settld 0.1.2 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +93 -3
- package/SETTLD_VERSION +1 -1
- package/bin/settld-mcp +2 -0
- package/bin/settld.js +71 -0
- package/conformance/kernel-v0/README.md +7 -0
- package/conformance/kernel-v0/run.mjs +292 -4
- package/docs/ACCESS.md +57 -0
- package/docs/ADOPTION_CHECKLIST.md +44 -0
- package/docs/ALERTS.md +198 -0
- package/docs/ARCHITECTURE.md +69 -0
- package/docs/ARCHITECTURE_FOUNDER_GUIDE.md +284 -0
- package/docs/ARTIFACTS.md +60 -0
- package/docs/CERTIFICATION_CHECKLIST.md +33 -0
- package/docs/CIRCLE_SANDBOX_E2E.md +152 -0
- package/docs/CONFIG.md +297 -0
- package/docs/CONTRACTS_APIS.md +23 -0
- package/docs/DEPRECATION.md +31 -0
- package/docs/DOMAIN_MODEL.md +92 -0
- package/docs/EVENT_ENVELOPE.md +53 -0
- package/docs/FINANCE_PACK_FORMAT.md +53 -0
- package/docs/INCIDENT_TAXONOMY.md +30 -0
- package/docs/JOB_STATE_MACHINE.md +66 -0
- package/docs/KERNEL_COMPATIBLE.md +60 -0
- package/docs/KERNEL_V0.md +40 -0
- package/docs/KEY_ROTATION.md +80 -0
- package/docs/LEDGER.md +82 -0
- package/docs/LIVENESS.md +76 -0
- package/docs/MVP_BUILD_ORDER.md +36 -0
- package/docs/ONCALL_PLAYBOOK.md +39 -0
- package/docs/OPERATIONS_SIGNING.md +20 -0
- package/docs/OVERVIEW.md +190 -0
- package/docs/PERF_BASELINE.md +85 -0
- package/docs/PRD.md +77 -0
- package/docs/QUICKSTART_KERNEL_V0.md +96 -0
- package/docs/QUICKSTART_MCP.md +377 -0
- package/docs/QUICKSTART_MCP_HOSTS.md +210 -0
- package/docs/QUICKSTART_POLICY_PACKS.md +65 -0
- package/docs/QUICKSTART_PRODUCE.md +61 -0
- package/docs/QUICKSTART_PROFILES.md +198 -0
- package/docs/QUICKSTART_RELEASE_VERIFY.md +39 -0
- package/docs/QUICKSTART_SDK.md +125 -0
- package/docs/QUICKSTART_SDK_PYTHON.md +111 -0
- package/docs/QUICKSTART_VERIFY.md +54 -0
- package/docs/QUICKSTART_X402_GATEWAY.md +317 -0
- package/docs/README.md +33 -0
- package/docs/RELEASE_CHECKLIST.md +182 -0
- package/docs/RELEASING.md +82 -0
- package/docs/REPO_SETTINGS.md +37 -0
- package/docs/RUNBOOK.md +86 -0
- package/docs/SKILLS.md +42 -0
- package/docs/SKILL_BUNDLE_FORMAT.md +48 -0
- package/docs/SLO.md +131 -0
- package/docs/SUMMARY.md +17 -0
- package/docs/SUPPORT.md +31 -0
- package/docs/THREAT_MODEL.md +36 -0
- package/docs/TRUST.md +59 -0
- package/docs/WORKFLOW.md +35 -0
- package/docs/X402_BATCH_SETTLEMENT.md +126 -0
- package/docs/blog/2026-02-14-your-ai-agent-just-spent-500-where-is-the-receipt.md +73 -0
- package/docs/examples/x402-provider-payout-registry.example.json +14 -0
- package/docs/gitbook/README.md +64 -0
- package/docs/gitbook/SETUP.md +25 -0
- package/docs/gitbook/SUMMARY.md +15 -0
- package/docs/gitbook/api-reference.md +73 -0
- package/docs/gitbook/closepacks.md +55 -0
- package/docs/gitbook/conformance.md +59 -0
- package/docs/gitbook/core-primitives.md +85 -0
- package/docs/gitbook/dispute-lifecycle.md +33 -0
- package/docs/gitbook/faq.md +21 -0
- package/docs/gitbook/guides.md +49 -0
- package/docs/gitbook/operations-runbook.md +36 -0
- package/docs/gitbook/quickstart.md +103 -0
- package/docs/gitbook/replay-and-audit.md +30 -0
- package/docs/gitbook/sdk-reference.md +35 -0
- package/docs/gitbook/security-model.md +58 -0
- package/docs/integrations/README.md +15 -0
- package/docs/integrations/github-actions-verify.yml +31 -0
- package/docs/integrations/github-actions.md +34 -0
- package/docs/integrations/openclaw/CLAWHUB_PUBLISH_CHECKLIST.md +65 -0
- package/docs/integrations/openclaw/PUBLIC_QUICKSTART.md +95 -0
- package/docs/integrations/openclaw/settld-mcp-skill/SKILL.md +69 -0
- package/docs/integrations/openclaw/settld-mcp-skill/mcp-server.example.json +12 -0
- package/docs/kernel-compatible/capabilities.json +36 -0
- package/docs/marketing/agent-commerce-substrate.md +78 -0
- package/docs/marketing/hn-repost-2026-02-17.md +102 -0
- package/docs/marketing/show-hn-post.md +45 -0
- package/docs/ops/ARTIFACT_VERIFICATION_STATUS.md +43 -0
- package/docs/ops/BILLING_WEBHOOK_REPLAY.md +105 -0
- package/docs/ops/CI_FLAKE_BUDGET.md +31 -0
- package/docs/ops/DISPUTE_FINANCE_RECONCILIATION_PACKET.md +56 -0
- package/docs/ops/GO_LIVE_GATE_S13.md +27 -0
- package/docs/ops/HOSTED_BASELINE_R2.md +129 -0
- package/docs/ops/KERNEL_V0_SHIP_GATE.md +69 -0
- package/docs/ops/LIGHTHOUSE_PRODUCTION_CLOSE.md +51 -0
- package/docs/ops/MCP_COMPATIBILITY_MATRIX.md +30 -0
- package/docs/ops/MINIMUM_PRODUCTION_TOPOLOGY.md +89 -0
- package/docs/ops/P0_BACKEND_PROGRESS.md +150 -0
- package/docs/ops/PAYMENTS_ALPHA_R5.md +105 -0
- package/docs/ops/PILOT_ONBOARDING_RUNBOOK.md +112 -0
- package/docs/ops/PRODUCTION_DEPLOYMENT_CHECKLIST.md +140 -0
- package/docs/ops/R1_SLOS.md +66 -0
- package/docs/ops/RELEASE_SIGNING_INCIDENT.md +58 -0
- package/docs/ops/SELF_SERVE_LAUNCH_AUTOMATION.md +89 -0
- package/docs/ops/THROUGHPUT_DRILL_10X.md +48 -0
- package/docs/ops/TRUST_CONFIG_WIZARD.md +60 -0
- package/docs/ops/X402_PILOT_WEEKLY_METRICS.md +76 -0
- package/docs/ops/tool-call-disputes-holdback.md +52 -0
- package/docs/pilot-kit/PILOT_PACKAGE_SCORECARD_X402.md +46 -0
- package/docs/pilot-kit/README.md +29 -0
- package/docs/pilot-kit/architecture-one-pager.md +48 -0
- package/docs/pilot-kit/buyer-email.txt +19 -0
- package/docs/pilot-kit/buyer-one-pager.md +31 -0
- package/docs/pilot-kit/gtm-pilot-playbook.md +182 -0
- package/docs/pilot-kit/offline-verify.md +33 -0
- package/docs/pilot-kit/procurement-one-pager.md +50 -0
- package/docs/pilot-kit/rfp-clause.md +46 -0
- package/docs/pilot-kit/roi-calculator-template.csv +2 -0
- package/docs/pilot-kit/security-qa.md +153 -0
- package/docs/pilot-kit/security-summary.md +35 -0
- package/docs/plans/2026-02-13-mcp-spike-design.md +113 -0
- package/docs/plans/2026-02-20-trust-os-v1-jira-backlog.md +348 -0
- package/docs/plans/2026-02-21-agent-economic-actor-operating-model.md +169 -0
- package/docs/plans/2026-02-21-trust-os-v1-strategy.md +241 -0
- package/docs/research/2026-02-21-agent-spend-host-landscape.md +57 -0
- package/docs/spec/AcceptanceCriteria.v1.md +17 -0
- package/docs/spec/AcceptanceEvaluation.v1.md +10 -0
- package/docs/spec/AgentEvent.v1.md +47 -0
- package/docs/spec/AgentIdentity.v1.md +62 -0
- package/docs/spec/AgentPassport.v1.md +95 -0
- package/docs/spec/AgentReputation.v1.md +59 -0
- package/docs/spec/AgentReputation.v2.md +52 -0
- package/docs/spec/AgentRun.v1.md +47 -0
- package/docs/spec/AgentRunSettlement.v1.md +52 -0
- package/docs/spec/AgentWallet.v1.md +43 -0
- package/docs/spec/AgreementDelegation.v1.md +109 -0
- package/docs/spec/ArbitrationCase.v1.md +67 -0
- package/docs/spec/ArbitrationOutcomeMapping.v1.md +62 -0
- package/docs/spec/ArbitrationVerdict.v1.md +60 -0
- package/docs/spec/BundleHeadAttestation.v1.md +32 -0
- package/docs/spec/CANONICAL_JSON.md +31 -0
- package/docs/spec/CRYPTOGRAPHY.md +61 -0
- package/docs/spec/ClosePack.v1.md +49 -0
- package/docs/spec/ClosePackManifest.v1.md +24 -0
- package/docs/spec/DelegationGrant.v1.md +90 -0
- package/docs/spec/DisputeCaseLifecycle.v1.md +51 -0
