xytara 3.1.13 → 3.1.14

package/scripts/verify_x402_facilitator.js

@@ -1,286 +1,286 @@
-"use strict";
-
-// Verifies the x402_facilitator payment mode end to end against a mock facilitator:
-//   - an unpaid x402 execute returns 402 and advertises the configured accepts
-//   - a well-formed payment is verified and settled, the command runs, and the
-//     response carries a PAYMENT-RESPONSE settlement receipt
-//   - malformed, mismatched, facilitator-rejected, and unsettled payments all 402
-//
-// No real network or chain is used; the mock facilitator stands in for x402.org.
-
-const assert = require("assert");
-const http = require("http");
-
-const ACCEPTS = [
-  {
-    scheme: "exact",
-    network: "eip155:84532",
-    asset: "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
-    amount: "1000",
-    payTo: "0x7cd2E0Ed2721319B20FAac4109774d030833F84D",
-    extra: { name: "USDC", version: "2" },
-    maxTimeoutSeconds: 60
-  }
-];
-
-function startMockFacilitator() {
-  const calls = { verify: 0, settle: 0 };
-  const server = http.createServer((req, res) => {
-    const chunks = [];
-    req.on("data", (c) => chunks.push(c));
-    req.on("end", () => {
-      let body = {};
-      try { body = JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}"); } catch (_) { body = {}; }
-      const sig = body && body.paymentPayload && body.paymentPayload.payload ? String(body.paymentPayload.payload.signature || "") : "";
-      const reply = (payload, status) => {
-        const text = JSON.stringify(payload);
-        res.writeHead(status || 200, { "content-type": "application/json", "content-length": Buffer.byteLength(text) });
-        res.end(text);
-      };
-      if (req.method === "POST" && req.url === "/verify") {
-        calls.verify += 1;
-        calls.lastVerifyBody = body;
-        if (sig === "reject-me") return reply({ isValid: false, invalidReason: "invalid_signature" });
-        if (sig === "cdp-invalid") return reply({ isValid: false, invalidReason: "invalid_payload", invalidMessage: "contract call failed: execution reverted", payer: "0x1111111111111111111111111111111111111111" }, 400);
-        return reply({ isValid: true, payer: "0x1111111111111111111111111111111111111111" });
-      }
-      if (req.method === "POST" && req.url === "/settle") {
-        calls.settle += 1;
-        if (sig === "settle-fails") return reply({ success: false, errorReason: "insufficient_funds" });
-        if (sig === "cdp-settle-fail") return reply({ success: false, errorReason: "insufficient_funds" }, 400);
-        return reply({ success: true, transaction: "0xmocktx", network: "eip155:84532", payer: "0x1111111111111111111111111111111111111111" });
-      }
-      res.writeHead(404); res.end();
-    });
-  });
-  return new Promise((resolve) => server.listen(0, "127.0.0.1", () => resolve({ server, calls, port: server.address().port })));
-}
-
-function paymentHeader(signature, overrides = {}) {
-  const accepted = ACCEPTS[0];
-  return Buffer.from(JSON.stringify({
-    x402Version: 2,
-    accepted: { ...accepted, ...overrides.accepted },
-    payload: {
-      signature,
-      authorization: {
-        from: "0x1111111111111111111111111111111111111111",
-        to: accepted.payTo,
-        value: accepted.amount,
-        validAfter: "0",
-        validBefore: String(Math.floor(Date.now() / 1000) + 600),
-        nonce: `0x${"ab".repeat(32)}`
-      }
-    }
-  }), "utf8").toString("base64");
-}
-
-async function post(baseUrl, path, body, headers = {}) {
-  const res = await fetch(`${baseUrl}${path}`, {
-    method: "POST",
-    headers: { "content-type": "application/json", ...headers },
-    body: JSON.stringify(body)
-  });
-  let json = null;
-  try { json = await res.json(); } catch (_) { json = null; }
-  return { status: res.status, json, headers: res.headers };
-}
-
-async function main() {
-  const facilitator = await startMockFacilitator();
-  const previous = {
-    mode: process.env.XYTARA_PAYMENT_VERIFICATION_MODE,
-    accepts: process.env.XYTARA_X402_ACCEPTS_JSON,
-    facUrl: process.env.XYTARA_X402_FACILITATOR_URL
-  };
-  process.env.XYTARA_PAYMENT_VERIFICATION_MODE = "x402_facilitator";
-  process.env.XYTARA_X402_ACCEPTS_JSON = JSON.stringify(ACCEPTS);
-  process.env.XYTARA_X402_FACILITATOR_URL = `http://127.0.0.1:${facilitator.port}`;
-
-  delete require.cache[require.resolve("../server")];
-  const { createServer } = require("../server");
-  const server = createServer();
-  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-  const baseUrl = `http://127.0.0.1:${server.address().port}`;
-  const execBody = { account_id: "acct_x402", command: "x402 facilitator demo", task_ref: "trust.verify", body: { subject_id: "s-1" } };
-
-  try {
-    // 1. Unpaid -> 402 advertising accepts.
