settld 0.1.2 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (483) hide show
  1. package/README.md +93 -3
  2. package/SETTLD_VERSION +1 -1
  3. package/bin/settld-mcp +2 -0
  4. package/bin/settld.js +71 -0
  5. package/conformance/kernel-v0/README.md +7 -0
  6. package/conformance/kernel-v0/run.mjs +292 -4
  7. package/docs/ACCESS.md +57 -0
  8. package/docs/ADOPTION_CHECKLIST.md +44 -0
  9. package/docs/ALERTS.md +198 -0
  10. package/docs/ARCHITECTURE.md +69 -0
  11. package/docs/ARCHITECTURE_FOUNDER_GUIDE.md +284 -0
  12. package/docs/ARTIFACTS.md +60 -0
  13. package/docs/CERTIFICATION_CHECKLIST.md +33 -0
  14. package/docs/CIRCLE_SANDBOX_E2E.md +152 -0
  15. package/docs/CONFIG.md +297 -0
  16. package/docs/CONTRACTS_APIS.md +23 -0
  17. package/docs/DEPRECATION.md +31 -0
  18. package/docs/DOMAIN_MODEL.md +92 -0
  19. package/docs/EVENT_ENVELOPE.md +53 -0
  20. package/docs/FINANCE_PACK_FORMAT.md +53 -0
  21. package/docs/INCIDENT_TAXONOMY.md +30 -0
  22. package/docs/JOB_STATE_MACHINE.md +66 -0
  23. package/docs/KERNEL_COMPATIBLE.md +60 -0
  24. package/docs/KERNEL_V0.md +40 -0
  25. package/docs/KEY_ROTATION.md +80 -0
  26. package/docs/LEDGER.md +82 -0
  27. package/docs/LIVENESS.md +76 -0
  28. package/docs/MVP_BUILD_ORDER.md +36 -0
  29. package/docs/ONCALL_PLAYBOOK.md +39 -0
  30. package/docs/OPERATIONS_SIGNING.md +20 -0
  31. package/docs/OVERVIEW.md +190 -0
  32. package/docs/PERF_BASELINE.md +85 -0
  33. package/docs/PRD.md +77 -0
  34. package/docs/QUICKSTART_KERNEL_V0.md +96 -0
  35. package/docs/QUICKSTART_MCP.md +377 -0
  36. package/docs/QUICKSTART_MCP_HOSTS.md +210 -0
  37. package/docs/QUICKSTART_POLICY_PACKS.md +65 -0
  38. package/docs/QUICKSTART_PRODUCE.md +61 -0
  39. package/docs/QUICKSTART_PROFILES.md +198 -0
  40. package/docs/QUICKSTART_RELEASE_VERIFY.md +39 -0
  41. package/docs/QUICKSTART_SDK.md +125 -0
  42. package/docs/QUICKSTART_SDK_PYTHON.md +111 -0
  43. package/docs/QUICKSTART_VERIFY.md +54 -0
  44. package/docs/QUICKSTART_X402_GATEWAY.md +317 -0
  45. package/docs/README.md +33 -0
  46. package/docs/RELEASE_CHECKLIST.md +182 -0
  47. package/docs/RELEASING.md +82 -0
  48. package/docs/REPO_SETTINGS.md +37 -0
  49. package/docs/RUNBOOK.md +86 -0
  50. package/docs/SKILLS.md +42 -0
  51. package/docs/SKILL_BUNDLE_FORMAT.md +48 -0
  52. package/docs/SLO.md +131 -0
  53. package/docs/SUMMARY.md +17 -0
  54. package/docs/SUPPORT.md +31 -0
  55. package/docs/THREAT_MODEL.md +36 -0
  56. package/docs/TRUST.md +59 -0
  57. package/docs/WORKFLOW.md +35 -0
  58. package/docs/X402_BATCH_SETTLEMENT.md +126 -0
  59. package/docs/blog/2026-02-14-your-ai-agent-just-spent-500-where-is-the-receipt.md +73 -0
  60. package/docs/examples/x402-provider-payout-registry.example.json +14 -0
  61. package/docs/gitbook/README.md +64 -0
  62. package/docs/gitbook/SETUP.md +25 -0
  63. package/docs/gitbook/SUMMARY.md +15 -0
  64. package/docs/gitbook/api-reference.md +73 -0
  65. package/docs/gitbook/closepacks.md +55 -0
  66. package/docs/gitbook/conformance.md +59 -0
  67. package/docs/gitbook/core-primitives.md +85 -0
  68. package/docs/gitbook/dispute-lifecycle.md +33 -0
  69. package/docs/gitbook/faq.md +21 -0
  70. package/docs/gitbook/guides.md +49 -0
  71. package/docs/gitbook/operations-runbook.md +36 -0
  72. package/docs/gitbook/quickstart.md +103 -0
  73. package/docs/gitbook/replay-and-audit.md +30 -0
  74. package/docs/gitbook/sdk-reference.md +35 -0
  75. package/docs/gitbook/security-model.md +58 -0
  76. package/docs/integrations/README.md +15 -0
  77. package/docs/integrations/github-actions-verify.yml +31 -0
  78. package/docs/integrations/github-actions.md +34 -0
  79. package/docs/integrations/openclaw/CLAWHUB_PUBLISH_CHECKLIST.md +65 -0
  80. package/docs/integrations/openclaw/PUBLIC_QUICKSTART.md +95 -0
  81. package/docs/integrations/openclaw/settld-mcp-skill/SKILL.md +69 -0
  82. package/docs/integrations/openclaw/settld-mcp-skill/mcp-server.example.json +12 -0
  83. package/docs/kernel-compatible/capabilities.json +36 -0
  84. package/docs/marketing/agent-commerce-substrate.md +78 -0
  85. package/docs/marketing/hn-repost-2026-02-17.md +102 -0
  86. package/docs/marketing/show-hn-post.md +45 -0
  87. package/docs/ops/ARTIFACT_VERIFICATION_STATUS.md +43 -0
  88. package/docs/ops/BILLING_WEBHOOK_REPLAY.md +105 -0
  89. package/docs/ops/CI_FLAKE_BUDGET.md +31 -0
  90. package/docs/ops/DISPUTE_FINANCE_RECONCILIATION_PACKET.md +56 -0
  91. package/docs/ops/GO_LIVE_GATE_S13.md +27 -0
  92. package/docs/ops/HOSTED_BASELINE_R2.md +129 -0
  93. package/docs/ops/KERNEL_V0_SHIP_GATE.md +69 -0
  94. package/docs/ops/LIGHTHOUSE_PRODUCTION_CLOSE.md +51 -0
  95. package/docs/ops/MCP_COMPATIBILITY_MATRIX.md +30 -0
  96. package/docs/ops/MINIMUM_PRODUCTION_TOPOLOGY.md +89 -0
  97. package/docs/ops/P0_BACKEND_PROGRESS.md +150 -0
  98. package/docs/ops/PAYMENTS_ALPHA_R5.md +105 -0
  99. package/docs/ops/PILOT_ONBOARDING_RUNBOOK.md +112 -0
  100. package/docs/ops/PRODUCTION_DEPLOYMENT_CHECKLIST.md +140 -0
  101. package/docs/ops/R1_SLOS.md +66 -0
  102. package/docs/ops/RELEASE_SIGNING_INCIDENT.md +58 -0
  103. package/docs/ops/SELF_SERVE_LAUNCH_AUTOMATION.md +89 -0
  104. package/docs/ops/THROUGHPUT_DRILL_10X.md +48 -0
  105. package/docs/ops/TRUST_CONFIG_WIZARD.md +60 -0
  106. package/docs/ops/X402_PILOT_WEEKLY_METRICS.md +76 -0
  107. package/docs/ops/tool-call-disputes-holdback.md +52 -0
  108. package/docs/pilot-kit/PILOT_PACKAGE_SCORECARD_X402.md +46 -0
  109. package/docs/pilot-kit/README.md +29 -0
  110. package/docs/pilot-kit/architecture-one-pager.md +48 -0
  111. package/docs/pilot-kit/buyer-email.txt +19 -0
  112. package/docs/pilot-kit/buyer-one-pager.md +31 -0
  113. package/docs/pilot-kit/gtm-pilot-playbook.md +182 -0
  114. package/docs/pilot-kit/offline-verify.md +33 -0
  115. package/docs/pilot-kit/procurement-one-pager.md +50 -0
  116. package/docs/pilot-kit/rfp-clause.md +46 -0
  117. package/docs/pilot-kit/roi-calculator-template.csv +2 -0
  118. package/docs/pilot-kit/security-qa.md +153 -0
  119. package/docs/pilot-kit/security-summary.md +35 -0
  120. package/docs/plans/2026-02-13-mcp-spike-design.md +113 -0
  121. package/docs/plans/2026-02-20-trust-os-v1-jira-backlog.md +348 -0
  122. package/docs/plans/2026-02-21-agent-economic-actor-operating-model.md +169 -0
  123. package/docs/plans/2026-02-21-trust-os-v1-strategy.md +241 -0
  124. package/docs/research/2026-02-21-agent-spend-host-landscape.md +57 -0
