xytara 3.1.0 → 3.1.2

package/lib/business_cockpit.js

@@ -1,378 +1,378 @@
-"use strict";
-
-function normalizeString(value) {
-  return typeof value === "string" && value.trim() ? value.trim() : null;
-}
-
-function escapeHtml(value) {
-  return String(value == null ? "" : value)
-    .replace(/&/g, "&")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;")
-    .replace(/'/g, "&#39;");
-}
-
-function parseWalletRegistryAccountId() {
-  try {
-    const raw = process.env.XYTARA_WALLET_REGISTRY_JSON;
-    if (!raw) return null;
-    const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed)) return null;
-    for (const entry of parsed) {
-      const accountId = normalizeString(entry && entry.account_id);
-      if (accountId) return accountId;
-    }
-  } catch (_) {
-    return null;
-  }
-  return null;
-}
-
-function resolveBusinessCockpitAccountId(inputAccountId) {
-  return normalizeString(inputAccountId)
-    || normalizeString(process.env.XYTARA_VERIFY_ACCOUNT_ID)
-    || normalizeString(process.env.XYTARA_TREASURY_ACCOUNT_ID)
-    || parseWalletRegistryAccountId()
-    || "acct_demo";
-}
-
-function buildBusinessCockpitPack(input) {
-  const body = input && typeof input === "object" && !Array.isArray(input) ? input : {};
-  const accountId = resolveBusinessCockpitAccountId(body.account_id);
-  const releaseSummary = body.release_summary || {};
-  const treasurySummary = body.treasury_summary || {};
-  const paymentTruthSummary = body.payment_truth_summary || {};
-  const autonomousEntrySummary = body.autonomous_entry_summary || {};
-  const deliverySummary = body.delivery_summary || {};
-  const operatorShellCenter = body.operator_shell_center || {};
-  const operatorShellSummary = body.operator_shell_summary || {};
-  const operatorObservabilitySummary = body.operator_observability_summary || {};
-  const operatorIntelligenceSummary = body.operator_intelligence_summary || {};
-  const runtimeDurabilitySummary = body.runtime_durability_summary || {};
-  const nativeSettlementReadinessSummary = body.native_settlement_readiness_summary || {};
-  const externalMonitoring = body.external_monitoring || {};
-
-  return {
-    ok: true,
-    product: "xytara",
-    category: "machine-commerce-business-cockpit-pack",
-    cockpit_version: "xytara-business-cockpit-v1",
-    generated_at_iso: new Date().toISOString(),
-    account_id: accountId,
-    auth_mode: body.auth_mode || "bearer",
-    posture: "private_operator_business_analytics",
-    release: {
-      version: releaseSummary.version || null,
-      category: releaseSummary.category || null,
-      install_command: releaseSummary.install_command || null,
-      verify_command: releaseSummary.verify_command || null,
-      release_cli: releaseSummary.release_cli || null,
-      summary: releaseSummary
-    },
-    operations: {
-      autonomous_entry_summary: autonomousEntrySummary,
-      delivery_summary: deliverySummary,
-      operator_shell_center: operatorShellCenter,
-      operator_shell_summary: operatorShellSummary,
-      operator_observability_summary: operatorObservabilitySummary,
-      operator_intelligence_summary: operatorIntelligenceSummary
-    },
-    treasury: {
-      treasury_summary: treasurySummary,
-      payment_truth_summary: paymentTruthSummary,
-      runtime_durability_summary: runtimeDurabilitySummary,
-      native_settlement_readiness_summary: nativeSettlementReadinessSummary
-    },
-    external_monitoring: externalMonitoring,
-    linked_surfaces: {
-      self_ref: `/v1/business-cockpit?account_id=${encodeURIComponent(accountId)}`,
-      summary_ref: `/v1/business-cockpit/summary?account_id=${encodeURIComponent(accountId)}`,
-      html_ref: `/business-cockpit?account_id=${encodeURIComponent(accountId)}`,
-      operator_shell_ref: `/v1/operator-shell/summary?account_id=${encodeURIComponent(accountId)}`,