-    const unpaid = await post(baseUrl, "/x402/commands/execute", execBody);
-    assert.strictEqual(unpaid.status, 402, "unpaid x402 execute must return 402");
-    const required = unpaid.json && unpaid.json.payment_required;
-    assert.ok(required, "402 must carry payment_required");
-    assert.strictEqual(required.x402Version, 2, "challenge must be x402 v2");
-    assert.ok(Array.isArray(required.accepts) && required.accepts.length === 1, "challenge must advertise accepts");
-    assert.strictEqual(required.accepts[0].network, "eip155:84532", "advertised network mismatch");
-    assert.strictEqual(typeof unpaid.headers.get("payment-required"), "string", "PAYMENT-REQUIRED header missing");
-
-    // 2. Bogus header -> 402 payment_signature_invalid.
-    const bogus = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": "not-a-payment" });
-    assert.strictEqual(bogus.status, 402, "bogus payment header must 402");
-    assert.strictEqual(bogus.json.reason, "payment_signature_invalid", "bogus reason mismatch");
-
-    // 3. Mismatched requirements -> 402 before the facilitator.
-    const verifyBefore = facilitator.calls.verify;
-    const mismatch = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("ok", { accepted: { amount: "9" } }) });
-    assert.strictEqual(mismatch.status, 402, "mismatched requirements must 402");
-    assert.strictEqual(mismatch.json.reason, "payment_requirements_mismatch", "mismatch reason");
-    assert.strictEqual(facilitator.calls.verify, verifyBefore, "facilitator must not be called on a requirements mismatch");
-
-    // 4. Facilitator rejects -> 402 payment_verification_failed.
-    const rejected = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("reject-me") });
-    assert.strictEqual(rejected.status, 402, "facilitator-rejected payment must 402");
-    assert.strictEqual(rejected.json.reason, "payment_verification_failed", "rejection reason");
-    assert.strictEqual(rejected.json.detail, "invalid_signature", "rejection detail");
-
-    // 5. Settlement fails -> 402, no tool output.
-    const settleFails = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("settle-fails") });
-    assert.strictEqual(settleFails.status, 402, "failed settlement must 402");
-    assert.strictEqual(settleFails.json.reason, "payment_settlement_failed", "settlement failure reason");
-
-    // 6. Verified + settled -> 200 with a result and a PAYMENT-RESPONSE receipt.
-    // (Delivery-receipt signing keys for this run only: Ed25519 + ML-DSA-65 hybrid.)
-    const crypto = require("crypto");
-    const receiptEd = crypto.generateKeyPairSync("ed25519");
-    const receiptMl = crypto.generateKeyPairSync("ml-dsa-65");
-    process.env.XYTARA_DELIVERY_RECEIPT_ED25519_KEY = receiptEd.privateKey.export({ type: "pkcs8", format: "der" }).toString("base64");
-    process.env.XYTARA_DELIVERY_RECEIPT_MLDSA65_KEY = receiptMl.privateKey.export({ type: "pkcs8", format: "der" }).toString("base64");
-    const settleBefore = facilitator.calls.settle;
-    const paid = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("ok") });
-    assert.strictEqual(paid.status, 200, "verified+settled payment must 200");
-    assert.strictEqual(typeof paid.json.transaction.transaction_id, "string", "paid result missing transaction");
-    assert.strictEqual(paid.json.transaction.status, "completed", "paid transaction must be completed");
-    assert.strictEqual(paid.json.transaction.payment.verification_mode, "x402_facilitator", "verification mode not recorded");
-    assert.strictEqual(facilitator.calls.settle, settleBefore + 1, "facilitator settle must be called once");
-    const receiptHeader = paid.headers.get("payment-response");
-    assert.strictEqual(typeof receiptHeader, "string", "PAYMENT-RESPONSE header missing on a settled 200");
-    const receipt = JSON.parse(Buffer.from(receiptHeader, "base64").toString("utf8"));
-    assert.strictEqual(receipt.success, true, "settlement receipt must report success");
-    assert.strictEqual(receipt.transaction, "0xmocktx", "settlement receipt transaction mismatch");
-
-    // 6a. The runtime records the REAL x402 settlement (not the quote's default placeholder rail).
-    const recorded = paid.json.receipt.settlement;
-    assert.strictEqual(recorded.rail, "x402", "x402-paid call records the x402 rail");
-    assert.strictEqual(recorded.mode, "x402_facilitator", "x402 settlement mode recorded");
-    assert.strictEqual(recorded.txid, "0xmocktx", "settlement record carries the settled tx");
-    assert.strictEqual(recorded.network, "eip155:84532", "settlement record carries the network");
-    assert.strictEqual(recorded.pay_to, ACCEPTS[0].payTo, "settlement record carries pay_to");
-    assert.strictEqual(recorded.status, "settled", "settlement record status");
-    assert.strictEqual(recorded.live, undefined, "no placeholder BSV settlement record for an x402 call");
-    assert.strictEqual(paid.json.receipt.treasury.rail, "x402", "treasury record on the x402 rail");
-    assert.strictEqual(paid.json.receipt.default_path.settlement_mode, "x402_facilitator", "default path reflects x402");
-
-    // 6b. Signed delivery receipt: binds the settlement, verifies against the published keys,
-    //     is retrievable by id, and rejects tampering and signature stripping.