- package/docs/spec/DisputeOpenEnvelope.v1.md +43 -0
- package/docs/spec/ERRORS.md +76 -0
- package/docs/spec/ESCROW_NETTING_INVARIANTS.md +71 -0
- package/docs/spec/EvidenceIndex.v1.md +20 -0
- package/docs/spec/ExecutionIntent.v1.md +90 -0
- package/docs/spec/FinancePackBundleManifest.v1.md +24 -0
- package/docs/spec/FundingHold.v1.md +60 -0
- package/docs/spec/GovernancePolicy.v1.md +34 -0
- package/docs/spec/GovernancePolicy.v2.md +30 -0
- package/docs/spec/INVARIANTS.md +389 -0
- package/docs/spec/InteractionDirectionMatrix.v1.md +30 -0
- package/docs/spec/InvoiceBundleManifest.v1.md +24 -0
- package/docs/spec/InvoiceClaim.v1.md +11 -0
- package/docs/spec/MONEY_RAIL_STATE_MACHINE.md +58 -0
- package/docs/spec/MarketplaceAcceptance.v2.md +46 -0
- package/docs/spec/MarketplaceOffer.v2.md +54 -0
- package/docs/spec/MeteringReport.v1.md +18 -0
- package/docs/spec/OperatorAction.v1.md +90 -0
- package/docs/spec/PRODUCER_ERRORS.md +42 -0
- package/docs/spec/PolicyDecision.v1.md +83 -0
- package/docs/spec/PricingMatrix.v1.md +20 -0
- package/docs/spec/PricingMatrixSignatures.v1.md +30 -0
- package/docs/spec/PricingMatrixSignatures.v2.md +29 -0
- package/docs/spec/ProduceCliOutput.v1.md +46 -0
- package/docs/spec/ProofBundleManifest.v1.md +24 -0
- package/docs/spec/README.md +109 -0
- package/docs/spec/REFERENCE_IMPLEMENTATIONS.md +29 -0
- package/docs/spec/REFERENCE_VERIFIER_BEHAVIOR.md +68 -0
- package/docs/spec/REMOTE_SIGNER.md +66 -0
- package/docs/spec/ReleaseIndex.v1.md +32 -0
- package/docs/spec/ReleaseIndexSignatures.v1.md +17 -0
- package/docs/spec/ReleaseTrust.v1.md +13 -0
- package/docs/spec/ReleaseTrust.v2.md +26 -0
- package/docs/spec/RemoteSignerRequest.v1.md +21 -0
- package/docs/spec/RemoteSignerResponse.v1.md +16 -0
- package/docs/spec/ReputationEvent.v1.md +63 -0
- package/docs/spec/RevocationList.v1.md +28 -0
- package/docs/spec/SIGNER_PROVIDER_PLUGIN.md +32 -0
- package/docs/spec/STRICTNESS.md +68 -0
- package/docs/spec/SUPPLY_CHAIN.md +33 -0
- package/docs/spec/SettlementAdjustment.v1.md +45 -0
- package/docs/spec/SettlementDecisionRecord.v1.md +48 -0
- package/docs/spec/SettlementDecisionRecord.v2.md +53 -0
- package/docs/spec/SettlementDecisionReport.v1.md +44 -0
- package/docs/spec/SettlementKernel.v1.md +59 -0
- package/docs/spec/SettlementReceipt.v1.md +63 -0
- package/docs/spec/SlaDefinition.v1.md +24 -0
- package/docs/spec/SlaEvaluation.v1.md +12 -0
- package/docs/spec/THREAT_MODEL.md +113 -0
- package/docs/spec/TOOL_PROVENANCE.md +30 -0
- package/docs/spec/TRUST_ANCHORS.md +84 -0
- package/docs/spec/TenantSettings.v1.md +90 -0
- package/docs/spec/TenantSettings.v2.md +99 -0
- package/docs/spec/TimestampProof.v1.md +25 -0
- package/docs/spec/ToolCallAgreement.v1.md +34 -0
- package/docs/spec/ToolCallEvidence.v1.md +47 -0
- package/docs/spec/ToolManifest.v1.md +47 -0
- package/docs/spec/VERIFIER_ENVIRONMENT.md +38 -0
- package/docs/spec/VERSIONING.md +107 -0
- package/docs/spec/VerificationReport.v1.md +50 -0
- package/docs/spec/VerifyAboutOutput.v1.md +10 -0
- package/docs/spec/VerifyCliOutput.v1.md +28 -0
- package/docs/spec/WARNINGS.md +83 -0
- package/docs/spec/error-codes.v1.txt +285 -0
- package/docs/spec/examples/agreement_delegation_v1.example.json +21 -0
- package/docs/spec/examples/arbitration_case_v1.example.json +26 -0
- package/docs/spec/examples/arbitration_verdict_v1.example.json +32 -0
- package/docs/spec/examples/dispute_open_envelope_v1.example.json +18 -0
- package/docs/spec/examples/produce_cli_output_v1.example.json +32 -0
- package/docs/spec/examples/release_index_signature_v1.example.json +9 -0
- package/docs/spec/examples/release_index_signatures_v1.example.json +14 -0
- package/docs/spec/examples/release_index_v1.example.json +15 -0
- package/docs/spec/examples/release_trust_v1.example.json +7 -0
- package/docs/spec/examples/release_trust_v2.example.json +22 -0
- package/docs/spec/examples/remote_signer_request_v1.example.json +18 -0
- package/docs/spec/examples/remote_signer_response_v1.example.json +8 -0
- package/docs/spec/examples/reputation_event_v1.example.json +29 -0
- package/docs/spec/examples/verification_report_v1.example.json +24 -0
- package/docs/spec/examples/verify_about_output_v1.example.json +29 -0
- package/docs/spec/examples/verify_cli_output_v1.example.json +13 -0
- package/docs/spec/legacy/MarketplaceAcceptance.v1.md +48 -0
- package/docs/spec/legacy/MarketplaceOffer.v1.md +56 -0
- package/docs/spec/legacy/schemas/MarketplaceAcceptance.v1.schema.json +53 -0
- package/docs/spec/legacy/schemas/MarketplaceOffer.v1.schema.json +61 -0
- package/docs/spec/producer-error-codes.v1.txt +14 -0
- package/docs/spec/schemas/AcceptanceCriteria.v1.schema.json +24 -0
- package/docs/spec/schemas/AcceptanceEvaluation.v1.schema.json +26 -0
- package/docs/spec/schemas/AgentEvent.v1.schema.json +49 -0
- package/docs/spec/schemas/AgentIdentity.v1.schema.json +129 -0
- package/docs/spec/schemas/AgentPassport.v1.schema.json +112 -0
- package/docs/spec/schemas/AgentReputation.v1.schema.json +151 -0
- package/docs/spec/schemas/AgentReputation.v2.schema.json +120 -0
- package/docs/spec/schemas/AgentRun.v1.schema.json +71 -0
- package/docs/spec/schemas/AgentRunSettlement.v1.schema.json +75 -0
- package/docs/spec/schemas/AgentWallet.v1.schema.json +54 -0
- package/docs/spec/schemas/AgreementDelegation.v1.schema.json +50 -0
- package/docs/spec/schemas/ArbitrationCase.v1.schema.json +133 -0
- package/docs/spec/schemas/ArbitrationVerdict.v1.schema.json +149 -0
- package/docs/spec/schemas/BundleHeadAttestation.v1.schema.json +21 -0
- package/docs/spec/schemas/ClosePackManifest.v1.schema.json +38 -0
- package/docs/spec/schemas/DelegationGrant.v1.schema.json +102 -0
- package/docs/spec/schemas/DisputeOpenEnvelope.v1.schema.json +78 -0
- package/docs/spec/schemas/EvidenceIndex.v1.schema.json +41 -0
- package/docs/spec/schemas/ExecutionIntent.v1.schema.json +85 -0
- package/docs/spec/schemas/FinancePackBundleManifest.v1.schema.json +38 -0
- package/docs/spec/schemas/FundingHold.v1.schema.json +46 -0
- package/docs/spec/schemas/GovernancePolicy.v1.schema.json +45 -0
- package/docs/spec/schemas/GovernancePolicy.v2.schema.json +70 -0
- package/docs/spec/schemas/InteractionDirectionMatrix.v1.schema.json +43 -0
- package/docs/spec/schemas/InvoiceBundleManifest.v1.schema.json +38 -0
- package/docs/spec/schemas/InvoiceClaim.v1.schema.json +39 -0
- package/docs/spec/schemas/MarketplaceAcceptance.v2.schema.json +53 -0
- package/docs/spec/schemas/MarketplaceOffer.v2.schema.json +61 -0
- package/docs/spec/schemas/MeteringReport.v1.schema.json +45 -0
- package/docs/spec/schemas/OperatorAction.v1.schema.json +113 -0
- package/docs/spec/schemas/PolicyDecision.v1.schema.json +74 -0
- package/docs/spec/schemas/PricingMatrix.v1.schema.json +24 -0
- package/docs/spec/schemas/PricingMatrixSignatures.v1.schema.json +24 -0
- package/docs/spec/schemas/PricingMatrixSignatures.v2.schema.json +24 -0