-      operator_observability_ref: `/v1/operator-observability/summary?account_id=${encodeURIComponent(accountId)}`,
-      deliveries_ref: "/v1/deliveries/summary",
-      treasury_ref: "/v1/treasury-destinations/summary",
-      payment_truth_ref: "/v1/payment-rail-truth/summary",
-      autonomous_entry_ref: "/v1/autonomous-entry/summary",
-      runtime_durability_ref: "/v1/runtime/durability/summary",
-      native_settlement_readiness_ref: "/v1/settlement/bsv-teranode/readiness"
-    }
-  };
-}
-
-function summarizeBusinessCockpitPack(packInput) {
-  const pack = packInput && packInput.category === "machine-commerce-business-cockpit-pack"
-    ? packInput
-    : buildBusinessCockpitPack(packInput);
-  const treasurySummary = pack.treasury.treasury_summary || {};
-  const paymentTruthSummary = pack.treasury.payment_truth_summary || {};
-  const deliverySummary = pack.operations.delivery_summary || {};
-  const operatorObservabilitySummary = pack.operations.operator_observability_summary || {};
-  const operatorIntelligenceSummary = pack.operations.operator_intelligence_summary || {};
-  const runtimeDurabilitySummary = pack.treasury.runtime_durability_summary || {};
-  const nativeSettlementReadinessSummary = pack.treasury.native_settlement_readiness_summary || {};
-  const externalMonitoring = pack.external_monitoring || {};
-  const externalHealth = Object.values(externalMonitoring).filter(Boolean);
-  const degradedExternal = externalHealth.filter((entry) => entry.ok === false).length;
-
-  return {
-    ok: true,
-    product: "xytara",
-    category: "machine-commerce-business-cockpit-pack-summary",
-    summary_version: "xytara-business-cockpit-pack-summary-v1",
-    account_id: pack.account_id,
-    release_version: pack.release.version || null,
-    public_live_landing_rail_count: paymentTruthSummary.public_live_landing_rail_count || 0,
-    claimable_treasury_profile_count: treasurySummary.public_claimable_profile_count || 0,
-    configured_treasury_profile_count: treasurySummary.configured_profile_count || 0,
-    delivery_count: deliverySummary.delivery_count || 0,
-    payment_count: operatorObservabilitySummary.payment_count || 0,
-    transaction_count: operatorObservabilitySummary.transaction_count || 0,
-    settlement_count: operatorObservabilitySummary.settlement_count || 0,
-    attention_item_count: operatorObservabilitySummary.attention_item_count || 0,
-    operator_state: operatorObservabilitySummary.operator_state || null,
-    intelligence_state: operatorIntelligenceSummary.operator_state || null,
-    runtime_snapshot_enabled: runtimeDurabilitySummary.enabled === true,
-    native_settlement_ready: nativeSettlementReadinessSummary.ready === true,
-    degraded_external_source_count: degradedExternal,
-    linked_surfaces: pack.linked_surfaces
-  };
-}
-
-function renderKeyValueRows(entry) {
-  return Object.entries(entry || {})
-    .map(([key, value]) => {
-      const rendered = Array.isArray(value)
-        ? value.join(", ")
-        : value && typeof value === "object"
-          ? JSON.stringify(value)
-          : String(value);
-      return `<tr><th>${escapeHtml(key)}</th><td>${escapeHtml(rendered)}</td></tr>`;
-    })
-    .join("");
-}
-
-function renderSummaryCards(summary) {
-  const cards = [
-    ["Release", summary.release_version || "unknown"],
-    ["Live Rails", summary.public_live_landing_rail_count || 0],
-    ["Treasury Profiles", summary.claimable_treasury_profile_count || 0],
-    ["Payments", summary.payment_count || 0],
-    ["Transactions", summary.transaction_count || 0],
-    ["Deliveries", summary.delivery_count || 0],
-    ["Settlements", summary.settlement_count || 0],
-    ["Attention", summary.attention_item_count || 0],
-    ["BSV Ready", summary.native_settlement_ready ? "yes" : "no"],