-    const delivery = paid.json.delivery_receipt;
-    assert.ok(delivery, "paid result carries a delivery receipt");
-    assert.strictEqual(delivery.v, "naxytra-delivery-receipt/1", "delivery receipt version");
-    assert.deepStrictEqual(delivery.signing.suite, ["EdDSA", "ML-DSA-65"], "hybrid suite");
-    assert.strictEqual(delivery.payment.protocol, "x402", "receipt payment protocol");
-    assert.strictEqual(delivery.payment.settlement_tx, "0xmocktx", "receipt binds the settlement tx");
-    assert.strictEqual(delivery.payment.pay_to, ACCEPTS[0].payTo, "receipt carries pay_to");
-    assert.strictEqual(delivery.payment.amount, ACCEPTS[0].amount, "receipt carries the settled amount");
-    assert.strictEqual(delivery.call.quote_id, paid.json.transaction.quote_id, "receipt binds the quote");
-    assert.strictEqual(delivery.account_id, undefined, "receipt carries no account id");
-    const receiptLib = require("../lib/delivery_receipt");
-    assert.strictEqual(delivery.delivery.request_sha256, receiptLib.hashCanonical(execBody.body), "request hash recomputes from the request body");
-    const keysRes = await fetch(`${baseUrl}/.well-known/delivery-receipt-keys`);
-    const keys = await keysRes.json();
-    assert.strictEqual(keys.signing_state, "signing", "keys endpoint reports signing");
-    assert.strictEqual(receiptLib.verifyDeliveryReceipt(delivery, keys.keys).valid, true, "receipt verifies against the published keys");
-    const verifyRes = await post(baseUrl, "/v1/delivery-receipts/verify", { receipt: delivery });
-    assert.strictEqual(verifyRes.json.valid, true, "verify endpoint accepts the genuine receipt");
-    assert.strictEqual(verifyRes.json.issuer_matches, true, "verify endpoint matches the issuer");
-    const tamperedDelivery = JSON.parse(JSON.stringify(delivery));
-    tamperedDelivery.payment.amount = "1";
-    assert.strictEqual((await post(baseUrl, "/v1/delivery-receipts/verify", { receipt: tamperedDelivery })).json.valid, false, "tampered receipt rejected");
-    const strippedDelivery = JSON.parse(JSON.stringify(delivery));
-    strippedDelivery.sig.signatures = strippedDelivery.sig.signatures.filter((entry) => entry.alg !== "ML-DSA-65");
-    assert.strictEqual(receiptLib.verifyDeliveryReceipt(strippedDelivery, keys.keys).valid, false, "stripping the ML-DSA leg (downgrade) rejected");
-    const fetched = await fetch(`${baseUrl}/v1/delivery-receipts/${encodeURIComponent(delivery.receipt_id)}`);
-    assert.strictEqual(fetched.status, 200, "receipt retrievable by id");
-    assert.deepStrictEqual((await fetched.json()).delivery_receipt, delivery, "retrieved receipt is identical");
-    assert.strictEqual((await fetch(`${baseUrl}/v1/delivery-receipts/drcpt_nope`)).status, 404, "unknown receipt 404");
-    // The xoonya verifier accepts the same signatures (kid == xoonya key ref). Checked when the
-    // sibling xoonya checkout is present (workspace); skipped in a standalone xytara checkout.
-    let verifyExternalProofSignature = null;
-    try { ({ verifyExternalProofSignature } = require("../../xoonya/proof_sdk")); } catch (_) { verifyExternalProofSignature = null; }
-    const { sig: _omit, ...unsignedDelivery } = delivery;
-    for (const entry of verifyExternalProofSignature ? delivery.sig.signatures : []) {
-      const key = keys.keys.find((item) => item.kid === entry.kid);
-      const viaXoonya = verifyExternalProofSignature({ material: receiptLib.canonicalize(unsignedDelivery), signature: entry.value, algorithm: entry.alg, public_key: key.public_key_spki_der_base64, expected_key_ref: entry.kid });
-      assert.strictEqual(viaXoonya.signature_valid && viaXoonya.trust_anchored, true, `xoonya verifies + anchors the ${entry.alg} leg`);
-    }
-    delete process.env.XYTARA_DELIVERY_RECEIPT_ED25519_KEY;
-    delete process.env.XYTARA_DELIVERY_RECEIPT_MLDSA65_KEY;
-    // Without keys the receipt is still issued but honestly unsigned (never a fake signature).
