|
+
"pricingMatrixHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
10
|
+
"signatures": {
|
|
11
|
+
"type": "array",
|
|
12
|
+
"items": {
|
|
13
|
+
"type": "object",
|
|
14
|
+
"required": ["signerKeyId", "signedAt", "signature"],
|
|
15
|
+
"properties": {
|
|
16
|
+
"signerKeyId": { "type": "string" },
|
|
17
|
+
"signedAt": { "type": "string" },
|
|
18
|
+
"signature": { "type": "string" }
|
|
19
|
+
}
|
|
20
|
+
}
|
|
21
|
+
}
|
|
22
|
+
}
|
|
23
|
+
}
|
|
24
|
+
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/PricingMatrixSignatures.v2.schema.json",
|
|
4
|
+
"title": "PricingMatrixSignatures.v2",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "pricingMatrixCanonicalHash", "signatures"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "PricingMatrixSignatures.v2" },
|
|
9
|
+
"pricingMatrixCanonicalHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
10
|
+
"signatures": {
|
|
11
|
+
"type": "array",
|
|
12
|
+
"items": {
|
|
13
|
+
"type": "object",
|
|
14
|
+
"required": ["signerKeyId", "signedAt", "signature"],
|
|
15
|
+
"properties": {
|
|
16
|
+
"signerKeyId": { "type": "string" },
|
|
17
|
+
"signedAt": { "type": "string" },
|
|
18
|
+
"signature": { "type": "string" }
|
|
19
|
+
}
|
|
20
|
+
}
|
|
21
|
+
}
|
|
22
|
+
}
|
|
23
|
+
}
|
|
24
|
+
|
|
@@ -0,0 +1,107 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/ProduceCliOutput.v1.schema.json",
|
|
4
|
+
"title": "ProduceCliOutput.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "tool", "mode", "target", "ok", "produceOk", "errors", "warnings", "result"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "ProduceCliOutput.v1" },
|
|
9
|
+
"tool": {
|
|
10
|
+
"type": "object",
|
|
11
|
+
"required": ["name", "version"],
|
|
12
|
+
"properties": {
|
|
13
|
+
"name": { "type": "string" },
|
|
14
|
+
"version": { "type": ["string", "null"] },
|
|
15
|
+
"commit": { "type": ["string", "null"], "pattern": "^[0-9a-f]{7,64}$" }
|
|
16
|
+
}
|
|
17
|
+
},
|
|
18
|
+
"mode": {
|
|
19
|
+
"type": "object",
|
|
20
|
+
"required": ["deterministic", "now"],
|
|
21
|
+
"properties": {
|
|
22
|
+
"deterministic": { "type": "boolean" },
|
|
23
|
+
"now": { "type": ["string", "null"] }
|
|
24
|
+
}
|
|
25
|
+
},
|
|
26
|
+
"target": {
|
|
27
|
+
"type": "object",
|
|
28
|
+
"required": ["kind", "out"],
|
|
29
|
+
"properties": {
|
|
30
|
+
"kind": { "type": ["string", "null"] },
|
|
31
|
+
"out": { "type": ["string", "null"] }
|
|
32
|
+
}
|
|
33
|
+
},
|
|
34
|
+
"ok": { "type": "boolean" },
|
|
35
|
+
"produceOk": { "type": "boolean" },
|
|
36
|
+
"verifyAfter": {
|
|
37
|
+
"type": "object",
|
|
38
|
+
"required": ["ok", "exitCode", "output"],
|
|
39
|
+
"properties": {
|
|
40
|
+
"ok": { "type": "boolean" },
|
|
41
|
+
"exitCode": { "type": "integer" },
|
|
42
|
+
"output": {}
|
|
43
|
+
}
|
|
44
|
+
},
|
|
45
|
+
"errors": {
|
|
46
|
+
"type": "array",
|
|
47
|
+
"items": {
|
|
48
|
+
"type": "object",
|
|
49
|
+
"required": ["code", "path", "message", "detail"],
|
|
50
|
+
"properties": {
|
|
51
|
+
"code": { "type": "string" },
|
|
52
|
+
"causeKind": {