-    ["External Degraded", summary.degraded_external_source_count || 0]
-  ];
-  return cards.map(([label, value]) => `
-    <section class="card">
-      <div class="card-label">${escapeHtml(label)}</div>
-      <div class="card-value">${escapeHtml(value)}</div>
-    </section>
-  `).join("");
-}
-
-function buildBusinessCockpitHtml(packInput) {
-  const pack = packInput && packInput.category === "machine-commerce-business-cockpit-pack"
-    ? packInput
-    : buildBusinessCockpitPack(packInput);
-  const summary = summarizeBusinessCockpitPack(pack);
-  const externalRows = Object.entries(pack.external_monitoring || {}).map(([key, value]) => ({
-    source: key,
-    ok: value && value.ok === true ? "ok" : "degraded",
-    ref: value && value.ref ? value.ref : null,
-    status: value && value.status != null ? value.status : null,
-    reason: value && value.reason ? value.reason : null
-  }));
-
-  return `<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1">
-    <title>xytara Business Cockpit</title>
-    <style>
-      :root {
-        color-scheme: light;
-        --bg: #f4f1ea;
-        --panel: #fffaf2;
-        --ink: #1c1b18;
-        --muted: #6e6759;
-        --line: #d9cfbf;
-        --accent: #0f766e;
-        --accent-2: #a16207;
-      }
-      * { box-sizing: border-box; }
-      body {
-        margin: 0;
-        font-family: Georgia, "Times New Roman", serif;
-        color: var(--ink);
-        background: radial-gradient(circle at top left, #fffdf7 0%, var(--bg) 60%);
-      }
-      .wrap {
-        max-width: 1180px;
-        margin: 0 auto;
-        padding: 28px 20px 48px;
-      }
-      .hero {
-        background: linear-gradient(135deg, #fffef9, #f4ede0);
-        border: 1px solid var(--line);
-        border-radius: 22px;
-        padding: 28px;
-        box-shadow: 0 20px 50px rgba(28, 27, 24, 0.06);
-      }
-      h1, h2 { margin: 0 0 10px; }
-      h1 { font-size: 2.3rem; }
-      h2 { font-size: 1.25rem; margin-top: 24px; }
-      p, li, td, th, code { line-height: 1.45; }
-      .muted { color: var(--muted); }
-      .grid {
-        display: grid;
-        grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
-        gap: 14px;
-        margin-top: 20px;
-      }
-      .card, .panel {
-        background: var(--panel);
-        border: 1px solid var(--line);
-        border-radius: 18px;
-        padding: 16px;
-      }
-      .card-label {
-        font-size: 0.85rem;
-        text-transform: uppercase;
-        letter-spacing: 0.08em;
-        color: var(--muted);
-      }
-      .card-value {
-        margin-top: 8px;
-        font-size: 1.8rem;
-        font-weight: 700;
-      }
-      .section-grid {
-        display: grid;
-        grid-template-columns: repeat(auto-fit, minmax(320px, 1fr));
-        gap: 18px;
-        margin-top: 20px;
-      }
-      table {
-        width: 100%;
-        border-collapse: collapse;
-      }
-      th, td {
-        text-align: left;
-        padding: 9px 0;
-        border-bottom: 1px solid var(--line);
-        vertical-align: top;
-      }
-      th {
-        width: 42%;
-        color: var(--muted);
-        font-weight: 600;
-      }
-      a { color: var(--accent); text-decoration: none; }
-      a:hover { text-decoration: underline; }
-      .token-note {
-        margin-top: 14px;
-        font-size: 0.95rem;
-        color: var(--accent-2);
-      }
-      .inline-list {
-        display: flex;
-        flex-wrap: wrap;
-        gap: 10px;
-        padding: 0;
-        margin: 12px 0 0;
-        list-style: none;
-      }
-      .inline-list li {
-        border: 1px solid var(--line);
-        border-radius: 999px;
-        padding: 8px 12px;
-        background: #fff;
-      }
-      .external-table th { width: 24%; }
-    </style>
-  </head>
-  <body>