- package/docs/spec/schemas/ProduceCliOutput.v1.schema.json +107 -0
- package/docs/spec/schemas/ProofBundleManifest.v1.schema.json +37 -0
- package/docs/spec/schemas/PublicKeys.v1.schema.json +33 -0
- package/docs/spec/schemas/ReleaseIndex.v1.schema.json +45 -0
- package/docs/spec/schemas/ReleaseIndexSignature.v1.schema.json +16 -0
- package/docs/spec/schemas/ReleaseIndexSignatures.v1.schema.json +16 -0
- package/docs/spec/schemas/ReleaseTrust.v1.schema.json +15 -0
- package/docs/spec/schemas/ReleaseTrust.v2.schema.json +37 -0
- package/docs/spec/schemas/RemoteSignerPublicKeyResponse.v1.schema.json +14 -0
- package/docs/spec/schemas/RemoteSignerRequest.v1.schema.json +24 -0
- package/docs/spec/schemas/RemoteSignerResponse.v1.schema.json +10 -0
- package/docs/spec/schemas/RemoteSignerSignRequest.v1.schema.json +27 -0
- package/docs/spec/schemas/RemoteSignerSignResponse.v1.schema.json +16 -0
- package/docs/spec/schemas/ReputationEvent.v1.schema.json +164 -0
- package/docs/spec/schemas/RevocationList.v1.schema.json +51 -0
- package/docs/spec/schemas/SettlementAdjustment.v1.schema.json +44 -0
- package/docs/spec/schemas/SettlementDecisionRecord.v1.schema.json +66 -0
- package/docs/spec/schemas/SettlementDecisionRecord.v2.schema.json +149 -0
- package/docs/spec/schemas/SettlementDecisionReport.v1.schema.json +61 -0
- package/docs/spec/schemas/SettlementReceipt.v1.schema.json +135 -0
- package/docs/spec/schemas/SlaDefinition.v1.schema.json +33 -0
- package/docs/spec/schemas/SlaEvaluation.v1.schema.json +26 -0
- package/docs/spec/schemas/TenantSettings.v1.schema.json +90 -0
- package/docs/spec/schemas/TenantSettings.v2.schema.json +161 -0
- package/docs/spec/schemas/TimestampProof.v1.schema.json +17 -0
- package/docs/spec/schemas/ToolCallAgreement.v1.schema.json +34 -0
- package/docs/spec/schemas/ToolCallEvidence.v1.schema.json +45 -0
- package/docs/spec/schemas/ToolManifest.v1.schema.json +54 -0
- package/docs/spec/schemas/VerificationReport.v1.schema.json +83 -0
- package/docs/spec/schemas/VerifyAboutOutput.v1.schema.json +54 -0
- package/docs/spec/schemas/VerifyCliOutput.v1.schema.json +75 -0
- package/docs/spec/schemas/VerifyReleaseOutput.v1.schema.json +47 -0
- package/docs/spec/x402-error-codes.v1.txt +35 -0
- package/docs/templates/buyer-email.txt +18 -0
- package/docs/templates/buyer-one-pager.md +24 -0
- package/package.json +53 -6
- package/scripts/acceptance/full-stack.mjs +734 -0
- package/scripts/acceptance/full-stack.sh +99 -0
- package/scripts/audit/build-audit-packet.mjs +242 -0
- package/scripts/backup-pg.sh +45 -0
- package/scripts/backup-restore/README.md +18 -0
- package/scripts/backup-restore/capture-state.mjs +130 -0
- package/scripts/backup-restore/client.mjs +97 -0
- package/scripts/backup-restore/seed-workload.mjs +235 -0
- package/scripts/backup-restore/verify-state.mjs +139 -0
- package/scripts/backup-restore-test.sh +217 -0
- package/scripts/chaos.js +221 -0
- package/scripts/ci/build-launch-cutover-packet.mjs +304 -0
- package/scripts/ci/build-self-serve-benchmark-report.mjs +122 -0
- package/scripts/ci/changelog-guard.mjs +145 -0
- package/scripts/ci/check-kernel-v0-launch-gate.mjs +233 -0
- package/scripts/ci/check-secret-hygiene.mjs +78 -0
- package/scripts/ci/check-version-consistency.mjs +42 -0
- package/scripts/ci/cli-pack-smoke.mjs +160 -0
- package/scripts/ci/flake-budget-guard.mjs +68 -0
- package/scripts/ci/generate-error-codes.mjs +54 -0
- package/scripts/ci/lib/lighthouse-tracker.mjs +90 -0
- package/scripts/ci/lib/self-serve-launch-gate.mjs +89 -0
- package/scripts/ci/npm-pack-smoke.mjs +454 -0
- package/scripts/ci/run-10x-throughput-drill.mjs +318 -0
- package/scripts/ci/run-10x-throughput-incident-rehearsal.mjs +368 -0
- package/scripts/ci/run-arbitration-workspace-browser-e2e.sh +22 -0
- package/scripts/ci/run-circle-sandbox-smoke.mjs +237 -0
- package/scripts/ci/run-go-live-gate.mjs +150 -0
- package/scripts/ci/run-kernel-v0-ship-gate.mjs +97 -0
- package/scripts/ci/run-mcp-host-cert-matrix.mjs +201 -0
- package/scripts/ci/run-mcp-host-smoke.mjs +473 -0
- package/scripts/ci/run-offline-verification-parity-gate.mjs +762 -0
- package/scripts/ci/run-onboarding-host-success-gate.mjs +516 -0
- package/scripts/ci/run-onboarding-policy-slo-gate.mjs +537 -0
- package/scripts/ci/run-production-cutover-gate.mjs +540 -0
- package/scripts/ci/run-public-openclaw-npx-smoke.mjs +148 -0
- package/scripts/ci/run-release-promotion-guard.mjs +756 -0
- package/scripts/ci/run-self-serve-launch-gate.mjs +56 -0
- package/scripts/ci/runtime-import-smoke.mjs +58 -0
- package/scripts/ci/update-lighthouse-tracker.mjs +112 -0
- package/scripts/closepack/lib.mjs +286 -0
- package/scripts/collect-debug.sh +263 -0
- package/scripts/demo/compositional-settlement-3hop.mjs +237 -0
- package/scripts/demo/delivery-robot/export-ui-fixture.mjs +188 -0
- package/scripts/demo/delivery-robot/generate.mjs +377 -0
- package/scripts/demo/kernel-agent-goes-shopping.mjs +202 -0
- package/scripts/demo/magic-link-first-green.mjs +118 -0
- package/scripts/demo/magic-link-kind-smoke.mjs +577 -0
- package/scripts/demo/mcp-paid-exa.mjs +1110 -0
- package/scripts/dev/billing-doctor.sh +145 -0
- package/scripts/dev/billing-smoke-prod.sh +219 -0
- package/scripts/dev/billing-webhook-replay.sh +161 -0
- package/scripts/dev/env.dev.example +29 -0
- package/scripts/dev/env.sh +37 -0
- package/scripts/dev/new-sdk-key.sh +81 -0
- package/scripts/dev/sdk-first-run.sh +21 -0
- package/scripts/dev/smoke-x402-gateway.sh +115 -0
- package/scripts/dev/start-api.sh +24 -0
- package/scripts/doctor/mcp-host.mjs +120 -0
- package/scripts/examples/produce-and-verify-jobproof.mjs +191 -0
- package/scripts/examples/sdk-first-paid-rfq.py +105 -0
- package/scripts/examples/sdk-first-verified-run.mjs +85 -0
- package/scripts/examples/sdk-first-verified-run.py +99 -0
- package/scripts/examples/sdk-tenant-analytics.mjs +103 -0
- package/scripts/examples/sdk-tenant-analytics.py +118 -0
- package/scripts/finance-pack/bundle.mjs +284 -0
- package/scripts/fixtures/generate-bundle-fixtures.mjs +877 -0
- package/scripts/governance/export.mjs +169 -0
- package/scripts/load/delivery-stress.k6.js +183 -0
- package/scripts/load/ingest-burst.k6.js +236 -0
- package/scripts/load/run-delivery-load.js +66 -0
- package/scripts/load/webhook-receiver.js +131 -0
- package/scripts/magic-link/migrate-run-records-to-db.mjs +35 -0
- package/scripts/mcp/probe.mjs +238 -0
- package/scripts/mcp/settld-mcp-http-gateway.mjs +178 -0
- package/scripts/mcp/settld-mcp-server.mjs +1511 -0
- package/scripts/openapi/write.mjs +13 -0
- package/scripts/ops/bootstrap-tenant-conformance.mjs +185 -0
- package/scripts/ops/build-x402-pilot-reliability-report.mjs +489 -0
- package/scripts/ops/check-x402-receipt-sample.mjs +181 -0
- package/scripts/ops/design-partner-run-packet.mjs +466 -0
- package/scripts/ops/dispute-finance-reconciliation-packet.mjs +313 -0
- package/scripts/ops/hosted-baseline-evidence.mjs +890 -0