  125. package/docs/spec/AcceptanceCriteria.v1.md +17 -0
  126. package/docs/spec/AcceptanceEvaluation.v1.md +10 -0
  127. package/docs/spec/AgentEvent.v1.md +47 -0
  128. package/docs/spec/AgentIdentity.v1.md +62 -0
  129. package/docs/spec/AgentPassport.v1.md +95 -0
  130. package/docs/spec/AgentReputation.v1.md +59 -0
  131. package/docs/spec/AgentReputation.v2.md +52 -0
  132. package/docs/spec/AgentRun.v1.md +47 -0
  133. package/docs/spec/AgentRunSettlement.v1.md +52 -0
  134. package/docs/spec/AgentWallet.v1.md +43 -0
  135. package/docs/spec/AgreementDelegation.v1.md +109 -0
  136. package/docs/spec/ArbitrationCase.v1.md +67 -0
  137. package/docs/spec/ArbitrationOutcomeMapping.v1.md +62 -0
  138. package/docs/spec/ArbitrationVerdict.v1.md +60 -0
  139. package/docs/spec/BundleHeadAttestation.v1.md +32 -0
  140. package/docs/spec/CANONICAL_JSON.md +31 -0
  141. package/docs/spec/CRYPTOGRAPHY.md +61 -0
  142. package/docs/spec/ClosePack.v1.md +49 -0
  143. package/docs/spec/ClosePackManifest.v1.md +24 -0
  144. package/docs/spec/DelegationGrant.v1.md +90 -0
  145. package/docs/spec/DisputeCaseLifecycle.v1.md +51 -0
  146. package/docs/spec/DisputeOpenEnvelope.v1.md +43 -0
  147. package/docs/spec/ERRORS.md +76 -0
  148. package/docs/spec/ESCROW_NETTING_INVARIANTS.md +71 -0
  149. package/docs/spec/EvidenceIndex.v1.md +20 -0
  150. package/docs/spec/ExecutionIntent.v1.md +90 -0
  151. package/docs/spec/FinancePackBundleManifest.v1.md +24 -0
  152. package/docs/spec/FundingHold.v1.md +60 -0
  153. package/docs/spec/GovernancePolicy.v1.md +34 -0
  154. package/docs/spec/GovernancePolicy.v2.md +30 -0
  155. package/docs/spec/INVARIANTS.md +389 -0
  156. package/docs/spec/InteractionDirectionMatrix.v1.md +30 -0
  157. package/docs/spec/InvoiceBundleManifest.v1.md +24 -0
  158. package/docs/spec/InvoiceClaim.v1.md +11 -0
  159. package/docs/spec/MONEY_RAIL_STATE_MACHINE.md +58 -0
  160. package/docs/spec/MarketplaceAcceptance.v2.md +46 -0
  161. package/docs/spec/MarketplaceOffer.v2.md +54 -0
  162. package/docs/spec/MeteringReport.v1.md +18 -0
  163. package/docs/spec/OperatorAction.v1.md +90 -0
  164. package/docs/spec/PRODUCER_ERRORS.md +42 -0
  165. package/docs/spec/PolicyDecision.v1.md +83 -0
  166. package/docs/spec/PricingMatrix.v1.md +20 -0
  167. package/docs/spec/PricingMatrixSignatures.v1.md +30 -0
  168. package/docs/spec/PricingMatrixSignatures.v2.md +29 -0
  169. package/docs/spec/ProduceCliOutput.v1.md +46 -0
  170. package/docs/spec/ProofBundleManifest.v1.md +24 -0
  171. package/docs/spec/README.md +109 -0
  172. package/docs/spec/REFERENCE_IMPLEMENTATIONS.md +29 -0
  173. package/docs/spec/REFERENCE_VERIFIER_BEHAVIOR.md +68 -0
  174. package/docs/spec/REMOTE_SIGNER.md +66 -0
  175. package/docs/spec/ReleaseIndex.v1.md +32 -0
  176. package/docs/spec/ReleaseIndexSignatures.v1.md +17 -0
  177. package/docs/spec/ReleaseTrust.v1.md +13 -0
  178. package/docs/spec/ReleaseTrust.v2.md +26 -0
  179. package/docs/spec/RemoteSignerRequest.v1.md +21 -0
  180. package/docs/spec/RemoteSignerResponse.v1.md +16 -0
  181. package/docs/spec/ReputationEvent.v1.md +63 -0
  182. package/docs/spec/RevocationList.v1.md +28 -0
  183. package/docs/spec/SIGNER_PROVIDER_PLUGIN.md +32 -0
  184. package/docs/spec/STRICTNESS.md +68 -0
  185. package/docs/spec/SUPPLY_CHAIN.md +33 -0
  186. package/docs/spec/SettlementAdjustment.v1.md +45 -0
  187. package/docs/spec/SettlementDecisionRecord.v1.md +48 -0
  188. package/docs/spec/SettlementDecisionRecord.v2.md +53 -0
  189. package/docs/spec/SettlementDecisionReport.v1.md +44 -0
  190. package/docs/spec/SettlementKernel.v1.md +59 -0
  191. package/docs/spec/SettlementReceipt.v1.md +63 -0
  192. package/docs/spec/SlaDefinition.v1.md +24 -0
  193. package/docs/spec/SlaEvaluation.v1.md +12 -0
  194. package/docs/spec/THREAT_MODEL.md +113 -0
  195. package/docs/spec/TOOL_PROVENANCE.md +30 -0
  196. package/docs/spec/TRUST_ANCHORS.md +84 -0
  197. package/docs/spec/TenantSettings.v1.md +90 -0
  198. package/docs/spec/TenantSettings.v2.md +99 -0
  199. package/docs/spec/TimestampProof.v1.md +25 -0
  200. package/docs/spec/ToolCallAgreement.v1.md +34 -0
  201. package/docs/spec/ToolCallEvidence.v1.md +47 -0
  202. package/docs/spec/ToolManifest.v1.md +47 -0
  203. package/docs/spec/VERIFIER_ENVIRONMENT.md +38 -0
  204. package/docs/spec/VERSIONING.md +107 -0
  205. package/docs/spec/VerificationReport.v1.md +50 -0
  206. package/docs/spec/VerifyAboutOutput.v1.md +10 -0
  207. package/docs/spec/VerifyCliOutput.v1.md +28 -0
  208. package/docs/spec/WARNINGS.md +83 -0
  209. package/docs/spec/error-codes.v1.txt +285 -0
  210. package/docs/spec/examples/agreement_delegation_v1.example.json +21 -0
  211. package/docs/spec/examples/arbitration_case_v1.example.json +26 -0
  212. package/docs/spec/examples/arbitration_verdict_v1.example.json +32 -0
  213. package/docs/spec/examples/dispute_open_envelope_v1.example.json +18 -0
  214. package/docs/spec/examples/produce_cli_output_v1.example.json +32 -0
  215. package/docs/spec/examples/release_index_signature_v1.example.json +9 -0
  216. package/docs/spec/examples/release_index_signatures_v1.example.json +14 -0
  217. package/docs/spec/examples/release_index_v1.example.json +15 -0
  218. package/docs/spec/examples/release_trust_v1.example.json +7 -0
  219. package/docs/spec/examples/release_trust_v2.example.json +22 -0
  220. package/docs/spec/examples/remote_signer_request_v1.example.json +18 -0
  221. package/docs/spec/examples/remote_signer_response_v1.example.json +8 -0
  222. package/docs/spec/examples/reputation_event_v1.example.json +29 -0
  223. package/docs/spec/examples/verification_report_v1.example.json +24 -0
  224. package/docs/spec/examples/verify_about_output_v1.example.json +29 -0
  225. package/docs/spec/examples/verify_cli_output_v1.example.json +13 -0
  226. package/docs/spec/legacy/MarketplaceAcceptance.v1.md +48 -0
  227. package/docs/spec/legacy/MarketplaceOffer.v1.md +56 -0
  228. package/docs/spec/legacy/schemas/MarketplaceAcceptance.v1.schema.json +53 -0
  229. package/docs/spec/legacy/schemas/MarketplaceOffer.v1.schema.json +61 -0
  230. package/docs/spec/producer-error-codes.v1.txt +14 -0
  231. package/docs/spec/schemas/AcceptanceCriteria.v1.schema.json +24 -0
  232. package/docs/spec/schemas/AcceptanceEvaluation.v1.schema.json +26 -0
  233. package/docs/spec/schemas/AgentEvent.v1.schema.json +49 -0
  234. package/docs/spec/schemas/AgentIdentity.v1.schema.json +129 -0