|
|
53
|
+
"type": "string",
|
|
54
|
+
"enum": ["signer", "plugin", "verify", "input", "io", "internal"]
|
|
55
|
+
},
|
|
56
|
+
"causeCode": { "type": "string" },
|
|
57
|
+
"path": { "type": ["string", "null"] },
|
|
58
|
+
"message": { "type": ["string", "null"] },
|
|
59
|
+
"detail": {}
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
},
|
|
63
|
+
"warnings": {
|
|
64
|
+
"type": "array",
|
|
65
|
+
"items": {
|
|
66
|
+
"type": "object",
|
|
67
|
+
"required": ["code", "path", "message", "detail"],
|
|
68
|
+
"properties": {
|
|
69
|
+
"code": { "type": "string" },
|
|
70
|
+
"causeKind": {
|
|
71
|
+
"type": "string",
|
|
72
|
+
"enum": ["signer", "plugin", "verify", "input", "io", "internal"]
|
|
73
|
+
},
|
|
74
|
+
"causeCode": { "type": "string" },
|
|
75
|
+
"path": { "type": ["string", "null"] },
|
|
76
|
+
"message": { "type": ["string", "null"] },
|
|
77
|
+
"detail": {}
|
|
78
|
+
}
|
|
79
|
+
}
|
|
80
|
+
},
|
|
81
|
+
"result": {
|
|
82
|
+
"type": ["object", "null"],
|
|
83
|
+
"required": [
|
|
84
|
+
"bundleDir",
|
|
85
|
+
"type",
|
|
86
|
+
"tenantId",
|
|
87
|
+
"jobId",
|
|
88
|
+
"period",
|
|
89
|
+
"basis",
|
|
90
|
+
"protocol",
|
|
91
|
+
"manifestHash",
|
|
92
|
+
"attestationHash"
|
|
93
|
+
],
|
|
94
|
+
"properties": {
|
|
95
|
+
"bundleDir": { "type": ["string", "null"] },
|
|
96
|
+
"type": { "type": ["string", "null"] },
|
|
97
|
+
"tenantId": { "type": ["string", "null"] },
|
|
98
|
+
"jobId": { "type": ["string", "null"] },
|
|
99
|
+
"period": { "type": ["string", "null"] },
|
|
100
|
+
"basis": { "type": ["string", "null"] },
|
|
101
|
+
"protocol": { "type": ["string", "null"] },
|
|
102
|
+
"manifestHash": { "type": ["string", "null"], "pattern": "^[0-9a-f]{64}$" },
|
|
103
|
+
"attestationHash": { "type": ["string", "null"], "pattern": "^[0-9a-f]{64}$" }
|
|
104
|
+
}
|
|
105
|
+
}
|
|
106
|
+
}
|
|
107
|
+
}
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/ProofBundleManifest.v1.schema.json",
|
|
4
|
+
"title": "ProofBundleManifest.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "kind", "tenantId", "scope", "generatedAt", "hashing", "files"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "ProofBundleManifest.v1" },
|
|
9
|
+
"kind": { "type": "string" },
|
|
10
|
+
"tenantId": { "type": "string" },
|
|
11
|
+
"scope": { "type": "object" },
|
|
12
|
+
"generatedAt": { "type": "string" },
|
|
13
|
+
"hashing": {
|
|
14
|
+
"type": "object",
|
|
15
|
+
"required": ["schemaVersion", "fileOrder", "excludes"],
|
|
16
|
+
"properties": {
|
|
17
|
+
"schemaVersion": { "const": "ProofBundleManifestHash.v1" },
|
|
18
|
+
"fileOrder": { "const": "path_asc" },
|
|
19
|
+
"excludes": { "type": "array", "items": { "type": "string" } }
|
|
20
|
+
}
|
|
21
|
+
},
|
|
22
|
+
"files": {
|
|
23
|
+
"type": "array",
|
|
24
|
+
"items": {
|
|
25
|
+
"type": "object",
|
|
26
|
+
"required": ["name", "sha256", "bytes"],
|
|
27
|
+
"properties": {
|
|
28
|
+
"name": { "type": "string" },
|
|
29
|
+
"sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
30
|
+
"bytes": { "type": "integer", "minimum": 0 }