-    <main class="wrap">
-      <section class="hero">
-        <h1>xytara Business Cockpit</h1>
-        <p class="muted">Private operator analytics across runtime operations, treasury landing, release posture, settlement readiness, and linked proof-facing health.</p>
-        <p><strong>Account scope:</strong> <code>${escapeHtml(pack.account_id)}</code> <span class="muted">| auth: ${escapeHtml(pack.auth_mode)}</span></p>
-        <div class="grid">${renderSummaryCards(summary)}</div>
-        <p class="token-note">This page is private. Open it with <code>Authorization: Bearer &lt;token&gt;</code> or a tokenized cockpit URL you keep private.</p>
-      </section>
-      <section class="section-grid">
-        <article class="panel">
-          <h2>Release</h2>
-          <table>${renderKeyValueRows({
-            version: pack.release.version,
-            category: pack.release.category,
-            install_command: pack.release.install_command,
-            verify_command: pack.release.verify_command,
-            release_cli: pack.release.release_cli
-          })}</table>
-        </article>
-        <article class="panel">
-          <h2>Treasury</h2>
-          <table>${renderKeyValueRows({
-            configured_profile_count: pack.treasury.treasury_summary.configured_profile_count,
-            public_claimable_profile_count: pack.treasury.treasury_summary.public_claimable_profile_count,
-            readiness_only_profile_count: pack.treasury.treasury_summary.readiness_only_profile_count,
-            public_live_landing_rail_count: pack.treasury.payment_truth_summary.public_live_landing_rail_count,
-            native_settlement_ready: pack.treasury.native_settlement_readiness_summary.ready,
-            runtime_snapshot_enabled: pack.treasury.runtime_durability_summary.enabled
-          })}</table>
-        </article>
-        <article class="panel">
-          <h2>Operations</h2>
-          <table>${renderKeyValueRows({
-            payment_count: pack.operations.operator_observability_summary.payment_count,
-            transaction_count: pack.operations.operator_observability_summary.transaction_count,
-            delivery_count: pack.operations.delivery_summary.delivery_count,
-            settlement_count: pack.operations.operator_observability_summary.settlement_count,
-            attention_item_count: pack.operations.operator_observability_summary.attention_item_count,
-            operator_state: pack.operations.operator_observability_summary.operator_state
-          })}</table>
-        </article>
-        <article class="panel">
-          <h2>External Health</h2>
-          <table class="external-table">
-            <thead>
-              <tr><th>Source</th><th>Status</th><th>HTTP</th><th>Ref</th></tr>
-            </thead>
-            <tbody>
-              ${externalRows.map((entry) => `
-                <tr>
-                  <th>${escapeHtml(entry.source)}</th>
-                  <td>${escapeHtml(entry.ok)}</td>
-                  <td>${escapeHtml(entry.status == null ? "-" : entry.status)}</td>
-                  <td>${entry.ref ? `<a href="${escapeHtml(entry.ref)}">${escapeHtml(entry.ref)}</a>` : escapeHtml(entry.reason || "-")}</td>
-                </tr>
-              `).join("")}
-            </tbody>
-          </table>
-        </article>
-      </section>
-      <section class="panel" style="margin-top: 18px;">
-        <h2>Quick Links</h2>
-        <ul class="inline-list">
-          ${Object.entries(pack.linked_surfaces).map(([key, value]) => `
-            <li><strong>${escapeHtml(key)}</strong>: <a href="${escapeHtml(value)}">${escapeHtml(value)}</a></li>
-          `).join("")}
-        </ul>
-      </section>
-    </main>
-  </body>
-</html>`;
-}
-
-module.exports = {
-  resolveBusinessCockpitAccountId,
-  buildBusinessCockpitPack,