  235. package/docs/spec/schemas/AgentPassport.v1.schema.json +112 -0
  236. package/docs/spec/schemas/AgentReputation.v1.schema.json +151 -0
  237. package/docs/spec/schemas/AgentReputation.v2.schema.json +120 -0
  238. package/docs/spec/schemas/AgentRun.v1.schema.json +71 -0
  239. package/docs/spec/schemas/AgentRunSettlement.v1.schema.json +75 -0
  240. package/docs/spec/schemas/AgentWallet.v1.schema.json +54 -0
  241. package/docs/spec/schemas/AgreementDelegation.v1.schema.json +50 -0
  242. package/docs/spec/schemas/ArbitrationCase.v1.schema.json +133 -0
  243. package/docs/spec/schemas/ArbitrationVerdict.v1.schema.json +149 -0
  244. package/docs/spec/schemas/BundleHeadAttestation.v1.schema.json +21 -0
  245. package/docs/spec/schemas/ClosePackManifest.v1.schema.json +38 -0
  246. package/docs/spec/schemas/DelegationGrant.v1.schema.json +102 -0
  247. package/docs/spec/schemas/DisputeOpenEnvelope.v1.schema.json +78 -0
  248. package/docs/spec/schemas/EvidenceIndex.v1.schema.json +41 -0
  249. package/docs/spec/schemas/ExecutionIntent.v1.schema.json +85 -0
  250. package/docs/spec/schemas/FinancePackBundleManifest.v1.schema.json +38 -0
  251. package/docs/spec/schemas/FundingHold.v1.schema.json +46 -0
  252. package/docs/spec/schemas/GovernancePolicy.v1.schema.json +45 -0
  253. package/docs/spec/schemas/GovernancePolicy.v2.schema.json +70 -0
  254. package/docs/spec/schemas/InteractionDirectionMatrix.v1.schema.json +43 -0
  255. package/docs/spec/schemas/InvoiceBundleManifest.v1.schema.json +38 -0
  256. package/docs/spec/schemas/InvoiceClaim.v1.schema.json +39 -0
  257. package/docs/spec/schemas/MarketplaceAcceptance.v2.schema.json +53 -0
  258. package/docs/spec/schemas/MarketplaceOffer.v2.schema.json +61 -0
  259. package/docs/spec/schemas/MeteringReport.v1.schema.json +45 -0
  260. package/docs/spec/schemas/OperatorAction.v1.schema.json +113 -0
  261. package/docs/spec/schemas/PolicyDecision.v1.schema.json +74 -0
  262. package/docs/spec/schemas/PricingMatrix.v1.schema.json +24 -0
  263. package/docs/spec/schemas/PricingMatrixSignatures.v1.schema.json +24 -0
  264. package/docs/spec/schemas/PricingMatrixSignatures.v2.schema.json +24 -0
  265. package/docs/spec/schemas/ProduceCliOutput.v1.schema.json +107 -0
  266. package/docs/spec/schemas/ProofBundleManifest.v1.schema.json +37 -0
  267. package/docs/spec/schemas/PublicKeys.v1.schema.json +33 -0
  268. package/docs/spec/schemas/ReleaseIndex.v1.schema.json +45 -0
  269. package/docs/spec/schemas/ReleaseIndexSignature.v1.schema.json +16 -0
  270. package/docs/spec/schemas/ReleaseIndexSignatures.v1.schema.json +16 -0
  271. package/docs/spec/schemas/ReleaseTrust.v1.schema.json +15 -0
  272. package/docs/spec/schemas/ReleaseTrust.v2.schema.json +37 -0
  273. package/docs/spec/schemas/RemoteSignerPublicKeyResponse.v1.schema.json +14 -0
  274. package/docs/spec/schemas/RemoteSignerRequest.v1.schema.json +24 -0
  275. package/docs/spec/schemas/RemoteSignerResponse.v1.schema.json +10 -0
  276. package/docs/spec/schemas/RemoteSignerSignRequest.v1.schema.json +27 -0
  277. package/docs/spec/schemas/RemoteSignerSignResponse.v1.schema.json +16 -0
  278. package/docs/spec/schemas/ReputationEvent.v1.schema.json +164 -0
  279. package/docs/spec/schemas/RevocationList.v1.schema.json +51 -0
  280. package/docs/spec/schemas/SettlementAdjustment.v1.schema.json +44 -0
  281. package/docs/spec/schemas/SettlementDecisionRecord.v1.schema.json +66 -0
  282. package/docs/spec/schemas/SettlementDecisionRecord.v2.schema.json +149 -0
  283. package/docs/spec/schemas/SettlementDecisionReport.v1.schema.json +61 -0
  284. package/docs/spec/schemas/SettlementReceipt.v1.schema.json +135 -0
  285. package/docs/spec/schemas/SlaDefinition.v1.schema.json +33 -0
  286. package/docs/spec/schemas/SlaEvaluation.v1.schema.json +26 -0
  287. package/docs/spec/schemas/TenantSettings.v1.schema.json +90 -0
  288. package/docs/spec/schemas/TenantSettings.v2.schema.json +161 -0
  289. package/docs/spec/schemas/TimestampProof.v1.schema.json +17 -0
  290. package/docs/spec/schemas/ToolCallAgreement.v1.schema.json +34 -0
  291. package/docs/spec/schemas/ToolCallEvidence.v1.schema.json +45 -0
  292. package/docs/spec/schemas/ToolManifest.v1.schema.json +54 -0
  293. package/docs/spec/schemas/VerificationReport.v1.schema.json +83 -0
  294. package/docs/spec/schemas/VerifyAboutOutput.v1.schema.json +54 -0
  295. package/docs/spec/schemas/VerifyCliOutput.v1.schema.json +75 -0
  296. package/docs/spec/schemas/VerifyReleaseOutput.v1.schema.json +47 -0
  297. package/docs/spec/x402-error-codes.v1.txt +35 -0
  298. package/docs/templates/buyer-email.txt +18 -0
  299. package/docs/templates/buyer-one-pager.md +24 -0
  300. package/package.json +53 -6
  301. package/scripts/acceptance/full-stack.mjs +734 -0
  302. package/scripts/acceptance/full-stack.sh +99 -0
  303. package/scripts/audit/build-audit-packet.mjs +242 -0
  304. package/scripts/backup-pg.sh +45 -0
  305. package/scripts/backup-restore/README.md +18 -0
  306. package/scripts/backup-restore/capture-state.mjs +130 -0
  307. package/scripts/backup-restore/client.mjs +97 -0
  308. package/scripts/backup-restore/seed-workload.mjs +235 -0
  309. package/scripts/backup-restore/verify-state.mjs +139 -0
  310. package/scripts/backup-restore-test.sh +217 -0
  311. package/scripts/chaos.js +221 -0
  312. package/scripts/ci/build-launch-cutover-packet.mjs +304 -0
  313. package/scripts/ci/build-self-serve-benchmark-report.mjs +122 -0
  314. package/scripts/ci/changelog-guard.mjs +145 -0
  315. package/scripts/ci/check-kernel-v0-launch-gate.mjs +233 -0
  316. package/scripts/ci/check-secret-hygiene.mjs +78 -0
  317. package/scripts/ci/check-version-consistency.mjs +42 -0
  318. package/scripts/ci/cli-pack-smoke.mjs +160 -0
  319. package/scripts/ci/flake-budget-guard.mjs +68 -0
  320. package/scripts/ci/generate-error-codes.mjs +54 -0
  321. package/scripts/ci/lib/lighthouse-tracker.mjs +90 -0
  322. package/scripts/ci/lib/self-serve-launch-gate.mjs +89 -0
  323. package/scripts/ci/npm-pack-smoke.mjs +454 -0
  324. package/scripts/ci/run-10x-throughput-drill.mjs +318 -0
  325. package/scripts/ci/run-10x-throughput-incident-rehearsal.mjs +368 -0
  326. package/scripts/ci/run-arbitration-workspace-browser-e2e.sh +22 -0
  327. package/scripts/ci/run-circle-sandbox-smoke.mjs +237 -0
  328. package/scripts/ci/run-go-live-gate.mjs +150 -0
  329. package/scripts/ci/run-kernel-v0-ship-gate.mjs +97 -0