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
},
|
|
34
|
+
"manifestHash": { "type": "string", "pattern": "^[0-9a-f]{64}$" }
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/PublicKeys.v1.schema.json",
|
|
4
|
+
"title": "PublicKeys.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "tenantId", "generatedAt", "order", "keys"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "PublicKeys.v1" },
|
|
9
|
+
"tenantId": { "type": "string" },
|
|
10
|
+
"generatedAt": { "type": "string" },
|
|
11
|
+
"order": { "const": "keyId_asc" },
|
|
12
|
+
"keys": {
|
|
13
|
+
"type": "array",
|
|
14
|
+
"items": {
|
|
15
|
+
"type": "object",
|
|
16
|
+
"required": ["keyId", "publicKeyPem"],
|
|
17
|
+
"properties": {
|
|
18
|
+
"keyId": { "type": "string" },
|
|
19
|
+
"publicKeyPem": { "type": "string" },
|
|
20
|
+
"tenantId": { "type": ["string", "null"] },
|
|
21
|
+
"purpose": { "type": ["string", "null"], "enum": ["robot", "operator", "server", null] },
|
|
22
|
+
"status": { "type": ["string", "null"] },
|
|
23
|
+
"description": { "type": ["string", "null"] },
|
|
24
|
+
"validFrom": { "type": ["string", "null"] },
|
|
25
|
+
"validTo": { "type": ["string", "null"] },
|
|
26
|
+
"createdAt": { "type": ["string", "null"] },
|
|
27
|
+
"rotatedAt": { "type": ["string", "null"] },
|
|
28
|
+
"revokedAt": { "type": ["string", "null"] }
|
|
29
|
+
}
|
|
30
|
+
}
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
}
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/ReleaseIndex.v1.schema.json",
|
|
4
|
+
"title": "ReleaseIndex.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "release", "toolchain", "artifacts"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "ReleaseIndex.v1" },
|
|
9
|
+
"release": {
|
|
10
|
+
"type": "object",
|
|
11
|
+
"required": ["tag", "version"],
|
|
12
|
+
"properties": {
|
|
13
|
+
"tag": { "type": "string" },
|
|
14
|
+
"version": { "type": "string" }
|
|
15
|
+
}
|
|
16
|
+
},
|
|
17
|
+
"toolchain": {
|
|
18
|
+
"type": "object",
|
|
19
|
+
"required": ["commit"],
|
|
20
|
+
"properties": {
|
|
21
|
+
"commit": { "type": ["string", "null"], "pattern": "^[0-9a-f]{7,64}$" },
|
|
22
|
+
"buildEpochSeconds": { "type": ["integer", "null"], "minimum": 0 },
|
|
23
|
+
"canonicalJson": { "type": "string" },
|
|
24
|
+
"includedSchemas": {
|
|
25
|
+
"type": "array",
|
|
26
|
+
"items": { "type": "string" }
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
},
|
|
30
|
+
"artifacts": {
|
|
31
|
+
"type": "array",
|
|
32
|
+
"items": {
|
|
33
|
+
"type": "object",
|
|
34
|
+
"required": ["path", "sha256", "sizeBytes"],
|
|
35
|
+
"properties": {
|
|
36
|
+
"path": { "type": "string" },
|
|
37
|
+
"sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
38
|
+
"sizeBytes": { "type": "integer", "minimum": 0 },
|
|
39
|
+
"kind": { "type": ["string", "null"] }
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/ReleaseIndexSignature.v1.schema.json",
|
|
4
|
+
"title": "ReleaseIndexSignature.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "algorithm", "messageSha256", "publicKeyPem", "signatureBase64"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "ReleaseIndexSignature.v1" },