-  summarizeBusinessCockpitPack,
-  buildBusinessCockpitHtml
-};
+"use strict";
+
+function normalizeString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+
+function escapeHtml(value) {
+  return String(value == null ? "" : value)
+    .replace(/&/g, "&amp;")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;")
+    .replace(/"/g, "&quot;")
+    .replace(/'/g, "&#39;");
+}
+
+function parseWalletRegistryAccountId() {
+  try {
+    const raw = process.env.XYTARA_WALLET_REGISTRY_JSON;
+    if (!raw) return null;
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) return null;
+    for (const entry of parsed) {
+      const accountId = normalizeString(entry && entry.account_id);
+      if (accountId) return accountId;
+    }
+  } catch (_) {
+    return null;
+  }
+  return null;
+}
+
+function resolveBusinessCockpitAccountId(inputAccountId) {
+  return normalizeString(inputAccountId)
+    || normalizeString(process.env.XYTARA_VERIFY_ACCOUNT_ID)
+    || normalizeString(process.env.XYTARA_TREASURY_ACCOUNT_ID)
+    || parseWalletRegistryAccountId()
+    || "acct_demo";
+}
+
+function buildBusinessCockpitPack(input) {
+  const body = input && typeof input === "object" && !Array.isArray(input) ? input : {};
+  const accountId = resolveBusinessCockpitAccountId(body.account_id);
+  const releaseSummary = body.release_summary || {};
+  const treasurySummary = body.treasury_summary || {};
+  const paymentTruthSummary = body.payment_truth_summary || {};
+  const autonomousEntrySummary = body.autonomous_entry_summary || {};
+  const deliverySummary = body.delivery_summary || {};
+  const operatorShellCenter = body.operator_shell_center || {};
+  const operatorShellSummary = body.operator_shell_summary || {};
+  const operatorObservabilitySummary = body.operator_observability_summary || {};
+  const operatorIntelligenceSummary = body.operator_intelligence_summary || {};
+  const runtimeDurabilitySummary = body.runtime_durability_summary || {};
+  const nativeSettlementReadinessSummary = body.native_settlement_readiness_summary || {};
+  const externalMonitoring = body.external_monitoring || {};
+
+  return {
+    ok: true,
+    product: "xytara",
+    category: "machine-commerce-business-cockpit-pack",
+    cockpit_version: "xytara-business-cockpit-v1",
+    generated_at_iso: new Date().toISOString(),
+    account_id: accountId,
+    auth_mode: body.auth_mode || "bearer",
+    posture: "private_operator_business_analytics",
+    release: {
+      version: releaseSummary.version || null,
+      category: releaseSummary.category || null,
+      install_command: releaseSummary.install_command || null,
+      verify_command: releaseSummary.verify_command || null,
+      release_cli: releaseSummary.release_cli || null,
+      summary: releaseSummary
+    },
+    operations: {
+      autonomous_entry_summary: autonomousEntrySummary,
+      delivery_summary: deliverySummary,
+      operator_shell_center: operatorShellCenter,
+      operator_shell_summary: operatorShellSummary,
+      operator_observability_summary: operatorObservabilitySummary,
+      operator_intelligence_summary: operatorIntelligenceSummary
+    },
+    treasury: {
+      treasury_summary: treasurySummary,
+      payment_truth_summary: paymentTruthSummary,
+      runtime_durability_summary: runtimeDurabilitySummary,
+      native_settlement_readiness_summary: nativeSettlementReadinessSummary
+    },
+    external_monitoring: externalMonitoring,
+    linked_surfaces: {
+      self_ref: `/v1/business-cockpit?account_id=${encodeURIComponent(accountId)}`,
+      summary_ref: `/v1/business-cockpit/summary?account_id=${encodeURIComponent(accountId)}`,
+      html_ref: `/business-cockpit?account_id=${encodeURIComponent(accountId)}`,
+      operator_shell_ref: `/v1/operator-shell/summary?account_id=${encodeURIComponent(accountId)}`,