- package/scripts/ops/money-rails-chargeback-evidence.mjs +509 -0
- package/scripts/ops/money-rails-reconcile-evidence.mjs +180 -0
- package/scripts/ops/p0-seed-money-rail-operation.mjs +432 -0
- package/scripts/ops/run-x402-hitl-smoke.mjs +607 -0
- package/scripts/pilot/finance-pack.mjs +495 -0
- package/scripts/pilot/fixtures/robot-keypair.json +4 -0
- package/scripts/pilot/fixtures/server-signer.json +4 -0
- package/scripts/policy/cli.mjs +600 -0
- package/scripts/profile/cli.mjs +1324 -0
- package/scripts/proof-bundle/job.mjs +109 -0
- package/scripts/proof-bundle/lib.mjs +92 -0
- package/scripts/proof-bundle/month.mjs +103 -0
- package/scripts/provider/conformance-run.mjs +159 -0
- package/scripts/provider/keys-generate.mjs +135 -0
- package/scripts/provider/publish.mjs +420 -0
- package/scripts/quickstart/x402.mjs +334 -0
- package/scripts/register-entity-secret.mjs +102 -0
- package/scripts/release/build-artifacts.mjs +181 -0
- package/scripts/release/generate-release-index.mjs +112 -0
- package/scripts/release/release-index-lib.mjs +232 -0
- package/scripts/release/sign-release-index.mjs +85 -0
- package/scripts/release/validate-release-assets.mjs +170 -0
- package/scripts/release/verify-release.mjs +261 -0
- package/scripts/restore-pg.sh +34 -0
- package/scripts/scaffold/create-settld-paid-tool.mjs +19 -0
- package/scripts/sdk/smoke-python.py +30 -0
- package/scripts/sdk/smoke.mjs +16 -0
- package/scripts/settlement/x402-batch-worker.mjs +1091 -0
- package/scripts/setup/circle-bootstrap.mjs +310 -0
- package/scripts/setup/host-config.mjs +617 -0
- package/scripts/setup/onboard.mjs +1337 -0
- package/scripts/setup/openclaw-onboard.mjs +423 -0
- package/scripts/setup/wizard.mjs +986 -0
- package/scripts/slo/check.mjs +239 -0
- package/scripts/smoke/k8s-smoke.mjs +214 -0
- package/scripts/spec/generate-protocol-vectors.mjs +1019 -0
- package/scripts/test/check-no-generated-artifacts.sh +12 -0
- package/scripts/test/run.sh +59 -0
- package/scripts/trust/validate-trust-file.mjs +57 -0
- package/scripts/trust-config/rotate-settld-pay.mjs +277 -0
- package/scripts/trust-config/wizard.mjs +161 -0
- package/scripts/vendor-contract-test-lib.mjs +182 -0
- package/scripts/vendor-contract-test.mjs +55 -0
- package/scripts/vercel/build-mkdocs.sh +9 -0
- package/scripts/vercel/ignore-mkdocs.sh +25 -0
- package/scripts/vercel/install-mkdocs.sh +6 -0
- package/scripts/verify-pg.js +217 -0
- package/scripts/x402/receipt-verify.mjs +289 -0
- package/services/finance-sink/src/dedupe-store.js +29 -6
- package/services/receiver/src/dedupe-store.js +29 -5
- package/services/x402-gateway/Dockerfile +13 -0
- package/services/x402-gateway/README.md +58 -0
- package/services/x402-gateway/examples/upstream-mock.js +337 -0
- package/services/x402-gateway/src/server.js +1058 -0
- package/src/api/app.js +34658 -16940
- package/src/api/maintenance.js +70 -0
- package/src/api/middleware/trust-kernel.js +114 -0
- package/src/api/openapi.js +1778 -70
- package/src/api/persistence.js +456 -0
- package/src/api/server.js +81 -5
- package/src/api/store.js +1581 -62
- package/src/api/workers/deliveries.js +99 -4
- package/src/api/workers/insolvency-sweep.js +159 -0
- package/src/core/agent-card.js +69 -0
- package/src/core/agent-wallets.js +231 -0
- package/src/core/agreement-delegation.js +549 -0
- package/src/core/billing-plans.js +40 -6
- package/src/core/circle-reserve-adapter.js +845 -0
- package/src/core/event-policy.js +21 -2
- package/src/core/maintenance-locks.js +1 -0
- package/src/core/operator-action.js +303 -0
- package/src/core/paid-tool-manifest.js +318 -0
- package/src/core/policy-decision.js +322 -0
- package/src/core/policy-packs.js +207 -0
- package/src/core/profile-fingerprint.js +27 -0
- package/src/core/profile-simulation-reasons.js +84 -0
- package/src/core/profile-templates.js +242 -0
- package/src/core/provider-publish-conformance.js +525 -0
- package/src/core/provider-publish-proof.js +396 -0
- package/src/core/provider-quote-signature.js +170 -0
- package/src/core/settld-keys.js +112 -0
- package/src/core/settld-pay-token.js +344 -0
- package/src/core/settlement-kernel.js +239 -2
- package/src/core/settlement-verifier.js +335 -0
- package/src/core/tool-call-agreement.js +112 -0
- package/src/core/tool-call-evidence.js +144 -0
- package/src/core/tool-provider-signature.js +98 -0
- package/src/core/wallet-assignment-resolver.js +129 -0
- package/src/core/wallet-provider-bootstrap.js +365 -0
- package/src/core/x402-escalation-override.js +258 -0
- package/src/core/x402-gate.js +118 -0
- package/src/core/x402-provider-refund-decision.js +220 -0
- package/src/core/x402-receipt-verifier.js +708 -0
- package/src/core/x402-reversal-command.js +251 -0
- package/src/core/x402-wallet-issuer-decision.js +252 -0
- package/src/core/zk-verifier.js +300 -0
- package/src/db/migrations/029_reputation_event_index.sql +54 -0
- package/src/db/migrations/030_artifacts_source_event_unique_job_only.sql +15 -0
- package/src/db/pg.js +18 -7
- package/src/db/store-pg.js +1508 -111
|
@@ -0,0 +1,263 @@
|
|
|
1
|
+
#!/usr/bin/env bash
|
|
2
|
+
set -euo pipefail
|
|
3
|
+
|
|
4
|
+
SCRIPT_VERSION="1"
|
|
5
|
+
WORKDIR=""
|
|
6
|
+
|
|
7
|
+
usage() {
|
|
8
|
+
cat <<'EOH' >&2
|
|
9
|
+
Collect a Settld debug bundle for quickstart / Docker issues.
|
|
10
|
+
|
|
11
|
+
This script captures basic host + repo + Docker/Compose info and (optionally) compose logs,
|
|
12
|
+
then packages everything into a single archive you can attach to a GitHub issue.
|
|
13
|
+
|
|
14
|
+
Usage:
|
|
15
|
+
scripts/collect-debug.sh [--out <path>] [--project-dir <dir>] [--tail <N>] [--no-logs] [--zip] [--dry-run]
|
|
16
|
+
|
|
17
|
+
Options:
|
|
18
|
+
--out <path> Output archive path. Default: ./settld-debug-<ts>.tar.gz
|
|
19
|
+
--project-dir <dir> Directory to run docker compose from. Default: repo root.
|
|
20
|
+
--tail <N> Number of log lines to collect per service. Default: 2000
|
|
21
|
+
--no-logs Skip collecting compose logs.
|
|
22
|
+
--zip Create a .zip (requires `zip`). Default is .tar.gz
|
|
23
|
+
--dry-run Print what would be collected and exit.
|
|
24
|
+
-h, --help Show this help.
|
|
25
|
+
|
|
26
|
+
Notes:
|
|
27
|
+
- Review the bundle before sharing. Logs can contain secrets.
|
|
28
|
+
- The script will still produce a bundle even if Docker is not installed/running.
|
|
29
|
+
EOH
|
|
30
|
+
}
|
|
31
|
+
|
|
32
|
+
die() {
|
|
33
|
+
echo "error: $*" >&2
|
|
34
|
+
exit 2
|
|
35
|
+
}
|
|
36
|
+
|
|
37
|
+
quote_cmd() {
|
|
38
|
+
local out=""
|
|
39
|
+
local arg
|
|
40
|
+
for arg in "$@"; do
|
|
41
|
+
out+="$(printf '%q ' "$arg")"
|
|
42
|
+
done
|
|
43
|
+
printf '%s' "${out% }"
|
|
44
|
+
}
|
|
45
|
+
|
|
46
|
+
run_cmd() {
|
|
47
|
+
local out_file="$1"
|
|
48
|
+
shift
|
|
49
|
+
mkdir -p "$(dirname "$out_file")"
|
|
50
|
+
local cmd
|
|
51
|
+
cmd="$(quote_cmd "$@")"
|
|
52
|
+
{
|
|
53
|
+
echo "\$ ${cmd}"
|
|
54
|
+
set +e
|
|
55
|
+
"$@"
|
|
56
|
+
local rc=$?