-    const unsignedPaid = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("ok") });
-    assert.strictEqual(unsignedPaid.json.delivery_receipt.sig.state, "unsigned_signing_key_not_configured", "no keys -> honestly unsigned");
-    assert.strictEqual(receiptLib.verifyDeliveryReceipt(unsignedPaid.json.delivery_receipt, keys.keys).valid, false, "unsigned receipt never verifies");
-    // The shared module is byte-identical in the runtime and the MCP executor.
-    const fs = require("fs");
-    const path = require("path");
-    assert.ok(fs.readFileSync(path.join(__dirname, "..", "lib", "delivery_receipt.js")).equals(fs.readFileSync(path.join(__dirname, "..", "services", "mcp-execution-target", "delivery_receipt.js"))), "delivery_receipt.js copies must stay byte-identical");
-
-    // The facilitator must receive a clean v2 PaymentRequirements: no `resource` field (which
-    // strict facilitators like CDP reject), and it must equal the payment payload's `accepted`.
-    const verifyBody = facilitator.calls.lastVerifyBody;
-    assert.ok(verifyBody && verifyBody.paymentRequirements, "facilitator must receive paymentRequirements");
-    assert.strictEqual(verifyBody.paymentRequirements.resource, undefined, "paymentRequirements must not carry a resource field (v2)");
-    assert.deepStrictEqual(verifyBody.paymentRequirements, verifyBody.paymentPayload.accepted, "paymentRequirements must equal paymentPayload.accepted");
-
-    // 7. Native routes must not be disabled by x402_facilitator: a native paid attempt
-    //    falls back to local_signed semantics, never payment_verification_mode_unsupported.
-    const nativeAttempt = await post(baseUrl, "/v1/commands/execute", execBody, {
-      "x-wallet-id": "wallet-not-registered",
-      "x-payment": "encoded",
-      "x-payment-signature": "sig"
-    });
-    assert.notStrictEqual(nativeAttempt.json && nativeAttempt.json.reason, "payment_verification_mode_unsupported", "native route must fall back to local_signed under x402_facilitator");
-
-    // 7b. CDP-style facilitator: a non-2xx verify carrying isValid:false is a verification
-    //     failure, not an unreachable transport error.
-    const cdpInvalid = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("cdp-invalid") });
-    assert.strictEqual(cdpInvalid.status, 402, "cdp-style 400 verify must still 402");
-    assert.strictEqual(cdpInvalid.json.reason, "payment_verification_failed", "cdp-style 400 must map to payment_verification_failed, not facilitator_unreachable");
-    assert.strictEqual(cdpInvalid.json.detail, "invalid_payload", "cdp-style verify detail must surface invalidReason");
-
-    // 7c. CDP-style settle failure: a non-2xx settle carrying success:false is a settlement failure.
-    const cdpSettleFail = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("cdp-settle-fail") });
-    assert.strictEqual(cdpSettleFail.status, 402, "cdp-style 400 settle must still 402");
-    assert.strictEqual(cdpSettleFail.json.reason, "payment_settlement_failed", "cdp-style 400 settle must map to payment_settlement_failed");
-
-    // 8. Self-serve credits top-up: unpaid -> 402 advertising accepts + credits_per_topup.
-    const topupUnpaid = await post(baseUrl, "/x402/credits/topup", { account_id: "acct_topup" });
-    assert.strictEqual(topupUnpaid.status, 402, "unpaid topup must 402");
-    assert.ok(Array.isArray(topupUnpaid.json.payment_required.accepts), "topup 402 must advertise accepts");
-    assert.strictEqual(typeof topupUnpaid.json.payment_required.credits_per_topup, "number", "topup 402 must state credits_per_topup");
-
-    // 9. Paid top-up -> 200, credits minted to the account, with a settlement receipt.
-    const topupPaid = await post(baseUrl, "/x402/credits/topup", { account_id: "acct_topup" }, { "payment-signature": paymentHeader("ok") });
-    assert.strictEqual(topupPaid.status, 200, "paid topup must 200");
-    assert.strictEqual(topupPaid.json.ok, true, "paid topup must be ok");
-    assert.strictEqual(typeof topupPaid.json.credit_grant, "object", "paid topup must return a credit grant");
-    const grantedUnits = Number(topupPaid.json.balance.available_units);
-    assert.ok(grantedUnits > 0, "paid topup must leave a positive credit balance");
-    assert.strictEqual(typeof topupPaid.headers.get("payment-response"), "string", "paid topup must carry a settlement receipt");
-
-    // 10. Replayed top-up (same payment nonce) is idempotent: no double-mint.