+      operator_observability_ref: `/v1/operator-observability/summary?account_id=${encodeURIComponent(accountId)}`,
+      deliveries_ref: "/v1/deliveries/summary",
+      treasury_ref: "/v1/treasury-destinations/summary",
+      payment_truth_ref: "/v1/payment-rail-truth/summary",
+      autonomous_entry_ref: "/v1/autonomous-entry/summary",
+      runtime_durability_ref: "/v1/runtime/durability/summary",
+      native_settlement_readiness_ref: "/v1/settlement/bsv-teranode/readiness"
+    }
+  };
+}
+
+function summarizeBusinessCockpitPack(packInput) {
+  const pack = packInput && packInput.category === "machine-commerce-business-cockpit-pack"
+    ? packInput
+    : buildBusinessCockpitPack(packInput);
+  const treasurySummary = pack.treasury.treasury_summary || {};
+  const paymentTruthSummary = pack.treasury.payment_truth_summary || {};
+  const deliverySummary = pack.operations.delivery_summary || {};
+  const operatorObservabilitySummary = pack.operations.operator_observability_summary || {};
+  const operatorIntelligenceSummary = pack.operations.operator_intelligence_summary || {};
+  const runtimeDurabilitySummary = pack.treasury.runtime_durability_summary || {};
+  const nativeSettlementReadinessSummary = pack.treasury.native_settlement_readiness_summary || {};
+  const externalMonitoring = pack.external_monitoring || {};
+  const externalHealth = Object.values(externalMonitoring).filter(Boolean);
+  const degradedExternal = externalHealth.filter((entry) => entry.ok === false).length;
+
+  return {
+    ok: true,
+    product: "xytara",
+    category: "machine-commerce-business-cockpit-pack-summary",
+    summary_version: "xytara-business-cockpit-pack-summary-v1",
+    account_id: pack.account_id,
+    release_version: pack.release.version || null,
+    public_live_landing_rail_count: paymentTruthSummary.public_live_landing_rail_count || 0,
+    claimable_treasury_profile_count: treasurySummary.public_claimable_profile_count || 0,
+    configured_treasury_profile_count: treasurySummary.configured_profile_count || 0,
+    delivery_count: deliverySummary.delivery_count || 0,
+    payment_count: operatorObservabilitySummary.payment_count || 0,
+    transaction_count: operatorObservabilitySummary.transaction_count || 0,
+    settlement_count: operatorObservabilitySummary.settlement_count || 0,
+    attention_item_count: operatorObservabilitySummary.attention_item_count || 0,
+    operator_state: operatorObservabilitySummary.operator_state || null,
+    intelligence_state: operatorIntelligenceSummary.operator_state || null,
+    runtime_snapshot_enabled: runtimeDurabilitySummary.enabled === true,
+    native_settlement_ready: nativeSettlementReadinessSummary.ready === true,
+    degraded_external_source_count: degradedExternal,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+function renderKeyValueRows(entry) {
+  return Object.entries(entry || {})
+    .map(([key, value]) => {
+      const rendered = Array.isArray(value)
+        ? value.join(", ")
+        : value && typeof value === "object"
+          ? JSON.stringify(value)
+          : String(value);
+      return `<tr><th>${escapeHtml(key)}</th><td>${escapeHtml(rendered)}</td></tr>`;
+    })
+    .join("");
+}
+
+function renderSummaryCards(summary) {
+  const cards = [
+    ["Release", summary.release_version || "unknown"],
+    ["Live Rails", summary.public_live_landing_rail_count || 0],
+    ["Treasury Profiles", summary.claimable_treasury_profile_count || 0],
+    ["Payments", summary.payment_count || 0],
+    ["Transactions", summary.transaction_count || 0],
+    ["Deliveries", summary.delivery_count || 0],
+    ["Settlements", summary.settlement_count || 0],
+    ["Attention", summary.attention_item_count || 0],
+    ["BSV Ready", summary.native_settlement_ready ? "yes" : "no"],