|
|
57
|
+
set -e
|
|
58
|
+
echo
|
|
59
|
+
echo "exit_code=${rc}"
|
|
60
|
+
} >"$out_file" 2>&1
|
|
61
|
+
return 0
|
|
62
|
+
}
|
|
63
|
+
|
|
64
|
+
write_kv_file() {
|
|
65
|
+
local out_file="$1"
|
|
66
|
+
shift
|
|
67
|
+
mkdir -p "$(dirname "$out_file")"
|
|
68
|
+
{
|
|
69
|
+
for kv in "$@"; do
|
|
70
|
+
echo "$kv"
|
|
71
|
+
done
|
|
72
|
+
} >"$out_file"
|
|
73
|
+
}
|
|
74
|
+
|
|
75
|
+
sha256_file() {
|
|
76
|
+
local p="$1"
|
|
77
|
+
if command -v sha256sum >/dev/null 2>&1; then
|
|
78
|
+
sha256sum "$p" | awk '{print $1}'
|
|
79
|
+
return 0
|
|
80
|
+
fi
|
|
81
|
+
if command -v shasum >/dev/null 2>&1; then
|
|
82
|
+
shasum -a 256 "$p" | awk '{print $1}'
|
|
83
|
+
return 0
|
|
84
|
+
fi
|
|
85
|
+
echo "unknown"
|
|
86
|
+
}
|
|
87
|
+
|
|
88
|
+
main() {
|
|
89
|
+
local root
|
|
90
|
+
root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
91
|
+
|
|
92
|
+
local out_path=""
|
|
93
|
+
local project_dir="$root"
|
|
94
|
+
local tail_lines="2000"
|
|
95
|
+
local no_logs="0"
|
|
96
|
+
local want_zip="0"
|
|
97
|
+
local dry_run="0"
|
|
98
|
+
|
|
99
|
+
while [[ $# -gt 0 ]]; do
|
|
100
|
+
case "$1" in
|
|
101
|
+
--out)
|
|
102
|
+
[[ $# -ge 2 ]] || die "--out requires a value"
|
|
103
|
+
out_path="$2"
|
|
104
|
+
shift 2
|
|
105
|
+
;;
|
|
106
|
+
--project-dir)
|
|
107
|
+
[[ $# -ge 2 ]] || die "--project-dir requires a value"
|
|
108
|
+
project_dir="$2"
|
|
109
|
+
shift 2
|
|
110
|
+
;;
|
|
111
|
+
--tail)
|
|
112
|
+
[[ $# -ge 2 ]] || die "--tail requires a value"
|
|
113
|
+
tail_lines="$2"
|
|
114
|
+
shift 2
|
|
115
|
+
;;
|
|
116
|
+
--no-logs)
|
|
117
|
+
no_logs="1"
|
|
118
|
+
shift
|
|
119
|
+
;;
|
|
120
|
+
--zip)
|
|
121
|
+
want_zip="1"
|
|
122
|
+
shift
|
|
123
|
+
;;
|
|
124
|
+
--dry-run)
|
|
125
|
+
dry_run="1"
|
|
126
|
+
shift
|
|
127
|
+
;;
|
|
128
|
+
-h|--help)
|
|
129
|
+
usage
|
|
130
|
+
exit 0
|
|
131
|
+
;;
|
|
132
|
+
*)
|
|
133
|
+
die "unknown argument: $1"
|
|
134
|
+
;;
|
|
135
|
+
esac
|
|
136
|
+
done
|
|
137
|
+
|
|
138
|
+
if [[ ! -d "$project_dir" ]]; then
|
|
139
|
+
die "project dir not found: $project_dir"
|
|
140
|
+
fi
|
|
141
|
+
|
|
142
|
+
local ts bundle_name
|
|
143
|
+
ts="$(date -u +%Y%m%dT%H%M%SZ)"
|
|
144
|
+
bundle_name="settld-debug-${ts}"
|
|
145
|
+
|
|
146
|
+
if [[ -z "$out_path" ]]; then
|
|
147
|
+
if [[ "$want_zip" == "1" ]]; then
|
|
148
|
+
out_path="./${bundle_name}.zip"
|
|
149
|
+
else
|
|
150
|
+
out_path="./${bundle_name}.tar.gz"
|
|
151
|
+
fi
|
|
152
|
+
fi
|
|
153
|
+
|
|
154
|
+
if [[ "$dry_run" == "1" ]]; then
|
|
155
|
+
local logs_msg="enabled"
|
|
156
|
+
if [[ "$no_logs" == "1" ]]; then
|
|
157
|
+
logs_msg="skipped (--no-logs)"
|
|
158
|
+
fi
|
|
159
|
+
cat <<EOF
|
|
160
|
+
Would create:
|
|
161
|
+
bundle: ${bundle_name}/
|
|
162
|
+
archive: ${out_path}
|
|
163
|
+
|
|
164
|
+
Would collect:
|
|
165
|
+
- Host: uname, os-release (if present), sw_vers (if present)
|
|
166
|
+
- Runtime: bash/node/npm versions (if present)
|
|
167
|
+
- Repo: git head + git status (if present)
|
|
168
|
+
- Docker: version + info (if present)
|
|
169
|
+
- Compose: version + ps + config
|
|
170
|
+
- Compose logs: ${logs_msg} (tail=${tail_lines})
|
|
171
|
+
EOF
|
|
172
|
+
exit 0
|
|
173
|
+
fi
|
|
174
|
+
|
|
175
|
+
WORKDIR="$(mktemp -d)"
|
|
176
|
+
local bundle_dir
|
|
177
|
+
bundle_dir="${WORKDIR}/${bundle_name}"
|
|
178
|
+
mkdir -p "$bundle_dir"
|
|
179
|
+
trap 'if [ -n "${WORKDIR:-}" ] && [ -d "${WORKDIR:-}" ]; then rm -rf "$WORKDIR"; fi' EXIT
|
|
180
|
+
|
|
181
|
+
write_kv_file "${bundle_dir}/meta.txt" \
|
|
182
|
+
"script=collect-debug.sh" \
|
|
183
|
+
"script_version=${SCRIPT_VERSION}" \
|
|
184
|
+
"collected_at_utc=$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
|
|
185
|
+
"project_dir=${project_dir}"
|
|
186
|
+
|
|
187
|
+
run_cmd "${bundle_dir}/host/uname.txt" uname -a
|
|
188
|
+
if [[ -f /etc/os-release ]]; then
|
|
189
|
+
run_cmd "${bundle_dir}/host/os-release.txt" cat /etc/os-release
|
|
190
|
+
fi
|
|
191
|
+
if command -v sw_vers >/dev/null 2>&1; then
|
|
192
|
+
run_cmd "${bundle_dir}/host/sw_vers.txt" sw_vers
|
|
193
|
+
fi
|
|
194
|
+
|
|
195
|
+
run_cmd "${bundle_dir}/runtime/bash-version.txt" bash --version
|
|
196
|
+
if command -v node >/dev/null 2>&1; then
|
|
197
|
+
run_cmd "${bundle_dir}/runtime/node-version.txt" node --version
|
|
198
|
+
fi
|
|
199
|
+
if command -v npm >/dev/null 2>&1; then
|
|
200
|
+
run_cmd "${bundle_dir}/runtime/npm-version.txt" npm --version
|
|
201
|
+
fi
|
|
202
|
+
|
|
203
|
+
if command -v git >/dev/null 2>&1; then
|
|
204
|
+
run_cmd "${bundle_dir}/repo/git-head.txt" git -C "$root" rev-parse HEAD
|
|
205
|
+
run_cmd "${bundle_dir}/repo/git-status.txt" git -C "$root" status -sb
|
|
206
|
+
fi
|
|
207
|
+
|
|
208
|
+
write_kv_file "${bundle_dir}/env/selected.txt" \
|
|
209
|
+
"PATH=$([[ -n "${PATH:-}" ]] && echo '<set>' || echo '<unset>')" \
|
|
210
|
+
"DOCKER_HOST=$([[ -n "${DOCKER_HOST:-}" ]] && echo '<set>' || echo '<unset>')" \
|
|
211
|
+
"DOCKER_CONTEXT=$([[ -n "${DOCKER_CONTEXT:-}" ]] && echo '<set>' || echo '<unset>')" \
|
|
212
|
+
"COMPOSE_FILE=$([[ -n "${COMPOSE_FILE:-}" ]] && echo '<set>' || echo '<unset>')" \
|
|
213
|
+
"COMPOSE_PROJECT_NAME=$([[ -n "${COMPOSE_PROJECT_NAME:-}" ]] && echo '<set>' || echo '<unset>')" \
|
|
214
|
+
"HTTP_PROXY=$([[ -n "${HTTP_PROXY:-}" ]] && echo '<set>' || echo '<unset>')" \
|
|
215
|
+
"HTTPS_PROXY=$([[ -n "${HTTPS_PROXY:-}" ]] && echo '<set>' || echo '<unset>')" \
|
|
216
|
+
"NO_PROXY=$([[ -n "${NO_PROXY:-}" ]] && echo '<set>' || echo '<unset>')"
|
|
217
|
+
|
|
218
|
+
if command -v docker >/dev/null 2>&1; then
|
|
219
|
+
run_cmd "${bundle_dir}/docker/docker-version.txt" docker --version
|
|
220
|
+
run_cmd "${bundle_dir}/docker/docker-info.txt" docker info
|
|
221
|
+
else
|
|
222
|
+
write_kv_file "${bundle_dir}/docker/docker-missing.txt" "docker=<missing>"