-    const topupReplay = await post(baseUrl, "/x402/credits/topup", { account_id: "acct_topup" }, { "payment-signature": paymentHeader("ok") });
-    assert.strictEqual(topupReplay.status, 200, "replayed topup must still 200");
-    assert.strictEqual(Number(topupReplay.json.balance.available_units), grantedUnits, "replayed topup must not mint credits twice");
-
-    console.log("xytara verify:x402-facilitator passed");
-  } finally {
-    await new Promise((resolve) => server.close(resolve));
-    await new Promise((resolve) => facilitator.server.close(resolve));
-    if (previous.mode === undefined) delete process.env.XYTARA_PAYMENT_VERIFICATION_MODE; else process.env.XYTARA_PAYMENT_VERIFICATION_MODE = previous.mode;
-    if (previous.accepts === undefined) delete process.env.XYTARA_X402_ACCEPTS_JSON; else process.env.XYTARA_X402_ACCEPTS_JSON = previous.accepts;
-    if (previous.facUrl === undefined) delete process.env.XYTARA_X402_FACILITATOR_URL; else process.env.XYTARA_X402_FACILITATOR_URL = previous.facUrl;
-  }
-}
-
-main().catch((error) => {
-  console.error(error && error.message ? error.message : error);
-  process.exitCode = 1;
-});
+"use strict";
+
+// Verifies the x402_facilitator payment mode end to end against a mock facilitator:
+//   - an unpaid x402 execute returns 402 and advertises the configured accepts
+//   - a well-formed payment is verified and settled, the command runs, and the
+//     response carries a PAYMENT-RESPONSE settlement receipt
+//   - malformed, mismatched, facilitator-rejected, and unsettled payments all 402
+//
+// No real network or chain is used; the mock facilitator stands in for x402.org.
+
+const assert = require("assert");
+const http = require("http");
+
+const ACCEPTS = [
+  {
+    scheme: "exact",
+    network: "eip155:84532",
+    asset: "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+    amount: "1000",
+    payTo: "0x7cd2E0Ed2721319B20FAac4109774d030833F84D",
+    extra: { name: "USDC", version: "2" },
+    maxTimeoutSeconds: 60
+  }
+];
+
+function startMockFacilitator() {
+  const calls = { verify: 0, settle: 0 };
+  const server = http.createServer((req, res) => {
+    const chunks = [];
+    req.on("data", (c) => chunks.push(c));
+    req.on("end", () => {
+      let body = {};
+      try { body = JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}"); } catch (_) { body = {}; }
+      const sig = body && body.paymentPayload && body.paymentPayload.payload ? String(body.paymentPayload.payload.signature || "") : "";
+      const reply = (payload, status) => {
+        const text = JSON.stringify(payload);
+        res.writeHead(status || 200, { "content-type": "application/json", "content-length": Buffer.byteLength(text) });
+        res.end(text);
+      };
+      if (req.method === "POST" && req.url === "/verify") {
+        calls.verify += 1;
+        calls.lastVerifyBody = body;
+        if (sig === "reject-me") return reply({ isValid: false, invalidReason: "invalid_signature" });
+        if (sig === "cdp-invalid") return reply({ isValid: false, invalidReason: "invalid_payload", invalidMessage: "contract call failed: execution reverted", payer: "0x1111111111111111111111111111111111111111" }, 400);
+        return reply({ isValid: true, payer: "0x1111111111111111111111111111111111111111" });
+      }
+      if (req.method === "POST" && req.url === "/settle") {
+        calls.settle += 1;
+        if (sig === "settle-fails") return reply({ success: false, errorReason: "insufficient_funds" });
+        if (sig === "cdp-settle-fail") return reply({ success: false, errorReason: "insufficient_funds" }, 400);
+        return reply({ success: true, transaction: "0xmocktx", network: "eip155:84532", payer: "0x1111111111111111111111111111111111111111" });
+      }
+      res.writeHead(404); res.end();
+    });
+  });
+  return new Promise((resolve) => server.listen(0, "127.0.0.1", () => resolve({ server, calls, port: server.address().port })));
+}
+
+function paymentHeader(signature, overrides = {}) {
+  const accepted = ACCEPTS[0];
+  return Buffer.from(JSON.stringify({
+    x402Version: 2,
+    accepted: { ...accepted, ...overrides.accepted },
+    payload: {
+      signature,
+      authorization: {
+        from: "0x1111111111111111111111111111111111111111",
+        to: accepted.payTo,
+        value: accepted.amount,
+        validAfter: "0",
+        validBefore: String(Math.floor(Date.now() / 1000) + 600),
+        nonce: `0x${"ab".repeat(32)}`
+      }
+    }
+  }), "utf8").toString("base64");
+}
+
+async function post(baseUrl, path, body, headers = {}) {
+  const res = await fetch(`${baseUrl}${path}`, {
+    method: "POST",
+    headers: { "content-type": "application/json", ...headers },
+    body: JSON.stringify(body)
+  });
+  let json = null;
+  try { json = await res.json(); } catch (_) { json = null; }
+  return { status: res.status, json, headers: res.headers };
+}
+
+async function main() {
+  const facilitator = await startMockFacilitator();
+  const previous = {
+    mode: process.env.XYTARA_PAYMENT_VERIFICATION_MODE,
+    accepts: process.env.XYTARA_X402_ACCEPTS_JSON,
+    facUrl: process.env.XYTARA_X402_FACILITATOR_URL
+  };
+  process.env.XYTARA_PAYMENT_VERIFICATION_MODE = "x402_facilitator";
+  process.env.XYTARA_X402_ACCEPTS_JSON = JSON.stringify(ACCEPTS);
+  process.env.XYTARA_X402_FACILITATOR_URL = `http://127.0.0.1:${facilitator.port}`;
+
+  delete require.cache[require.resolve("../server")];
+  const { createServer } = require("../server");
+  const server = createServer();
+  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+  const baseUrl = `http://127.0.0.1:${server.address().port}`;
+  const execBody = { account_id: "acct_x402", command: "x402 facilitator demo", task_ref: "trust.verify", body: { subject_id: "s-1" } };
+
+  try {
+    // 1. Unpaid -> 402 advertising accepts.