  330. package/scripts/ci/run-mcp-host-cert-matrix.mjs +201 -0
  331. package/scripts/ci/run-mcp-host-smoke.mjs +473 -0
  332. package/scripts/ci/run-offline-verification-parity-gate.mjs +762 -0
  333. package/scripts/ci/run-onboarding-host-success-gate.mjs +516 -0
  334. package/scripts/ci/run-onboarding-policy-slo-gate.mjs +537 -0
  335. package/scripts/ci/run-production-cutover-gate.mjs +540 -0
  336. package/scripts/ci/run-public-openclaw-npx-smoke.mjs +148 -0
  337. package/scripts/ci/run-release-promotion-guard.mjs +756 -0
  338. package/scripts/ci/run-self-serve-launch-gate.mjs +56 -0
  339. package/scripts/ci/runtime-import-smoke.mjs +58 -0
  340. package/scripts/ci/update-lighthouse-tracker.mjs +112 -0
  341. package/scripts/closepack/lib.mjs +286 -0
  342. package/scripts/collect-debug.sh +263 -0
  343. package/scripts/demo/compositional-settlement-3hop.mjs +237 -0
  344. package/scripts/demo/delivery-robot/export-ui-fixture.mjs +188 -0
  345. package/scripts/demo/delivery-robot/generate.mjs +377 -0
  346. package/scripts/demo/kernel-agent-goes-shopping.mjs +202 -0
  347. package/scripts/demo/magic-link-first-green.mjs +118 -0
  348. package/scripts/demo/magic-link-kind-smoke.mjs +577 -0
  349. package/scripts/demo/mcp-paid-exa.mjs +1110 -0
  350. package/scripts/dev/billing-doctor.sh +145 -0
  351. package/scripts/dev/billing-smoke-prod.sh +219 -0
  352. package/scripts/dev/billing-webhook-replay.sh +161 -0
  353. package/scripts/dev/env.dev.example +29 -0
  354. package/scripts/dev/env.sh +37 -0
  355. package/scripts/dev/new-sdk-key.sh +81 -0
  356. package/scripts/dev/sdk-first-run.sh +21 -0
  357. package/scripts/dev/smoke-x402-gateway.sh +115 -0
  358. package/scripts/dev/start-api.sh +24 -0
  359. package/scripts/doctor/mcp-host.mjs +120 -0
  360. package/scripts/examples/produce-and-verify-jobproof.mjs +191 -0
  361. package/scripts/examples/sdk-first-paid-rfq.py +105 -0
  362. package/scripts/examples/sdk-first-verified-run.mjs +85 -0
  363. package/scripts/examples/sdk-first-verified-run.py +99 -0
  364. package/scripts/examples/sdk-tenant-analytics.mjs +103 -0
  365. package/scripts/examples/sdk-tenant-analytics.py +118 -0
  366. package/scripts/finance-pack/bundle.mjs +284 -0
  367. package/scripts/fixtures/generate-bundle-fixtures.mjs +877 -0
  368. package/scripts/governance/export.mjs +169 -0
  369. package/scripts/load/delivery-stress.k6.js +183 -0
  370. package/scripts/load/ingest-burst.k6.js +236 -0
  371. package/scripts/load/run-delivery-load.js +66 -0
  372. package/scripts/load/webhook-receiver.js +131 -0
  373. package/scripts/magic-link/migrate-run-records-to-db.mjs +35 -0
  374. package/scripts/mcp/probe.mjs +238 -0
  375. package/scripts/mcp/settld-mcp-http-gateway.mjs +178 -0
  376. package/scripts/mcp/settld-mcp-server.mjs +1511 -0
  377. package/scripts/openapi/write.mjs +13 -0
  378. package/scripts/ops/bootstrap-tenant-conformance.mjs +185 -0
  379. package/scripts/ops/build-x402-pilot-reliability-report.mjs +489 -0
  380. package/scripts/ops/check-x402-receipt-sample.mjs +181 -0
  381. package/scripts/ops/design-partner-run-packet.mjs +466 -0
  382. package/scripts/ops/dispute-finance-reconciliation-packet.mjs +313 -0
  383. package/scripts/ops/hosted-baseline-evidence.mjs +890 -0
  384. package/scripts/ops/money-rails-chargeback-evidence.mjs +509 -0
  385. package/scripts/ops/money-rails-reconcile-evidence.mjs +180 -0
  386. package/scripts/ops/p0-seed-money-rail-operation.mjs +432 -0
  387. package/scripts/ops/run-x402-hitl-smoke.mjs +607 -0
  388. package/scripts/pilot/finance-pack.mjs +495 -0
  389. package/scripts/pilot/fixtures/robot-keypair.json +4 -0
  390. package/scripts/pilot/fixtures/server-signer.json +4 -0
  391. package/scripts/policy/cli.mjs +600 -0
  392. package/scripts/profile/cli.mjs +1324 -0
  393. package/scripts/proof-bundle/job.mjs +109 -0
  394. package/scripts/proof-bundle/lib.mjs +92 -0
  395. package/scripts/proof-bundle/month.mjs +103 -0
  396. package/scripts/provider/conformance-run.mjs +159 -0
  397. package/scripts/provider/keys-generate.mjs +135 -0
  398. package/scripts/provider/publish.mjs +420 -0
  399. package/scripts/quickstart/x402.mjs +334 -0
  400. package/scripts/register-entity-secret.mjs +102 -0
  401. package/scripts/release/build-artifacts.mjs +181 -0
  402. package/scripts/release/generate-release-index.mjs +112 -0
  403. package/scripts/release/release-index-lib.mjs +232 -0
  404. package/scripts/release/sign-release-index.mjs +85 -0
  405. package/scripts/release/validate-release-assets.mjs +170 -0
  406. package/scripts/release/verify-release.mjs +261 -0
  407. package/scripts/restore-pg.sh +34 -0
  408. package/scripts/scaffold/create-settld-paid-tool.mjs +19 -0
  409. package/scripts/sdk/smoke-python.py +30 -0
  410. package/scripts/sdk/smoke.mjs +16 -0
  411. package/scripts/settlement/x402-batch-worker.mjs +1091 -0
  412. package/scripts/setup/circle-bootstrap.mjs +310 -0
  413. package/scripts/setup/host-config.mjs +617 -0
  414. package/scripts/setup/onboard.mjs +1337 -0
  415. package/scripts/setup/openclaw-onboard.mjs +423 -0
  416. package/scripts/setup/wizard.mjs +986 -0
  417. package/scripts/slo/check.mjs +239 -0
  418. package/scripts/smoke/k8s-smoke.mjs +214 -0
  419. package/scripts/spec/generate-protocol-vectors.mjs +1019 -0
  420. package/scripts/test/check-no-generated-artifacts.sh +12 -0
  421. package/scripts/test/run.sh +59 -0
  422. package/scripts/trust/validate-trust-file.mjs +57 -0
  423. package/scripts/trust-config/rotate-settld-pay.mjs +277 -0
  424. package/scripts/trust-config/wizard.mjs +161 -0
  425. package/scripts/vendor-contract-test-lib.mjs +182 -0
  426. package/scripts/vendor-contract-test.mjs +55 -0
  427. package/scripts/vercel/build-mkdocs.sh +9 -0
  428. package/scripts/vercel/ignore-mkdocs.sh +25 -0
  429. package/scripts/vercel/install-mkdocs.sh +6 -0
  430. package/scripts/verify-pg.js +217 -0
  431. package/scripts/x402/receipt-verify.mjs +289 -0
  432. package/services/finance-sink/src/dedupe-store.js +29 -6
  433. package/services/receiver/src/dedupe-store.js +29 -5
  434. package/services/x402-gateway/Dockerfile +13 -0
  435. package/services/x402-gateway/README.md +58 -0
  436. package/services/x402-gateway/examples/upstream-mock.js +337 -0
  437. package/services/x402-gateway/src/server.js +1058 -0
  438. package/src/api/app.js +34658 -16940
  439. package/src/api/maintenance.js +70 -0