+    ["External Degraded", summary.degraded_external_source_count || 0]
+  ];
+  return cards.map(([label, value]) => `
+    <section class="card">
+      <div class="card-label">${escapeHtml(label)}</div>
+      <div class="card-value">${escapeHtml(value)}</div>
+    </section>
+  `).join("");
+}
+
+function buildBusinessCockpitHtml(packInput) {
+  const pack = packInput && packInput.category === "machine-commerce-business-cockpit-pack"
+    ? packInput
+    : buildBusinessCockpitPack(packInput);
+  const summary = summarizeBusinessCockpitPack(pack);
+  const externalRows = Object.entries(pack.external_monitoring || {}).map(([key, value]) => ({
+    source: key,
+    ok: value && value.ok === true ? "ok" : "degraded",
+    ref: value && value.ref ? value.ref : null,
+    status: value && value.status != null ? value.status : null,
+    reason: value && value.reason ? value.reason : null
+  }));
+
+  return `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>xytara Business Cockpit</title>
+    <style>
+      :root {
+        color-scheme: light;
+        --bg: #f4f1ea;
+        --panel: #fffaf2;
+        --ink: #1c1b18;
+        --muted: #6e6759;
+        --line: #d9cfbf;
+        --accent: #0f766e;
+        --accent-2: #a16207;
+      }
+      * { box-sizing: border-box; }
+      body {
+        margin: 0;
+        font-family: Georgia, "Times New Roman", serif;
+        color: var(--ink);
+        background: radial-gradient(circle at top left, #fffdf7 0%, var(--bg) 60%);
+      }
+      .wrap {
+        max-width: 1180px;
+        margin: 0 auto;
+        padding: 28px 20px 48px;
+      }
+      .hero {
+        background: linear-gradient(135deg, #fffef9, #f4ede0);
+        border: 1px solid var(--line);
+        border-radius: 22px;
+        padding: 28px;
+        box-shadow: 0 20px 50px rgba(28, 27, 24, 0.06);
+      }
+      h1, h2 { margin: 0 0 10px; }
+      h1 { font-size: 2.3rem; }
+      h2 { font-size: 1.25rem; margin-top: 24px; }
+      p, li, td, th, code { line-height: 1.45; }
+      .muted { color: var(--muted); }
+      .grid {
+        display: grid;
+        grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+        gap: 14px;
+        margin-top: 20px;
+      }
+      .card, .panel {
+        background: var(--panel);
+        border: 1px solid var(--line);
+        border-radius: 18px;
+        padding: 16px;
+      }
+      .card-label {
+        font-size: 0.85rem;
+        text-transform: uppercase;
+        letter-spacing: 0.08em;
+        color: var(--muted);
+      }
+      .card-value {
+        margin-top: 8px;
+        font-size: 1.8rem;
+        font-weight: 700;
+      }
+      .section-grid {
+        display: grid;
+        grid-template-columns: repeat(auto-fit, minmax(320px, 1fr));
+        gap: 18px;
+        margin-top: 20px;
+      }
+      table {
+        width: 100%;
+        border-collapse: collapse;
+      }
+      th, td {
+        text-align: left;
+        padding: 9px 0;
+        border-bottom: 1px solid var(--line);
+        vertical-align: top;
+      }
+      th {
+        width: 42%;
+        color: var(--muted);
+        font-weight: 600;
+      }
+      a { color: var(--accent); text-decoration: none; }
+      a:hover { text-decoration: underline; }
+      .token-note {
+        margin-top: 14px;
+        font-size: 0.95rem;
+        color: var(--accent-2);
+      }
+      .inline-list {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 10px;
+        padding: 0;
+        margin: 12px 0 0;
+        list-style: none;
+      }
+      .inline-list li {
+        border: 1px solid var(--line);
+        border-radius: 999px;
+        padding: 8px 12px;
+        background: #fff;
+      }
+      .external-table th { width: 24%; }
+    </style>
+  </head>
+  <body>
+    <main class="wrap">
+      <section class="hero">