+    const unpaid = await post(baseUrl, "/x402/commands/execute", execBody);
+    assert.strictEqual(unpaid.status, 402, "unpaid x402 execute must return 402");
+    const required = unpaid.json && unpaid.json.payment_required;
+    assert.ok(required, "402 must carry payment_required");
+    assert.strictEqual(required.x402Version, 2, "challenge must be x402 v2");
+    assert.ok(Array.isArray(required.accepts) && required.accepts.length === 1, "challenge must advertise accepts");
+    assert.strictEqual(required.accepts[0].network, "eip155:84532", "advertised network mismatch");
+    assert.strictEqual(typeof unpaid.headers.get("payment-required"), "string", "PAYMENT-REQUIRED header missing");
+
+    // 2. Bogus header -> 402 payment_signature_invalid.
+    const bogus = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": "not-a-payment" });
+    assert.strictEqual(bogus.status, 402, "bogus payment header must 402");
+    assert.strictEqual(bogus.json.reason, "payment_signature_invalid", "bogus reason mismatch");
+
+    // 3. Mismatched requirements -> 402 before the facilitator.
+    const verifyBefore = facilitator.calls.verify;
+    const mismatch = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("ok", { accepted: { amount: "9" } }) });
+    assert.strictEqual(mismatch.status, 402, "mismatched requirements must 402");
+    assert.strictEqual(mismatch.json.reason, "payment_requirements_mismatch", "mismatch reason");
+    assert.strictEqual(facilitator.calls.verify, verifyBefore, "facilitator must not be called on a requirements mismatch");
+
+    // 4. Facilitator rejects -> 402 payment_verification_failed.
+    const rejected = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("reject-me") });
+    assert.strictEqual(rejected.status, 402, "facilitator-rejected payment must 402");
+    assert.strictEqual(rejected.json.reason, "payment_verification_failed", "rejection reason");
+    assert.strictEqual(rejected.json.detail, "invalid_signature", "rejection detail");
+
+    // 5. Settlement fails -> 402, no tool output.
+    const settleFails = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("settle-fails") });
+    assert.strictEqual(settleFails.status, 402, "failed settlement must 402");
+    assert.strictEqual(settleFails.json.reason, "payment_settlement_failed", "settlement failure reason");
+
+    // 6. Verified + settled -> 200 with a result and a PAYMENT-RESPONSE receipt.
+    // (Delivery-receipt signing keys for this run only: Ed25519 + ML-DSA-65 hybrid.)
+    const crypto = require("crypto");
+    const receiptEd = crypto.generateKeyPairSync("ed25519");
+    const receiptMl = crypto.generateKeyPairSync("ml-dsa-65");
+    process.env.XYTARA_DELIVERY_RECEIPT_ED25519_KEY = receiptEd.privateKey.export({ type: "pkcs8", format: "der" }).toString("base64");
+    process.env.XYTARA_DELIVERY_RECEIPT_MLDSA65_KEY = receiptMl.privateKey.export({ type: "pkcs8", format: "der" }).toString("base64");
+    const settleBefore = facilitator.calls.settle;
+    const paid = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("ok") });
+    assert.strictEqual(paid.status, 200, "verified+settled payment must 200");
+    assert.strictEqual(typeof paid.json.transaction.transaction_id, "string", "paid result missing transaction");
+    assert.strictEqual(paid.json.transaction.status, "completed", "paid transaction must be completed");
+    assert.strictEqual(paid.json.transaction.payment.verification_mode, "x402_facilitator", "verification mode not recorded");
+    assert.strictEqual(facilitator.calls.settle, settleBefore + 1, "facilitator settle must be called once");
+    const receiptHeader = paid.headers.get("payment-response");
+    assert.strictEqual(typeof receiptHeader, "string", "PAYMENT-RESPONSE header missing on a settled 200");
+    const receipt = JSON.parse(Buffer.from(receiptHeader, "base64").toString("utf8"));
+    assert.strictEqual(receipt.success, true, "settlement receipt must report success");
+    assert.strictEqual(receipt.transaction, "0xmocktx", "settlement receipt transaction mismatch");
+
+    // 6a. The runtime records the REAL x402 settlement (not the quote's default placeholder rail).