  440. package/src/api/middleware/trust-kernel.js +114 -0
  441. package/src/api/openapi.js +1778 -70
  442. package/src/api/persistence.js +456 -0
  443. package/src/api/server.js +81 -5
  444. package/src/api/store.js +1581 -62
  445. package/src/api/workers/deliveries.js +99 -4
  446. package/src/api/workers/insolvency-sweep.js +159 -0
  447. package/src/core/agent-card.js +69 -0
  448. package/src/core/agent-wallets.js +231 -0
  449. package/src/core/agreement-delegation.js +549 -0
  450. package/src/core/billing-plans.js +40 -6
  451. package/src/core/circle-reserve-adapter.js +845 -0
  452. package/src/core/event-policy.js +21 -2
  453. package/src/core/maintenance-locks.js +1 -0
  454. package/src/core/operator-action.js +303 -0
  455. package/src/core/paid-tool-manifest.js +318 -0
  456. package/src/core/policy-decision.js +322 -0
  457. package/src/core/policy-packs.js +207 -0
  458. package/src/core/profile-fingerprint.js +27 -0
  459. package/src/core/profile-simulation-reasons.js +84 -0
  460. package/src/core/profile-templates.js +242 -0
  461. package/src/core/provider-publish-conformance.js +525 -0
  462. package/src/core/provider-publish-proof.js +396 -0
  463. package/src/core/provider-quote-signature.js +170 -0
  464. package/src/core/settld-keys.js +112 -0
  465. package/src/core/settld-pay-token.js +344 -0
  466. package/src/core/settlement-kernel.js +239 -2
  467. package/src/core/settlement-verifier.js +335 -0
  468. package/src/core/tool-call-agreement.js +112 -0
  469. package/src/core/tool-call-evidence.js +144 -0
  470. package/src/core/tool-provider-signature.js +98 -0
  471. package/src/core/wallet-assignment-resolver.js +129 -0
  472. package/src/core/wallet-provider-bootstrap.js +365 -0
  473. package/src/core/x402-escalation-override.js +258 -0
  474. package/src/core/x402-gate.js +118 -0
  475. package/src/core/x402-provider-refund-decision.js +220 -0
  476. package/src/core/x402-receipt-verifier.js +708 -0
  477. package/src/core/x402-reversal-command.js +251 -0
  478. package/src/core/x402-wallet-issuer-decision.js +252 -0
  479. package/src/core/zk-verifier.js +300 -0
  480. package/src/db/migrations/029_reputation_event_index.sql +54 -0
  481. package/src/db/migrations/030_artifacts_source_event_unique_job_only.sql +15 -0
  482. package/src/db/pg.js +18 -7
  483. package/src/db/store-pg.js +1508 -111
@@ -0,0 +1,263 @@
1
+ #!/usr/bin/env bash
2
+ set -euo pipefail
3
+
4
+ SCRIPT_VERSION="1"
5
+ WORKDIR=""
6
+
7
+ usage() {
8
+ cat <<'EOH' >&2
9
+ Collect a Settld debug bundle for quickstart / Docker issues.
10
+
11
+ This script captures basic host + repo + Docker/Compose info and (optionally) compose logs,
12
+ then packages everything into a single archive you can attach to a GitHub issue.
13
+
14
+ Usage:
15
+ scripts/collect-debug.sh [--out <path>] [--project-dir <dir>] [--tail <N>] [--no-logs] [--zip] [--dry-run]
16
+
17
+ Options:
18
+ --out <path> Output archive path. Default: ./settld-debug-<ts>.tar.gz
19
+ --project-dir <dir> Directory to run docker compose from. Default: repo root.
20
+ --tail <N> Number of log lines to collect per service. Default: 2000
21
+ --no-logs Skip collecting compose logs.
22
+ --zip Create a .zip (requires `zip`). Default is .tar.gz
23
+ --dry-run Print what would be collected and exit.
24
+ -h, --help Show this help.
25
+
26
+ Notes:
27
+ - Review the bundle before sharing. Logs can contain secrets.
28
+ - The script will still produce a bundle even if Docker is not installed/running.
29
+ EOH
30
+ }
31
+
32
+ die() {
33
+ echo "error: $*" >&2
34
+ exit 2
35
+ }
36
+
37
+ quote_cmd() {
38
+ local out=""
39
+ local arg
40
+ for arg in "$@"; do
41
+ out+="$(printf '%q ' "$arg")"
42
+ done
43
+ printf '%s' "${out% }"
44
+ }
45
+
46
+ run_cmd() {
47
+ local out_file="$1"
48
+ shift
49
+ mkdir -p "$(dirname "$out_file")"
50
+ local cmd
51
+ cmd="$(quote_cmd "$@")"
52
+ {
53
+ echo "\$ ${cmd}"
54
+ set +e
55
+ "$@"
56
+ local rc=$?
57
+ set -e
58
+ echo
59
+ echo "exit_code=${rc}"
60
+ } >"$out_file" 2>&1
61
+ return 0
62
+ }
63
+
64
+ write_kv_file() {
65
+ local out_file="$1"
66
+ shift
67
+ mkdir -p "$(dirname "$out_file")"
68
+ {
69
+ for kv in "$@"; do
70
+ echo "$kv"
71
+ done
72
+ } >"$out_file"
73
+ }
74
+
75
+ sha256_file() {
76
+ local p="$1"
77
+ if command -v sha256sum >/dev/null 2>&1; then
78
+ sha256sum "$p" | awk '{print $1}'
79
+ return 0
80
+ fi
81
+ if command -v shasum >/dev/null 2>&1; then
82
+ shasum -a 256 "$p" | awk '{print $1}'
83
+ return 0
84
+ fi
85
+ echo "unknown"
86
+ }
87
+
88
+ main() {
89
+ local root
90
+ root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
91
+
92
+ local out_path=""
93
+ local project_dir="$root"
94
+ local tail_lines="2000"
95
+ local no_logs="0"
96
+ local want_zip="0"
97
+ local dry_run="0"
98
+
99
+ while [[ $# -gt 0 ]]; do
100
+ case "$1" in
101
+ --out)
102
+ [[ $# -ge 2 ]] || die "--out requires a value"
103
+ out_path="$2"
104
+ shift 2
105
+ ;;
106
+ --project-dir)
107
+ [[ $# -ge 2 ]] || die "--project-dir requires a value"
108
+ project_dir="$2"
109
+ shift 2
110
+ ;;
111
+ --tail)
112
+ [[ $# -ge 2 ]] || die "--tail requires a value"
113
+ tail_lines="$2"
114
+ shift 2
115
+ ;;
116
+ --no-logs)
117
+ no_logs="1"
118
+ shift
119
+ ;;
120
+ --zip)
121
+ want_zip="1"
122
+ shift
123
+ ;;
124
+ --dry-run)
125
+ dry_run="1"
126
+ shift
127
+ ;;
128
+ -h|--help)
129
+ usage
130
+ exit 0
131
+ ;;
132
+ *)
133
+ die "unknown argument: $1"
134
+ ;;
135
+ esac
136
+ done
137
+
138
+ if [[ ! -d "$project_dir" ]]; then
139
+ die "project dir not found: $project_dir"
140
+ fi
141
+
142
+ local ts bundle_name
143
+ ts="$(date -u +%Y%m%dT%H%M%SZ)"
144
+ bundle_name="settld-debug-${ts}"
145
+
146
+ if [[ -z "$out_path" ]]; then
147
+ if [[ "$want_zip" == "1" ]]; then
148
+ out_path="./${bundle_name}.zip"
149
+ else
150
+ out_path="./${bundle_name}.tar.gz"
151
+ fi
152
+ fi
153
+
154
+ if [[ "$dry_run" == "1" ]]; then
155
+ local logs_msg="enabled"
156
+ if [[ "$no_logs" == "1" ]]; then
157
+ logs_msg="skipped (--no-logs)"
158
+ fi
159
+ cat <<EOF
160
+ Would create:
161
+ bundle: ${bundle_name}/
162
+ archive: ${out_path}
163
+
164
+ Would collect:
165
+ - Host: uname, os-release (if present), sw_vers (if present)
166
+ - Runtime: bash/node/npm versions (if present)
167
+ - Repo: git head + git status (if present)
168
+ - Docker: version + info (if present)
169
+ - Compose: version + ps + config
170
+ - Compose logs: ${logs_msg} (tail=${tail_lines})
171
+ EOF