|
|
223
|
+
fi
|
|
224
|
+
|
|
225
|
+
# Compose info (prefer `docker compose`, fall back to `docker-compose`).
|
|
226
|
+
local compose_kind="none"
|
|
227
|
+
local -a compose_cmd=()
|
|
228
|
+
if command -v docker >/dev/null 2>&1 && docker compose version >/dev/null 2>&1; then
|
|
229
|
+
compose_kind="docker-compose-plugin"
|
|
230
|
+
compose_cmd=(docker compose)
|
|
231
|
+
elif command -v docker-compose >/dev/null 2>&1; then
|
|
232
|
+
compose_kind="docker-compose-standalone"
|
|
233
|
+
compose_cmd=(docker-compose)
|
|
234
|
+
fi
|
|
235
|
+
|
|
236
|
+
write_kv_file "${bundle_dir}/compose/compose-kind.txt" "compose_kind=${compose_kind}"
|
|
237
|
+
if [[ "$compose_kind" != "none" ]]; then
|
|
238
|
+
run_cmd "${bundle_dir}/compose/compose-version.txt" "${compose_cmd[@]}" version
|
|
239
|
+
run_cmd "${bundle_dir}/compose/compose-ps.txt" "${compose_cmd[@]}" -f "${project_dir}/docker-compose.yml" ps
|
|
240
|
+
run_cmd "${bundle_dir}/compose/compose-config.txt" "${compose_cmd[@]}" -f "${project_dir}/docker-compose.yml" config
|
|
241
|
+
|
|
242
|
+
if [[ "$no_logs" != "1" ]]; then
|
|
243
|
+
run_cmd "${bundle_dir}/compose/compose-logs.txt" "${compose_cmd[@]}" -f "${project_dir}/docker-compose.yml" logs --no-color --tail "$tail_lines"
|
|
244
|
+
fi
|
|
245
|
+
fi
|
|
246
|
+
|
|
247
|
+
# Pack archive.
|
|
248
|
+
mkdir -p "$(dirname "$out_path")" || true
|
|
249
|
+
if [[ "$want_zip" == "1" ]]; then
|
|
250
|
+
command -v zip >/dev/null 2>&1 || die "--zip requested but `zip` is not installed"
|
|
251
|
+
(cd "$WORKDIR" && zip -r -q "$out_path" "$bundle_name")
|
|
252
|
+
else
|
|
253
|
+
(cd "$WORKDIR" && tar -czf "$out_path" "$bundle_name")
|
|
254
|
+
fi
|
|
255
|
+
|
|
256
|
+
local sum
|
|
257
|
+
sum="$(sha256_file "$out_path")"
|
|
258
|
+
printf '%s %s\n' "$sum" "$(basename "$out_path")" > "${out_path}.sha256" 2>/dev/null || true
|
|
259
|
+
echo "wrote: ${out_path}"
|
|
260
|
+
echo "sha256: ${sum}"
|
|
261
|
+
}
|
|
262
|
+
|
|
263
|
+
main "$@"
|
|
@@ -0,0 +1,237 @@
|
|
|
1
|
+
import { canonicalJsonStringify } from "../../src/core/canonical-json.js";
|
|
2
|
+
import { sha256Hex } from "../../src/core/crypto.js";
|
|
3
|
+
import {
|
|
4
|
+
buildAgreementDelegationV1,
|
|
5
|
+
cascadeSettlementCheck,
|
|
6
|
+
refundUnwindCheck
|
|
7
|
+
} from "../../src/core/agreement-delegation.js";
|
|
8
|
+
import {
|
|
9
|
+
buildSettlementDecisionRecordV2,
|
|
10
|
+
buildSettlementReceiptV1,
|
|
11
|
+
verifySettlementKernelArtifacts
|
|
12
|
+
} from "../../src/core/settlement-kernel.js";
|
|
13
|
+
|
|
14
|
+
const tenantId = "tenant_demo_3hop";
|
|
15
|
+
const currency = "USD";
|
|
16
|
+
const createdAt = "2026-02-01T00:00:00.000Z";
|
|
17
|
+
const settledAt = "2026-02-01T00:10:00.000Z";
|
|
18
|
+
const refundedAt = "2026-02-01T00:20:00.000Z";
|
|
19
|
+
|
|
20
|
+
const agreementA = sha256Hex("agreement:A");
|
|
21
|
+
const agreementB = sha256Hex("agreement:B");
|
|
22
|
+
const agreementC = sha256Hex("agreement:C");
|
|
23
|
+
|
|
24
|
+
const delegationAB = buildAgreementDelegationV1({
|
|
25
|
+
delegationId: "dlg_ab_demo",
|
|
26
|
+
tenantId,
|
|
27
|
+
parentAgreementHash: agreementA,
|
|
28
|
+
childAgreementHash: agreementB,
|
|
29
|
+
delegatorAgentId: "agt_A",
|
|
30
|
+
delegateeAgentId: "agt_B",
|
|
31
|
+
budgetCapCents: 20_000,
|
|
32
|
+
currency,
|
|
33
|
+
delegationDepth: 1,
|
|
34
|
+
maxDelegationDepth: 3,
|
|
35
|
+
ancestorChain: [agreementA],
|
|
36
|
+
createdAt
|
|
37
|
+
});
|
|
38
|
+
|
|
39
|
+
const delegationBC = buildAgreementDelegationV1({
|
|
40
|
+
delegationId: "dlg_bc_demo",
|
|
41
|
+
tenantId,
|
|
42
|
+
parentAgreementHash: agreementB,
|
|
43
|
+
childAgreementHash: agreementC,
|
|
44
|
+
delegatorAgentId: "agt_B",
|
|
45
|
+
delegateeAgentId: "agt_C",
|
|
46
|
+
budgetCapCents: 15_000,
|
|
47
|
+
currency,
|
|
48
|
+
delegationDepth: 2,
|
|
49
|
+
maxDelegationDepth: 3,
|
|
50
|
+
ancestorChain: [agreementA, agreementB],
|
|
51
|
+
createdAt
|
|
52
|
+
});
|
|
53
|
+
|
|
54
|
+
const settlePlan = cascadeSettlementCheck({
|
|
55
|
+
delegations: [delegationAB, delegationBC],
|
|
56
|
+
fromChildHash: agreementC
|
|
57
|
+
});
|
|
58
|
+
|
|
59
|
+
const unwindPlan = refundUnwindCheck({
|
|
60
|
+
delegations: [delegationAB, delegationBC],
|
|
61
|
+
fromParentHash: agreementA
|
|
62
|
+
});
|
|
63
|
+
|
|
64
|
+
const grossRevenueCents = 10_000;
|
|
65
|
+
const cToBCents = 3_500;
|
|
66
|
+
const bToACents = 1_200;
|
|
67
|
+
const unwindRefundCents = 900;
|
|
68
|
+
|
|
69
|
+
const settlePayouts = {
|
|
70
|
+
agt_A: bToACents,
|
|
71
|
+
agt_B: cToBCents - bToACents,
|
|
72
|
+
agt_C: grossRevenueCents - cToBCents
|
|
73
|
+
};
|
|
74
|
+
|
|
75
|
+
const unwindRefunds = {
|
|
76
|
+
agt_A: unwindRefundCents,
|
|
77
|
+
agt_B: unwindRefundCents,
|
|
78
|
+
agt_C: unwindRefundCents
|
|
79
|
+
};
|
|
80
|
+
|
|
81
|
+
const finalPayouts = {
|
|
82
|
+
agt_A: settlePayouts.agt_A - unwindRefundCents,
|
|
83
|
+
agt_B: settlePayouts.agt_B - unwindRefundCents,
|
|
84
|
+
agt_C: settlePayouts.agt_C - unwindRefundCents
|
|
85
|
+
};
|
|
86
|
+
|
|
87
|
+
const settlementSettle = {
|
|
88
|
+
runId: "run_demo_3hop_settle",
|
|
89
|
+
settlementId: "setl_demo_3hop_settle",
|
|
90
|
+
status: "released",
|
|
91
|
+
decisionTrace: {}
|
|
92
|
+
};
|
|
93
|
+
|
|
94
|
+
const settleDecision = buildSettlementDecisionRecordV2({
|
|
95
|
+
decisionId: "dec_demo_3hop_settle",
|
|
96
|
+
tenantId,
|
|
97
|
+
runId: settlementSettle.runId,
|
|
98
|
+
settlementId: settlementSettle.settlementId,
|
|
99
|
+
agreementId: agreementC,
|
|
100
|
+
decisionStatus: "auto_resolved",
|
|
101
|
+
decisionMode: "automatic",
|
|
102
|
+
verificationStatus: "green",
|
|
103
|
+
policyHashUsed: "1".repeat(64),
|
|
104
|
+
verificationMethodHashUsed: "2".repeat(64),
|
|
105
|
+
policyRef: {
|
|
106
|
+
policyHash: "1".repeat(64),
|
|
107
|
+
verificationMethodHash: "2".repeat(64)
|
|
108
|
+
},
|
|
109
|
+
verifierRef: {
|
|
110
|
+
verifierId: "settld.demo",
|
|
111
|
+
verifierVersion: "v1",
|
|
112
|
+
verifierHash: "3".repeat(64),
|
|
113
|
+
modality: "deterministic"
|
|
114
|
+
},
|
|
115
|
+
runStatus: "completed",
|
|
116
|
+
runLastEventId: "ev_demo_3hop_settle",
|
|
117
|
+
runLastChainHash: "4".repeat(64),
|
|
118
|
+
resolutionEventId: "res_demo_3hop_settle",
|
|
119
|
+
decidedAt: settledAt
|
|
120
|
+
});
|
|
121
|
+
|
|
122
|
+
const settleReceipt = buildSettlementReceiptV1({
|
|
123
|
+
receiptId: "rcpt_demo_3hop_settle",
|
|
124
|
+
tenantId,
|
|
125
|
+
runId: settlementSettle.runId,
|
|
126
|
+
settlementId: settlementSettle.settlementId,
|
|
127
|
+