+    const recorded = paid.json.receipt.settlement;
+    assert.strictEqual(recorded.rail, "x402", "x402-paid call records the x402 rail");
+    assert.strictEqual(recorded.mode, "x402_facilitator", "x402 settlement mode recorded");
+    assert.strictEqual(recorded.txid, "0xmocktx", "settlement record carries the settled tx");
+    assert.strictEqual(recorded.network, "eip155:84532", "settlement record carries the network");
+    assert.strictEqual(recorded.pay_to, ACCEPTS[0].payTo, "settlement record carries pay_to");
+    assert.strictEqual(recorded.status, "settled", "settlement record status");
+    assert.strictEqual(recorded.live, undefined, "no placeholder BSV settlement record for an x402 call");
+    assert.strictEqual(paid.json.receipt.treasury.rail, "x402", "treasury record on the x402 rail");
+    assert.strictEqual(paid.json.receipt.default_path.settlement_mode, "x402_facilitator", "default path reflects x402");
+
+    // 6b. Signed delivery receipt: binds the settlement, verifies against the published keys,
+    //     is retrievable by id, and rejects tampering and signature stripping.
+    const delivery = paid.json.delivery_receipt;
+    assert.ok(delivery, "paid result carries a delivery receipt");
+    assert.strictEqual(delivery.v, "naxytra-delivery-receipt/1", "delivery receipt version");
+    assert.deepStrictEqual(delivery.signing.suite, ["EdDSA", "ML-DSA-65"], "hybrid suite");
+    assert.strictEqual(delivery.payment.protocol, "x402", "receipt payment protocol");
+    assert.strictEqual(delivery.payment.settlement_tx, "0xmocktx", "receipt binds the settlement tx");
+    assert.strictEqual(delivery.payment.pay_to, ACCEPTS[0].payTo, "receipt carries pay_to");
+    assert.strictEqual(delivery.payment.amount, ACCEPTS[0].amount, "receipt carries the settled amount");
+    assert.strictEqual(delivery.call.quote_id, paid.json.transaction.quote_id, "receipt binds the quote");
+    assert.strictEqual(delivery.account_id, undefined, "receipt carries no account id");
+    const receiptLib = require("../lib/delivery_receipt");
+    assert.strictEqual(delivery.delivery.request_sha256, receiptLib.hashCanonical(execBody.body), "request hash recomputes from the request body");
+    const keysRes = await fetch(`${baseUrl}/.well-known/delivery-receipt-keys`);
+    const keys = await keysRes.json();
+    assert.strictEqual(keys.signing_state, "signing", "keys endpoint reports signing");
+    assert.strictEqual(receiptLib.verifyDeliveryReceipt(delivery, keys.keys).valid, true, "receipt verifies against the published keys");
+    const verifyRes = await post(baseUrl, "/v1/delivery-receipts/verify", { receipt: delivery });
+    assert.strictEqual(verifyRes.json.valid, true, "verify endpoint accepts the genuine receipt");
+    assert.strictEqual(verifyRes.json.issuer_matches, true, "verify endpoint matches the issuer");
+    const tamperedDelivery = JSON.parse(JSON.stringify(delivery));
+    tamperedDelivery.payment.amount = "1";
+    assert.strictEqual((await post(baseUrl, "/v1/delivery-receipts/verify", { receipt: tamperedDelivery })).json.valid, false, "tampered receipt rejected");
+    const strippedDelivery = JSON.parse(JSON.stringify(delivery));
+    strippedDelivery.sig.signatures = strippedDelivery.sig.signatures.filter((entry) => entry.alg !== "ML-DSA-65");
+    assert.strictEqual(receiptLib.verifyDeliveryReceipt(strippedDelivery, keys.keys).valid, false, "stripping the ML-DSA leg (downgrade) rejected");
+    const fetched = await fetch(`${baseUrl}/v1/delivery-receipts/${encodeURIComponent(delivery.receipt_id)}`);
+    assert.strictEqual(fetched.status, 200, "receipt retrievable by id");
+    assert.deepStrictEqual((await fetched.json()).delivery_receipt, delivery, "retrieved receipt is identical");
+    assert.strictEqual((await fetch(`${baseUrl}/v1/delivery-receipts/drcpt_nope`)).status, 404, "unknown receipt 404");
+    // The xoonya verifier accepts the same signatures (kid == xoonya key ref). Checked when the
+    // sibling xoonya checkout is present (workspace); skipped in a standalone xytara checkout.
+    let verifyExternalProofSignature = null;
+    try { ({ verifyExternalProofSignature } = require("../../xoonya/proof_sdk")); } catch (_) { verifyExternalProofSignature = null; }
+    const { sig: _omit, ...unsignedDelivery } = delivery;
+    for (const entry of verifyExternalProofSignature ? delivery.sig.signatures : []) {
+      const key = keys.keys.find((item) => item.kid === entry.kid);
+      const viaXoonya = verifyExternalProofSignature({ material: receiptLib.canonicalize(unsignedDelivery), signature: entry.value, algorithm: entry.alg, public_key: key.public_key_spki_der_base64, expected_key_ref: entry.kid });
+      assert.strictEqual(viaXoonya.signature_valid && viaXoonya.trust_anchored, true, `xoonya verifies + anchors the ${entry.alg} leg`);
+    }
+    delete process.env.XYTARA_DELIVERY_RECEIPT_ED25519_KEY;
+    delete process.env.XYTARA_DELIVERY_RECEIPT_MLDSA65_KEY;
+    // Without keys the receipt is still issued but honestly unsigned (never a fake signature).