|
|
9
|
+
"algorithm": { "const": "ed25519-sha256" },
|
|
10
|
+
"keyId": { "type": ["string", "null"] },
|
|
11
|
+
"messageSha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
|
|
12
|
+
"publicKeyPem": { "type": "string" },
|
|
13
|
+
"signatureBase64": { "type": "string", "pattern": "^[A-Za-z0-9+/=]+$" }
|
|
14
|
+
}
|
|
15
|
+
}
|
|
16
|
+
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/ReleaseIndexSignatures.v1.schema.json",
|
|
4
|
+
"title": "ReleaseIndexSignatures.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "signatures"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "ReleaseIndexSignatures.v1" },
|
|
9
|
+
"signatures": {
|
|
10
|
+
"type": "array",
|
|
11
|
+
"items": { "$ref": "https://settld.local/schemas/ReleaseIndexSignature.v1.schema.json" },
|
|
12
|
+
"minItems": 1
|
|
13
|
+
}
|
|
14
|
+
}
|
|
15
|
+
}
|
|
16
|
+
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/ReleaseTrust.v1.schema.json",
|
|
4
|
+
"title": "ReleaseTrust.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "releaseRoots"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "ReleaseTrust.v1" },
|
|
9
|
+
"releaseRoots": {
|
|
10
|
+
"type": "object",
|
|
11
|
+
"additionalProperties": { "type": "string" }
|
|
12
|
+
}
|
|
13
|
+
}
|
|
14
|
+
}
|
|
15
|
+
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/ReleaseTrust.v2.schema.json",
|
|
4
|
+
"title": "ReleaseTrust.v2",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "policy", "keys"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "ReleaseTrust.v2" },
|
|
9
|
+
"policy": {
|
|
10
|
+
"type": "object",
|
|
11
|
+
"required": ["minSignatures"],
|
|
12
|
+
"properties": {
|
|
13
|
+
"minSignatures": { "type": "integer", "minimum": 1 },
|
|
14
|
+
"requiredKeyIds": {
|
|
15
|
+
"type": "array",
|
|
16
|
+
"items": { "type": "string" }
|
|
17
|
+
}
|
|
18
|
+
}
|
|
19
|
+
},
|
|
20
|
+
"keys": {
|
|
21
|
+
"type": "array",
|
|
22
|
+
"items": {
|
|
23
|
+
"type": "object",
|
|
24
|
+
"required": ["keyId", "publicKeyPem"],
|
|
25
|
+
"properties": {
|
|
26
|
+
"keyId": { "type": "string" },
|
|
27
|
+
"publicKeyPem": { "type": "string" },
|
|
28
|
+
"notBeforeEpochSeconds": { "type": "integer", "minimum": 0 },
|
|
29
|
+
"notAfterEpochSeconds": { "type": "integer", "minimum": 0 },
|
|
30
|
+
"revokedAtEpochSeconds": { "type": "integer", "minimum": 0 },
|
|
31
|
+
"comment": { "type": "string" }
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://settld.local/schemas/RemoteSignerPublicKeyResponse.v1.schema.json",
|
|
4
|
+
"title": "RemoteSignerPublicKeyResponse.v1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"required": ["schemaVersion", "keyId", "algorithm", "publicKeyPem"],
|
|
7
|
+
"properties": {
|
|
8
|
+
"schemaVersion": { "const": "RemoteSignerPublicKeyResponse.v1" },
|
|
9
|
+
"keyId": { "type": "string" },
|
|
10
|
+
"algorithm": { "enum": ["ed25519"] },
|
|
11
|
+
"publicKeyPem": { "type": "string" }
|
|
12
|
+
}
|
|
13
|
+
}
|
|
14
|
+
|