decisionRecord: settleDecision,
|
|
128
|
+
status: "released",
|
|
129
|
+
amountCents: grossRevenueCents,
|
|
130
|
+
releasedAmountCents: grossRevenueCents,
|
|
131
|
+
refundedAmountCents: 0,
|
|
132
|
+
releaseRatePct: 100,
|
|
133
|
+
currency,
|
|
134
|
+
runStatus: "completed",
|
|
135
|
+
resolutionEventId: "res_demo_3hop_settle",
|
|
136
|
+
settledAt,
|
|
137
|
+
createdAt: settledAt
|
|
138
|
+
});
|
|
139
|
+
settlementSettle.decisionTrace = { decisionRecord: settleDecision, settlementReceipt: settleReceipt };
|
|
140
|
+
const settleVerification = verifySettlementKernelArtifacts({ settlement: settlementSettle, runId: settlementSettle.runId });
|
|
141
|
+
|
|
142
|
+
const settlementUnwind = {
|
|
143
|
+
runId: "run_demo_3hop_unwind",
|
|
144
|
+
settlementId: "setl_demo_3hop_unwind",
|
|
145
|
+
status: "refunded",
|
|
146
|
+
decisionTrace: {}
|
|
147
|
+
};
|
|
148
|
+
|
|
149
|
+
const unwindDecision = buildSettlementDecisionRecordV2({
|
|
150
|
+
decisionId: "dec_demo_3hop_unwind",
|
|
151
|
+
tenantId,
|
|
152
|
+
runId: settlementUnwind.runId,
|
|
153
|
+
settlementId: settlementUnwind.settlementId,
|
|
154
|
+
agreementId: agreementA,
|
|
155
|
+
decisionStatus: "auto_resolved",
|
|
156
|
+
decisionMode: "automatic",
|
|
157
|
+
decisionReason: "refund_unwind",
|
|
158
|
+
verificationStatus: "green",
|
|
159
|
+
policyHashUsed: "5".repeat(64),
|
|
160
|
+
verificationMethodHashUsed: "6".repeat(64),
|
|
161
|
+
policyRef: {
|
|
162
|
+
policyHash: "5".repeat(64),
|
|
163
|
+
verificationMethodHash: "6".repeat(64)
|
|
164
|
+
},
|
|
165
|
+
verifierRef: {
|
|
166
|
+
verifierId: "settld.demo",
|
|
167
|
+
verifierVersion: "v1",
|
|
168
|
+
verifierHash: "7".repeat(64),
|
|
169
|
+
modality: "deterministic"
|
|
170
|
+
},
|
|
171
|
+
runStatus: "completed",
|
|
172
|
+
runLastEventId: "ev_demo_3hop_unwind",
|
|
173
|
+
runLastChainHash: "8".repeat(64),
|
|
174
|
+
resolutionEventId: "res_demo_3hop_unwind",
|
|
175
|
+
decidedAt: refundedAt
|
|
176
|
+
});
|
|
177
|
+
|
|
178
|
+
const unwindReceipt = buildSettlementReceiptV1({
|
|
179
|
+
receiptId: "rcpt_demo_3hop_unwind",
|
|
180
|
+
tenantId,
|
|
181
|
+
runId: settlementUnwind.runId,
|
|
182
|
+
settlementId: settlementUnwind.settlementId,
|
|
183
|
+
decisionRecord: unwindDecision,
|
|
184
|
+
status: "refunded",
|
|
185
|
+
amountCents: unwindRefundCents,
|
|
186
|
+
releasedAmountCents: 0,
|
|
187
|
+
refundedAmountCents: unwindRefundCents,
|
|
188
|
+
releaseRatePct: 0,
|
|
189
|
+
currency,
|
|
190
|
+
runStatus: "completed",
|
|
191
|
+
resolutionEventId: "res_demo_3hop_unwind",
|
|
192
|
+
settledAt: refundedAt,
|
|
193
|
+
createdAt: refundedAt
|
|
194
|
+
});
|
|
195
|
+
settlementUnwind.decisionTrace = { decisionRecord: unwindDecision, settlementReceipt: unwindReceipt };
|
|
196
|
+
const unwindVerification = verifySettlementKernelArtifacts({ settlement: settlementUnwind, runId: settlementUnwind.runId });
|
|
197
|
+
|
|
198
|
+
const lineage = {
|
|
199
|
+
rootAgreementHash: agreementA,
|
|
200
|
+
chain: [agreementA, agreementB, agreementC],
|
|
201
|
+
delegationHashes: [delegationAB.delegationHash, delegationBC.delegationHash],
|
|
202
|
+
settleParentAgreementHashes: settlePlan.parentAgreementHashes,
|
|
203
|
+
unwindChildAgreementHashes: unwindPlan.childAgreementHashes
|
|
204
|
+
};
|
|
205
|
+
|
|
206
|
+
const report = {
|
|
207
|
+
schemaVersion: "CompositionalSettlementDemo.v1",
|
|
208
|
+
tenantId,
|
|
209
|
+
createdAt,
|
|
210
|
+
lineage,
|
|
211
|
+
decisionHashes: {
|
|
212
|
+
settle: settleDecision.decisionHash,
|
|
213
|
+
unwind: unwindDecision.decisionHash
|
|
214
|
+
},
|
|
215
|
+
receiptHashes: {
|
|
216
|
+
settle: settleReceipt.receiptHash,
|
|
217
|
+
unwind: unwindReceipt.receiptHash
|
|
218
|
+
},
|
|
219
|
+
settlePayouts,
|
|
220
|
+
finalRefunds: unwindRefunds,
|
|
221
|
+
finalPayouts,
|
|
222
|
+
verification: {
|
|
223
|
+
settle: settleVerification.valid === true,
|
|
224
|
+
unwind: unwindVerification.valid === true
|
|
225
|
+
}
|
|
226
|
+
};
|
|
227
|
+
|
|
228
|
+
const reportJson = canonicalJsonStringify(report);
|
|
229
|
+
const reportHash = sha256Hex(reportJson);
|
|
230
|
+
|
|
231
|
+
console.log(`[demo] lineage: ${agreementA.slice(0, 10)} -> ${agreementB.slice(0, 10)} -> ${agreementC.slice(0, 10)}`);
|
|
232
|
+
console.log(`[demo] settle decisionHash=${settleDecision.decisionHash}`);
|
|
233
|
+
console.log(`[demo] unwind decisionHash=${unwindDecision.decisionHash}`);
|
|
234
|
+
console.log(`[demo] final payouts cents=${JSON.stringify(finalPayouts)}`);
|
|
235
|
+
console.log(`[demo] final refunds cents=${JSON.stringify(unwindRefunds)}`);
|
|
236
|
+
console.log(`REPORT_JSON:${reportJson}`);
|
|
237
|
+
console.log(`PASS demo=compositional-settlement-3hop reportHash=${reportHash}`);
|
|
@@ -0,0 +1,188 @@
|
|
|
1
|
+
import fs from "node:fs/promises";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
|
|
4
|
+
async function exists(p) {
|
|
5
|
+
try {
|
|
6
|
+
await fs.access(p);
|
|
7
|
+
return true;
|
|
8
|
+
} catch {
|
|
9
|
+
return false;
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
|
|
13
|
+
async function copyFile(src, dst) {
|
|
14
|
+
await fs.mkdir(path.dirname(dst), { recursive: true });
|
|
15
|
+
await fs.copyFile(src, dst);
|
|
16
|
+
}
|
|
17
|
+
|
|
18
|
+
async function listFiles(dir) {
|
|
19
|
+
const entries = await fs.readdir(dir, { withFileTypes: true });
|
|
20
|
+
return entries.filter((e) => e.isFile()).map((e) => e.name);
|
|
21
|
+
}
|
|
22
|
+
|
|
23
|
+
async function listDirs(dir) {
|
|
24
|
+
const entries = await fs.readdir(dir, { withFileTypes: true });
|
|
25
|
+
return entries.filter((e) => e.isDirectory()).map((e) => e.name);
|
|
26
|
+
}
|
|
27
|
+
|
|
28
|
+
async function latestFinancePackBundleZip() {
|
|
29
|
+
const bundlesDir = path.resolve("demo/finance-pack/bundles");
|
|
30
|
+
if (!(await exists(bundlesDir))) return null;
|
|
31
|
+
const files = (await listFiles(bundlesDir)).filter((f) => f.endsWith(".zip")).sort();
|
|
32
|
+
return files.length ? path.join(bundlesDir, files[files.length - 1]) : null;
|
|
33
|
+
}
|
|
34
|
+
|
|
35
|
+
async function exportHistory({ srcRoot, dstRoot, requiredFiles, limit }) {
|
|
36
|
+
if (!(await exists(srcRoot))) return { copiedRuns: [], skipped: "missing_src_root" };
|
|
37
|
+
|
|
38
|
+
const runDirs = (await listDirs(srcRoot))
|
|
39
|
+
.filter((d) => d !== "latest")
|
|
40
|
+
.sort()
|
|
41
|
+
.slice(-limit);
|
|
42
|
+
|
|
43
|
+
const copiedRuns = [];
|
|
44
|
+
for (const runId of runDirs) {
|
|
45
|
+
const srcDir = path.join(srcRoot, runId);
|
|
46
|
+