172
+ exit 0
173
+ fi
174
+
175
+ WORKDIR="$(mktemp -d)"
176
+ local bundle_dir
177
+ bundle_dir="${WORKDIR}/${bundle_name}"
178
+ mkdir -p "$bundle_dir"
179
+ trap 'if [ -n "${WORKDIR:-}" ] && [ -d "${WORKDIR:-}" ]; then rm -rf "$WORKDIR"; fi' EXIT
180
+
181
+ write_kv_file "${bundle_dir}/meta.txt" \
182
+ "script=collect-debug.sh" \
183
+ "script_version=${SCRIPT_VERSION}" \
184
+ "collected_at_utc=$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
185
+ "project_dir=${project_dir}"
186
+
187
+ run_cmd "${bundle_dir}/host/uname.txt" uname -a
188
+ if [[ -f /etc/os-release ]]; then
189
+ run_cmd "${bundle_dir}/host/os-release.txt" cat /etc/os-release
190
+ fi
191
+ if command -v sw_vers >/dev/null 2>&1; then
192
+ run_cmd "${bundle_dir}/host/sw_vers.txt" sw_vers
193
+ fi
194
+
195
+ run_cmd "${bundle_dir}/runtime/bash-version.txt" bash --version
196
+ if command -v node >/dev/null 2>&1; then
197
+ run_cmd "${bundle_dir}/runtime/node-version.txt" node --version
198
+ fi
199
+ if command -v npm >/dev/null 2>&1; then
200
+ run_cmd "${bundle_dir}/runtime/npm-version.txt" npm --version
201
+ fi
202
+
203
+ if command -v git >/dev/null 2>&1; then
204
+ run_cmd "${bundle_dir}/repo/git-head.txt" git -C "$root" rev-parse HEAD
205
+ run_cmd "${bundle_dir}/repo/git-status.txt" git -C "$root" status -sb
206
+ fi
207
+
208
+ write_kv_file "${bundle_dir}/env/selected.txt" \
209
+ "PATH=$([[ -n "${PATH:-}" ]] && echo '<set>' || echo '<unset>')" \
210
+ "DOCKER_HOST=$([[ -n "${DOCKER_HOST:-}" ]] && echo '<set>' || echo '<unset>')" \
211
+ "DOCKER_CONTEXT=$([[ -n "${DOCKER_CONTEXT:-}" ]] && echo '<set>' || echo '<unset>')" \
212
+ "COMPOSE_FILE=$([[ -n "${COMPOSE_FILE:-}" ]] && echo '<set>' || echo '<unset>')" \
213
+ "COMPOSE_PROJECT_NAME=$([[ -n "${COMPOSE_PROJECT_NAME:-}" ]] && echo '<set>' || echo '<unset>')" \
214
+ "HTTP_PROXY=$([[ -n "${HTTP_PROXY:-}" ]] && echo '<set>' || echo '<unset>')" \
215
+ "HTTPS_PROXY=$([[ -n "${HTTPS_PROXY:-}" ]] && echo '<set>' || echo '<unset>')" \
216
+ "NO_PROXY=$([[ -n "${NO_PROXY:-}" ]] && echo '<set>' || echo '<unset>')"
217
+
218
+ if command -v docker >/dev/null 2>&1; then
219
+ run_cmd "${bundle_dir}/docker/docker-version.txt" docker --version
220
+ run_cmd "${bundle_dir}/docker/docker-info.txt" docker info
221
+ else
222
+ write_kv_file "${bundle_dir}/docker/docker-missing.txt" "docker=<missing>"
223
+ fi
224
+
225
+ # Compose info (prefer `docker compose`, fall back to `docker-compose`).
226
+ local compose_kind="none"
227
+ local -a compose_cmd=()
228
+ if command -v docker >/dev/null 2>&1 && docker compose version >/dev/null 2>&1; then
229
+ compose_kind="docker-compose-plugin"
230
+ compose_cmd=(docker compose)
231
+ elif command -v docker-compose >/dev/null 2>&1; then
232
+ compose_kind="docker-compose-standalone"
233
+ compose_cmd=(docker-compose)
234
+ fi
235
+
236
+ write_kv_file "${bundle_dir}/compose/compose-kind.txt" "compose_kind=${compose_kind}"
237
+ if [[ "$compose_kind" != "none" ]]; then
238
+ run_cmd "${bundle_dir}/compose/compose-version.txt" "${compose_cmd[@]}" version
239
+ run_cmd "${bundle_dir}/compose/compose-ps.txt" "${compose_cmd[@]}" -f "${project_dir}/docker-compose.yml" ps
240
+ run_cmd "${bundle_dir}/compose/compose-config.txt" "${compose_cmd[@]}" -f "${project_dir}/docker-compose.yml" config
241
+
242
+ if [[ "$no_logs" != "1" ]]; then
243
+ run_cmd "${bundle_dir}/compose/compose-logs.txt" "${compose_cmd[@]}" -f "${project_dir}/docker-compose.yml" logs --no-color --tail "$tail_lines"
244
+ fi
245
+ fi
246
+
247
+ # Pack archive.
248
+ mkdir -p "$(dirname "$out_path")" || true
249
+ if [[ "$want_zip" == "1" ]]; then
250
+ command -v zip >/dev/null 2>&1 || die "--zip requested but `zip` is not installed"
251
+ (cd "$WORKDIR" && zip -r -q "$out_path" "$bundle_name")
252
+ else
253
+ (cd "$WORKDIR" && tar -czf "$out_path" "$bundle_name")
254
+ fi
255
+
256
+ local sum
257
+ sum="$(sha256_file "$out_path")"
258
+ printf '%s %s\n' "$sum" "$(basename "$out_path")" > "${out_path}.sha256" 2>/dev/null || true
259
+ echo "wrote: ${out_path}"
260
+ echo "sha256: ${sum}"
261
+ }
262
+
263
+ main "$@"
@@ -0,0 +1,237 @@
1
+ import { canonicalJsonStringify } from "../../src/core/canonical-json.js";
2
+ import { sha256Hex } from "../../src/core/crypto.js";
3
+ import {
4
+ buildAgreementDelegationV1,
5
+ cascadeSettlementCheck,
6
+ refundUnwindCheck
7
+ } from "../../src/core/agreement-delegation.js";
8
+ import {
9
+ buildSettlementDecisionRecordV2,
10
+ buildSettlementReceiptV1,
11
+ verifySettlementKernelArtifacts
12
+ } from "../../src/core/settlement-kernel.js";
13
+
14
+ const tenantId = "tenant_demo_3hop";
15
+ const currency = "USD";
16
+ const createdAt = "2026-02-01T00:00:00.000Z";
17
+ const settledAt = "2026-02-01T00:10:00.000Z";
18
+ const refundedAt = "2026-02-01T00:20:00.000Z";
19
+
20
+ const agreementA = sha256Hex("agreement:A");
21
+ const agreementB = sha256Hex("agreement:B");
22
+ const agreementC = sha256Hex("agreement:C");
23
+
24
+ const delegationAB = buildAgreementDelegationV1({
25
+ delegationId: "dlg_ab_demo",
26
+ tenantId,
27
+ parentAgreementHash: agreementA,
28
+ childAgreementHash: agreementB,
29
+ delegatorAgentId: "agt_A",
30
+ delegateeAgentId: "agt_B",
31
+ budgetCapCents: 20_000,
32
+ currency,
33
+ delegationDepth: 1,
34
+ maxDelegationDepth: 3,
35
+ ancestorChain: [agreementA],
36
+ createdAt
37
+ });
38
+
39
+ const delegationBC = buildAgreementDelegationV1({
40
+ delegationId: "dlg_bc_demo",
41
+ tenantId,
42
+ parentAgreementHash: agreementB,
43
+ childAgreementHash: agreementC,
44
+ delegatorAgentId: "agt_B",
45
+ delegateeAgentId: "agt_C",
46
+ budgetCapCents: 15_000,
47
+ currency,
48
+ delegationDepth: 2,
49
+ maxDelegationDepth: 3,
50
+ ancestorChain: [agreementA, agreementB],
51
+ createdAt
52
+ });
53
+
54
+ const settlePlan = cascadeSettlementCheck({
55
+ delegations: [delegationAB, delegationBC],
56
+ fromChildHash: agreementC
57
+ });
58
+
59
+ const unwindPlan = refundUnwindCheck({
60
+ delegations: [delegationAB, delegationBC],
61
+ fromParentHash: agreementA
62
+ });
63
+
64
+ const grossRevenueCents = 10_000;
65
+ const cToBCents = 3_500;
66
+ const bToACents = 1_200;
67
+ const unwindRefundCents = 900;
68
+
69
+ const settlePayouts = {
70
+ agt_A: bToACents,
71
+ agt_B: cToBCents - bToACents,
72
+ agt_C: grossRevenueCents - cToBCents
73
+ };
74
+
75
+ const unwindRefunds = {
76
+ agt_A: unwindRefundCents,
77
+ agt_B: unwindRefundCents,
78