+        <h1>xytara Business Cockpit</h1>
+        <p class="muted">Private operator analytics across runtime operations, treasury landing, release posture, settlement readiness, and linked proof-facing health.</p>
+        <p><strong>Account scope:</strong> <code>${escapeHtml(pack.account_id)}</code> <span class="muted">| auth: ${escapeHtml(pack.auth_mode)}</span></p>
+        <div class="grid">${renderSummaryCards(summary)}</div>
+        <p class="token-note">This page is private. Open it with <code>Authorization: Bearer &lt;token&gt;</code> or a tokenized cockpit URL you keep private.</p>
+      </section>
+      <section class="section-grid">
+        <article class="panel">
+          <h2>Release</h2>
+          <table>${renderKeyValueRows({
+            version: pack.release.version,
+            category: pack.release.category,
+            install_command: pack.release.install_command,
+            verify_command: pack.release.verify_command,
+            release_cli: pack.release.release_cli
+          })}</table>
+        </article>
+        <article class="panel">
+          <h2>Treasury</h2>
+          <table>${renderKeyValueRows({
+            configured_profile_count: pack.treasury.treasury_summary.configured_profile_count,
+            public_claimable_profile_count: pack.treasury.treasury_summary.public_claimable_profile_count,
+            readiness_only_profile_count: pack.treasury.treasury_summary.readiness_only_profile_count,
+            public_live_landing_rail_count: pack.treasury.payment_truth_summary.public_live_landing_rail_count,
+            native_settlement_ready: pack.treasury.native_settlement_readiness_summary.ready,
+            runtime_snapshot_enabled: pack.treasury.runtime_durability_summary.enabled
+          })}</table>
+        </article>
+        <article class="panel">
+          <h2>Operations</h2>
+          <table>${renderKeyValueRows({
+            payment_count: pack.operations.operator_observability_summary.payment_count,
+            transaction_count: pack.operations.operator_observability_summary.transaction_count,
+            delivery_count: pack.operations.delivery_summary.delivery_count,
+            settlement_count: pack.operations.operator_observability_summary.settlement_count,
+            attention_item_count: pack.operations.operator_observability_summary.attention_item_count,
+            operator_state: pack.operations.operator_observability_summary.operator_state
+          })}</table>
+        </article>
+        <article class="panel">
+          <h2>External Health</h2>
+          <table class="external-table">
+            <thead>
+              <tr><th>Source</th><th>Status</th><th>HTTP</th><th>Ref</th></tr>
+            </thead>
+            <tbody>
+              ${externalRows.map((entry) => `
+                <tr>
+                  <th>${escapeHtml(entry.source)}</th>
+                  <td>${escapeHtml(entry.ok)}</td>
+                  <td>${escapeHtml(entry.status == null ? "-" : entry.status)}</td>
+                  <td>${entry.ref ? `<a href="${escapeHtml(entry.ref)}">${escapeHtml(entry.ref)}</a>` : escapeHtml(entry.reason || "-")}</td>
+                </tr>
+              `).join("")}
+            </tbody>
+          </table>
+        </article>
+      </section>
+      <section class="panel" style="margin-top: 18px;">
+        <h2>Quick Links</h2>
+        <ul class="inline-list">
+          ${Object.entries(pack.linked_surfaces).map(([key, value]) => `
+            <li><strong>${escapeHtml(key)}</strong>: <a href="${escapeHtml(value)}">${escapeHtml(value)}</a></li>
+          `).join("")}
+        </ul>
+      </section>
+    </main>
+  </body>
+</html>`;
+}
+
+module.exports = {
+  resolveBusinessCockpitAccountId,
+  buildBusinessCockpitPack,
+  summarizeBusinessCockpitPack,
+  buildBusinessCockpitHtml
+};