const dstDir = path.join(dstRoot, runId);
|
|
47
|
+
const copied = [];
|
|
48
|
+
for (const f of requiredFiles) {
|
|
49
|
+
const src = path.join(srcDir, f);
|
|
50
|
+
if (!(await exists(src))) continue;
|
|
51
|
+
await copyFile(src, path.join(dstDir, f));
|
|
52
|
+
copied.push(f);
|
|
53
|
+
}
|
|
54
|
+
if (copied.length) copiedRuns.push({ runId, copied });
|
|
55
|
+
}
|
|
56
|
+
|
|
57
|
+
const index = { copiedRuns, latestRunId: copiedRuns.at(-1)?.runId ?? null };
|
|
58
|
+
await fs.mkdir(dstRoot, { recursive: true });
|
|
59
|
+
await fs.writeFile(path.join(dstRoot, "index.json"), JSON.stringify(index, null, 2) + "\n", "utf8");
|
|
60
|
+
return index;
|
|
61
|
+
}
|
|
62
|
+
|
|
63
|
+
async function main() {
|
|
64
|
+
const deliverySrcDir = path.resolve("demo/delivery-robot/output/latest");
|
|
65
|
+
const deliveryDstDirLegacy = path.resolve("dashboard/public/demo/latest");
|
|
66
|
+
const deliveryDstDir = path.resolve("dashboard/public/demo/delivery/latest");
|
|
67
|
+
const financeSrcDir = path.resolve("demo/finance-pack/output/latest");
|
|
68
|
+
const financeDstDir = path.resolve("dashboard/public/demo/finance/latest");
|
|
69
|
+
|
|
70
|
+
if (!(await exists(deliverySrcDir))) {
|
|
71
|
+
throw new Error(`missing demo output: ${deliverySrcDir}. Run \`npm run demo:delivery\` first.`);
|
|
72
|
+
}
|
|
73
|
+
|
|
74
|
+
const files = [
|
|
75
|
+
"run.json",
|
|
76
|
+
"sample_ingest_request.json",
|
|
77
|
+
"sample_ingest_response.json",
|
|
78
|
+
"timeline.json",
|
|
79
|
+
"WorkCertificate.v1.json",
|
|
80
|
+
"SettlementStatement.v1.json",
|
|
81
|
+
"CreditMemo.v1.json"
|
|
82
|
+
];
|
|
83
|
+
|
|
84
|
+
const copiedDelivery = [];
|
|
85
|
+
for (const f of files) {
|
|
86
|
+
const src = path.join(deliverySrcDir, f);
|
|
87
|
+
if (!(await exists(src))) continue;
|
|
88
|
+
await copyFile(src, path.join(deliveryDstDirLegacy, f));
|
|
89
|
+
await copyFile(src, path.join(deliveryDstDir, f));
|
|
90
|
+
copiedDelivery.push(f);
|
|
91
|
+
}
|
|
92
|
+
|
|
93
|
+
await fs.writeFile(path.join(deliveryDstDirLegacy, "index.json"), JSON.stringify({ copied: copiedDelivery }, null, 2) + "\n", "utf8");
|
|
94
|
+
await fs.writeFile(path.join(deliveryDstDir, "index.json"), JSON.stringify({ copied: copiedDelivery }, null, 2) + "\n", "utf8");
|
|
95
|
+
|
|
96
|
+
// Delivery history (to support “fleet playback” demos).
|
|
97
|
+
const deliveryHistory = await exportHistory({
|
|
98
|
+
srcRoot: path.resolve("demo/delivery-robot/output"),
|
|
99
|
+
dstRoot: path.resolve("dashboard/public/demo/delivery/history"),
|
|
100
|
+
requiredFiles: ["run.json", "timeline.json", "WorkCertificate.v1.json", "SettlementStatement.v1.json", "CreditMemo.v1.json"],
|
|
101
|
+
limit: 6
|
|
102
|
+
});
|
|
103
|
+
|
|
104
|
+
// Finance pack fixture (optional, but enables a “finance demo” button).
|
|
105
|
+
const copiedFinance = [];
|
|
106
|
+
let financeHistory = null;
|
|
107
|
+
if (await exists(financeSrcDir)) {
|
|
108
|
+
const financeFiles = [
|
|
109
|
+
"run.json",
|
|
110
|
+
"steps.json",
|
|
111
|
+
"WorkCertificate.v1.json",
|
|
112
|
+
"SettlementStatement.v1.json",
|
|
113
|
+
"CreditMemo.v1.json",
|
|
114
|
+
"GLBatch.v1.json",
|
|
115
|
+
"GLBatch.v1.csv",
|
|
116
|
+
"JournalCsv.v1.json",
|
|
117
|
+
"JournalCsv.v1.csv",
|
|
118
|
+
"JobProofBundle.v1.zip",
|
|
119
|
+
"MonthProofBundle.v1.zip"
|
|
120
|
+
];
|
|
121
|
+
|
|
122
|
+
for (const f of financeFiles) {
|
|
123
|
+
const src = path.join(financeSrcDir, f);
|
|
124
|
+
if (!(await exists(src))) continue;
|
|
125
|
+
await copyFile(src, path.join(financeDstDir, f));
|
|
126
|
+
copiedFinance.push(f);
|
|
127
|
+
}
|
|
128
|
+
|
|
129
|
+
const financePackZip = await latestFinancePackBundleZip();
|
|
130
|
+
if (financePackZip) {
|
|
131
|
+
await copyFile(financePackZip, path.join(financeDstDir, "FinancePackBundle.v1.zip"));
|
|
132
|
+
copiedFinance.push("FinancePackBundle.v1.zip");
|
|
133
|
+
|
|
134
|
+
// Best-effort: also copy reconcile.json from the unpacked bundle (if present).
|
|
135
|
+
const unpackedDir = financePackZip.replace(/\.zip$/i, "");
|
|
136
|
+
const reconcile = path.join(unpackedDir, "finance", "reconcile.json");
|
|
137
|
+
if (await exists(reconcile)) {
|
|
138
|
+
await copyFile(reconcile, path.join(financeDstDir, "reconcile.json"));
|
|
139
|
+
copiedFinance.push("reconcile.json");
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
|
|
143
|
+
await fs.writeFile(path.join(financeDstDir, "index.json"), JSON.stringify({ copied: copiedFinance }, null, 2) + "\n", "utf8");
|
|
144
|
+
|
|
145
|
+
financeHistory = await exportHistory({
|
|
146
|
+
srcRoot: path.resolve("demo/finance-pack/output"),
|
|
147
|
+
dstRoot: path.resolve("dashboard/public/demo/finance/history"),
|
|
148
|
+
requiredFiles: ["run.json", "steps.json", "WorkCertificate.v1.json", "SettlementStatement.v1.json", "GLBatch.v1.json", "JournalCsv.v1.csv"],
|
|
149
|
+
limit: 4
|
|
150
|
+
});
|
|
151
|
+
}
|
|
152
|
+
|
|
153
|
+
// Root index for UI scenario picker.
|
|
154
|
+
const index = {
|
|
155
|
+
generatedAt: new Date().toISOString(),
|
|
156
|
+
history: {
|
|
157
|
+
delivery: { runs: deliveryHistory?.copiedRuns?.length ?? 0, latestRunId: deliveryHistory?.latestRunId ?? null },
|
|
158
|
+
finance: { runs: financeHistory?.copiedRuns?.length ?? 0, latestRunId: financeHistory?.latestRunId ?? null }
|
|
159
|
+
},
|
|
160
|
+
scenarios: [
|
|
161
|
+
{
|
|
162
|
+
id: "delivery",
|
|
163
|
+
title: "SLA Credit (Delivery)",
|
|
164
|
+
subtitle: "Facts in → breach → CreditMemo + SettlementStatement",
|
|
165
|
+
emoji: "🚚"
|
|
166
|
+
},
|
|
167
|
+
{
|
|
168
|
+
id: "finance",
|
|
169
|
+
title: "Finance Pack (Month Close)",
|
|
170
|
+
subtitle: "Statements → GLBatch + JournalCsv + bundles",
|
|
171
|
+
emoji: "📚",
|
|
172
|
+
available: copiedFinance.length > 0
|
|
173
|
+
}
|
|
174
|
+
]
|
|
175
|
+
};
|
|
176
|
+
const rootIndexPath = path.resolve("dashboard/public/demo/index.json");
|
|
177
|
+
await fs.mkdir(path.dirname(rootIndexPath), { recursive: true });
|
|
178
|
+
await fs.writeFile(rootIndexPath, JSON.stringify(index, null, 2) + "\n", "utf8");
|
|
179
|
+
|
|
180
|
+
process.stdout.write(`Exported delivery fixture to dashboard/public/demo/delivery/latest (and legacy demo/latest)\n`);
|
|
181
|
+
if (copiedFinance.length) process.stdout.write(`Exported finance fixture to dashboard/public/demo/finance/latest\n`);
|
|
182
|
+
process.stdout.write(`Wrote dashboard/public/demo/index.json\n`);
|
|
183
|
+
}
|
|
184
|
+
|
|
185
|
+
main().catch((err) => {
|
|
186
|
+
console.error(err);
|
|
187
|
+
process.exitCode = 1;
|
|
188
|
+
});
|