+ agt_C: unwindRefundCents
79
+ };
80
+
81
+ const finalPayouts = {
82
+ agt_A: settlePayouts.agt_A - unwindRefundCents,
83
+ agt_B: settlePayouts.agt_B - unwindRefundCents,
84
+ agt_C: settlePayouts.agt_C - unwindRefundCents
85
+ };
86
+
87
+ const settlementSettle = {
88
+ runId: "run_demo_3hop_settle",
89
+ settlementId: "setl_demo_3hop_settle",
90
+ status: "released",
91
+ decisionTrace: {}
92
+ };
93
+
94
+ const settleDecision = buildSettlementDecisionRecordV2({
95
+ decisionId: "dec_demo_3hop_settle",
96
+ tenantId,
97
+ runId: settlementSettle.runId,
98
+ settlementId: settlementSettle.settlementId,
99
+ agreementId: agreementC,
100
+ decisionStatus: "auto_resolved",
101
+ decisionMode: "automatic",
102
+ verificationStatus: "green",
103
+ policyHashUsed: "1".repeat(64),
104
+ verificationMethodHashUsed: "2".repeat(64),
105
+ policyRef: {
106
+ policyHash: "1".repeat(64),
107
+ verificationMethodHash: "2".repeat(64)
108
+ },
109
+ verifierRef: {
110
+ verifierId: "settld.demo",
111
+ verifierVersion: "v1",
112
+ verifierHash: "3".repeat(64),
113
+ modality: "deterministic"
114
+ },
115
+ runStatus: "completed",
116
+ runLastEventId: "ev_demo_3hop_settle",
117
+ runLastChainHash: "4".repeat(64),
118
+ resolutionEventId: "res_demo_3hop_settle",
119
+ decidedAt: settledAt
120
+ });
121
+
122
+ const settleReceipt = buildSettlementReceiptV1({
123
+ receiptId: "rcpt_demo_3hop_settle",
124
+ tenantId,
125
+ runId: settlementSettle.runId,
126
+ settlementId: settlementSettle.settlementId,
127
+ decisionRecord: settleDecision,
128
+ status: "released",
129
+ amountCents: grossRevenueCents,
130
+ releasedAmountCents: grossRevenueCents,
131
+ refundedAmountCents: 0,
132
+ releaseRatePct: 100,
133
+ currency,
134
+ runStatus: "completed",
135
+ resolutionEventId: "res_demo_3hop_settle",
136
+ settledAt,
137
+ createdAt: settledAt
138
+ });
139
+ settlementSettle.decisionTrace = { decisionRecord: settleDecision, settlementReceipt: settleReceipt };
140
+ const settleVerification = verifySettlementKernelArtifacts({ settlement: settlementSettle, runId: settlementSettle.runId });
141
+
142
+ const settlementUnwind = {
143
+ runId: "run_demo_3hop_unwind",
144
+ settlementId: "setl_demo_3hop_unwind",
145
+ status: "refunded",
146
+ decisionTrace: {}
147
+ };
148
+
149
+ const unwindDecision = buildSettlementDecisionRecordV2({
150
+ decisionId: "dec_demo_3hop_unwind",
151
+ tenantId,
152
+ runId: settlementUnwind.runId,
153
+ settlementId: settlementUnwind.settlementId,
154
+ agreementId: agreementA,
155
+ decisionStatus: "auto_resolved",
156
+ decisionMode: "automatic",
157
+ decisionReason: "refund_unwind",
158
+ verificationStatus: "green",
159
+ policyHashUsed: "5".repeat(64),
160
+ verificationMethodHashUsed: "6".repeat(64),
161
+ policyRef: {
162
+ policyHash: "5".repeat(64),
163
+ verificationMethodHash: "6".repeat(64)
164
+ },
165
+ verifierRef: {
166
+ verifierId: "settld.demo",
167
+ verifierVersion: "v1",
168
+ verifierHash: "7".repeat(64),
169
+ modality: "deterministic"
170
+ },
171
+ runStatus: "completed",
172
+ runLastEventId: "ev_demo_3hop_unwind",
173
+ runLastChainHash: "8".repeat(64),
174
+ resolutionEventId: "res_demo_3hop_unwind",
175
+ decidedAt: refundedAt
176
+ });
177
+
178
+ const unwindReceipt = buildSettlementReceiptV1({
179
+ receiptId: "rcpt_demo_3hop_unwind",
180
+ tenantId,
181
+ runId: settlementUnwind.runId,
182
+ settlementId: settlementUnwind.settlementId,
183
+ decisionRecord: unwindDecision,
184
+ status: "refunded",
185
+ amountCents: unwindRefundCents,
186
+ releasedAmountCents: 0,
187
+ refundedAmountCents: unwindRefundCents,
188
+ releaseRatePct: 0,
189
+ currency,
190
+ runStatus: "completed",
191
+ resolutionEventId: "res_demo_3hop_unwind",
192
+ settledAt: refundedAt,
193
+ createdAt: refundedAt
194
+ });
195
+ settlementUnwind.decisionTrace = { decisionRecord: unwindDecision, settlementReceipt: unwindReceipt };
196
+ const unwindVerification = verifySettlementKernelArtifacts({ settlement: settlementUnwind, runId: settlementUnwind.runId });
197
+
198
+ const lineage = {
199
+ rootAgreementHash: agreementA,
200
+ chain: [agreementA, agreementB, agreementC],
201
+ delegationHashes: [delegationAB.delegationHash, delegationBC.delegationHash],
202
+ settleParentAgreementHashes: settlePlan.parentAgreementHashes,
203
+ unwindChildAgreementHashes: unwindPlan.childAgreementHashes
204
+ };
205
+
206
+ const report = {
207
+ schemaVersion: "CompositionalSettlementDemo.v1",
208
+ tenantId,
209
+ createdAt,
210
+ lineage,
211
+ decisionHashes: {
212
+ settle: settleDecision.decisionHash,
213
+ unwind: unwindDecision.decisionHash
214
+ },
215
+ receiptHashes: {
216
+ settle: settleReceipt.receiptHash,
217
+ unwind: unwindReceipt.receiptHash
218
+ },
219
+ settlePayouts,
220
+ finalRefunds: unwindRefunds,
221
+ finalPayouts,
222
+ verification: {
223
+ settle: settleVerification.valid === true,
224
+ unwind: unwindVerification.valid === true
225
+ }
226
+ };
227
+
228
+ const reportJson = canonicalJsonStringify(report);
229
+ const reportHash = sha256Hex(reportJson);
230
+
231
+ console.log(`[demo] lineage: ${agreementA.slice(0, 10)} -> ${agreementB.slice(0, 10)} -> ${agreementC.slice(0, 10)}`);
232
+ console.log(`[demo] settle decisionHash=${settleDecision.decisionHash}`);
233
+ console.log(`[demo] unwind decisionHash=${unwindDecision.decisionHash}`);
234
+ console.log(`[demo] final payouts cents=${JSON.stringify(finalPayouts)}`);
235
+ console.log(`[demo] final refunds cents=${JSON.stringify(unwindRefunds)}`);
236
+ console.log(`REPORT_JSON:${reportJson}`);
237
+ console.log(`PASS demo=compositional-settlement-3hop reportHash=${reportHash}`);
@@ -0,0 +1,188 @@
1
+ import fs from "node:fs/promises";
2
+ import path from "node:path";
3
+
4
+ async function exists(p) {
5
+ try {
6
+ await fs.access(p);
7
+ return true;
8
+ } catch {
9
+ return false;
10
+ }
11
+ }
12
+
13
+ async function copyFile(src, dst) {
14
+ await fs.mkdir(path.dirname(dst), { recursive: true });
15
+ await fs.copyFile(src, dst);
16
+ }
17
+
18
+ async function listFiles(dir) {
19
+ const entries = await fs.readdir(dir, { withFileTypes: true });
20
+ return entries.filter((e) => e.isFile()).map((e) => e.name);
21
+ }
22
+
23
+ async function listDirs(dir) {
24
+ const entries = await fs.readdir(dir, { withFileTypes: true });
25
+ return entries.filter((e) => e.isDirectory()).map((e) => e.name);
26
+ }
27
+
28
+ async function latestFinancePackBundleZip() {
29
+ const bundlesDir = path.resolve("demo/finance-pack/bundles");
30
+ if (!(await exists(bundlesDir))) return null;
31
+ const files = (await listFiles(bundlesDir)).filter((f) => f.endsWith(".zip")).sort();
32
+ return files.length ? path.join(bundlesDir, files[files.length - 1]) : null;
33
+ }
34
+
35
+ async function exportHistory({ srcRoot, dstRoot, requiredFiles, limit }) {
36
+ if (!(await exists(srcRoot))) return { copiedRuns: [], skipped: "missing_src_root" };
37
+
38
+ const runDirs = (await listDirs(srcRoot))
39
+ .filter((d) => d !== "latest")
40
+ .sort()
41
+ .slice(-limit);
42
+
43
+ const copiedRuns = [];
44
+ for (const runId of runDirs) {
45
+ const srcDir = path.join(srcRoot, runId);
46
+ const dstDir = path.join(dstRoot, runId);
47
+ const copied = [];
48
+ for (const f of requiredFiles) {
49
+ const src = path.join(srcDir, f);
50
+ if (!(await exists(src))) continue;
51
+ await copyFile(src, path.join(dstDir, f));
52
+ copied.push(f);
53
+ }
54
+ if (copied.length) copiedRuns.push({ runId, copied });
55
+ }
56
+
57
+ const index = { copiedRuns, latestRunId: copiedRuns.at(-1)?.runId ?? null };
58
+ await fs.mkdir(dstRoot, { recursive: true });
59
+ await fs.writeFile(path.join(dstRoot, "index.json"), JSON.stringify(index, null, 2) + "\n", "utf8");
60
+ return index;
61
+ }
62
+
63
+ async function main() {
64
+ const deliverySrcDir = path.resolve("demo/delivery-robot/output/latest");
65
+ const deliveryDstDirLegacy = path.resolve("dashboard/public/demo/latest");
66
+ const deliveryDstDir = path.resolve("dashboard/public/demo/delivery/latest");
67
+ const financeSrcDir = path.resolve("demo/finance-pack/output/latest");
68
+ const financeDstDir = path.resolve("dashboard/public/demo/finance/latest");
69
+
70
+ if (!(await exists(deliverySrcDir))) {
71
+ throw new Error(`missing demo output: ${deliverySrcDir}. Run \`npm run demo:delivery\` first.`);
72
+ }
73
+
74
+ const files = [
75
+ "run.json",
76
+ "sample_ingest_request.json",
77
+ "sample_ingest_response.json",
78
+ "timeline.json",
79
+ "WorkCertificate.v1.json",
80
+ "SettlementStatement.v1.json",
81
+ "CreditMemo.v1.json"
82
+ ];
83
+
84
+ const copiedDelivery = [];
85
+ for (const f of files) {
86
+ const src = path.join(deliverySrcDir, f);
87
+ if (!(await exists(src))) continue;
88
+ await copyFile(src, path.join(deliveryDstDirLegacy, f));
89
+ await copyFile(src, path.join(deliveryDstDir, f));
90
+ copiedDelivery.push(f);
91
+ }
92
+
93
+ await fs.writeFile(path.join(deliveryDstDirLegacy, "index.json"), JSON.stringify({ copied: copiedDelivery }, null, 2) + "\n", "utf8");
94
+ await fs.writeFile(path.join(deliveryDstDir, "index.json"), JSON.stringify({ copied: copiedDelivery }, null, 2) + "\n", "utf8");
95
+
96
+ // Delivery history (to support “fleet playback” demos).
97
+ const deliveryHistory = await exportHistory({
98
+ srcRoot: path.resolve("demo/delivery-robot/output"),
99
+ dstRoot: path.resolve("dashboard/public/demo/delivery/history"),
100
+ requiredFiles: ["run.json", "timeline.json", "WorkCertificate.v1.json", "SettlementStatement.v1.json", "CreditMemo.v1.json"],
101
+ limit: 6
102
+ });
103
+
104
+ // Finance pack fixture (optional, but enables a “finance demo” button).
105
+ const copiedFinance = [];
106
+ let financeHistory = null;
107
+ if (await exists(financeSrcDir)) {
108
+ const financeFiles = [
109
+ "run.json",
110
+ "steps.json",
111
+ "WorkCertificate.v1.json",
112
+ "SettlementStatement.v1.json",
113
+ "CreditMemo.v1.json",
114
+ "GLBatch.v1.json",
115
+ "GLBatch.v1.csv",
116
+ "JournalCsv.v1.json",
117
+ "JournalCsv.v1.csv",
118
+ "JobProofBundle.v1.zip",
119
+ "MonthProofBundle.v1.zip"
120
+ ];
121
+
122
+ for (const f of financeFiles) {
123
+ const src = path.join(financeSrcDir, f);
124
+ if (!(await exists(src))) continue;
125
+ await copyFile(src, path.join(financeDstDir, f));
126
+ copiedFinance.push(f);
127
+ }
128
+
129
+ const financePackZip = await latestFinancePackBundleZip();
130
+ if (financePackZip) {
131
+ await copyFile(financePackZip, path.join(financeDstDir, "FinancePackBundle.v1.zip"));
132
+ copiedFinance.push("FinancePackBundle.v1.zip");
133
+
134
+ // Best-effort: also copy reconcile.json from the unpacked bundle (if present).
135
+ const unpackedDir = financePackZip.replace(/\.zip$/i, "");
136
+ const reconcile = path.join(unpackedDir, "finance", "reconcile.json");
137
+ if (await exists(reconcile)) {
138
+ await copyFile(reconcile, path.join(financeDstDir, "reconcile.json"));
139
+ copiedFinance.push("reconcile.json");
140
+ }
141
+ }
142
+
143
+ await fs.writeFile(path.join(financeDstDir, "index.json"), JSON.stringify({ copied: copiedFinance }, null, 2) + "\n", "utf8");
144
+
145
+ financeHistory = await exportHistory({
146
+ srcRoot: path.resolve("demo/finance-pack/output"),
147
+ dstRoot: path.resolve("dashboard/public/demo/finance/history"),
148
+ requiredFiles: ["run.json", "steps.json", "WorkCertificate.v1.json", "SettlementStatement.v1.json", "GLBatch.v1.json", "JournalCsv.v1.csv"],
149
+ limit: 4
150
+ });
151
+ }
152
+
153
+ // Root index for UI scenario picker.
154
+ const index = {
155
+ generatedAt: new Date().toISOString(),
156
+ history: {
157
+ delivery: { runs: deliveryHistory?.copiedRuns?.length ?? 0, latestRunId: deliveryHistory?.latestRunId ?? null },
158
+ finance: { runs: financeHistory?.copiedRuns?.length ?? 0, latestRunId: financeHistory?.latestRunId ?? null }
159
+ },
160
+ scenarios: [
161
+ {
162
+ id: "delivery",
163
+ title: "SLA Credit (Delivery)",
164
+ subtitle: "Facts in → breach → CreditMemo + SettlementStatement",
165
+ emoji: "🚚"
166
+ },
167
+ {
168
+ id: "finance",
169
+ title: "Finance Pack (Month Close)",
170
+ subtitle: "Statements → GLBatch + JournalCsv + bundles",
171
+ emoji: "📚",
172
+ available: copiedFinance.length > 0
173
+ }
174
+ ]
175
+ };
176
+ const rootIndexPath = path.resolve("dashboard/public/demo/index.json");
177
+ await fs.mkdir(path.dirname(rootIndexPath), { recursive: true });
178
+ await fs.writeFile(rootIndexPath, JSON.stringify(index, null, 2) + "\n", "utf8");
179
+
180
+ process.stdout.write(`Exported delivery fixture to dashboard/public/demo/delivery/latest (and legacy demo/latest)\n`);
181
+ if (copiedFinance.length) process.stdout.write(`Exported finance fixture to dashboard/public/demo/finance/latest\n`);
182
+ process.stdout.write(`Wrote dashboard/public/demo/index.json\n`);
183
+ }
184
+
185
+ main().catch((err) => {
186
+ console.error(err);
187
+ process.exitCode = 1;
188
+ });