+    const unsignedPaid = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("ok") });
+    assert.strictEqual(unsignedPaid.json.delivery_receipt.sig.state, "unsigned_signing_key_not_configured", "no keys -> honestly unsigned");
+    assert.strictEqual(receiptLib.verifyDeliveryReceipt(unsignedPaid.json.delivery_receipt, keys.keys).valid, false, "unsigned receipt never verifies");
+    // The shared module is byte-identical in the runtime and the MCP executor.
+    const fs = require("fs");
+    const path = require("path");
+    assert.ok(fs.readFileSync(path.join(__dirname, "..", "lib", "delivery_receipt.js")).equals(fs.readFileSync(path.join(__dirname, "..", "services", "mcp-execution-target", "delivery_receipt.js"))), "delivery_receipt.js copies must stay byte-identical");
+
+    // The facilitator must receive a clean v2 PaymentRequirements: no `resource` field (which
+    // strict facilitators like CDP reject), and it must equal the payment payload's `accepted`.
+    const verifyBody = facilitator.calls.lastVerifyBody;
+    assert.ok(verifyBody && verifyBody.paymentRequirements, "facilitator must receive paymentRequirements");
+    assert.strictEqual(verifyBody.paymentRequirements.resource, undefined, "paymentRequirements must not carry a resource field (v2)");
+    assert.deepStrictEqual(verifyBody.paymentRequirements, verifyBody.paymentPayload.accepted, "paymentRequirements must equal paymentPayload.accepted");
+
+    // 7. Native routes must not be disabled by x402_facilitator: a native paid attempt
+    //    falls back to local_signed semantics, never payment_verification_mode_unsupported.
+    const nativeAttempt = await post(baseUrl, "/v1/commands/execute", execBody, {
+      "x-wallet-id": "wallet-not-registered",
+      "x-payment": "encoded",
+      "x-payment-signature": "sig"
+    });
+    assert.notStrictEqual(nativeAttempt.json && nativeAttempt.json.reason, "payment_verification_mode_unsupported", "native route must fall back to local_signed under x402_facilitator");
+
+    // 7b. CDP-style facilitator: a non-2xx verify carrying isValid:false is a verification
+    //     failure, not an unreachable transport error.
+    const cdpInvalid = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("cdp-invalid") });
+    assert.strictEqual(cdpInvalid.status, 402, "cdp-style 400 verify must still 402");
+    assert.strictEqual(cdpInvalid.json.reason, "payment_verification_failed", "cdp-style 400 must map to payment_verification_failed, not facilitator_unreachable");
+    assert.strictEqual(cdpInvalid.json.detail, "invalid_payload", "cdp-style verify detail must surface invalidReason");
+
+    // 7c. CDP-style settle failure: a non-2xx settle carrying success:false is a settlement failure.
+    const cdpSettleFail = await post(baseUrl, "/x402/commands/execute", execBody, { "payment-signature": paymentHeader("cdp-settle-fail") });
+    assert.strictEqual(cdpSettleFail.status, 402, "cdp-style 400 settle must still 402");
+    assert.strictEqual(cdpSettleFail.json.reason, "payment_settlement_failed", "cdp-style 400 settle must map to payment_settlement_failed");
+
+    // 8. Self-serve credits top-up: unpaid -> 402 advertising accepts + credits_per_topup.
+    const topupUnpaid = await post(baseUrl, "/x402/credits/topup", { account_id: "acct_topup" });
+    assert.strictEqual(topupUnpaid.status, 402, "unpaid topup must 402");
+    assert.ok(Array.isArray(topupUnpaid.json.payment_required.accepts), "topup 402 must advertise accepts");
+    assert.strictEqual(typeof topupUnpaid.json.payment_required.credits_per_topup, "number", "topup 402 must state credits_per_topup");
+
+    // 9. Paid top-up -> 200, credits minted to the account, with a settlement receipt.
+    const topupPaid = await post(baseUrl, "/x402/credits/topup", { account_id: "acct_topup" }, { "payment-signature": paymentHeader("ok") });
+    assert.strictEqual(topupPaid.status, 200, "paid topup must 200");
+    assert.strictEqual(topupPaid.json.ok, true, "paid topup must be ok");
+    assert.strictEqual(typeof topupPaid.json.credit_grant, "object", "paid topup must return a credit grant");
+    const grantedUnits = Number(topupPaid.json.balance.available_units);
+    assert.ok(grantedUnits > 0, "paid topup must leave a positive credit balance");
+    assert.strictEqual(typeof topupPaid.headers.get("payment-response"), "string", "paid topup must carry a settlement receipt");
+
+    // 10. Replayed top-up (same payment nonce) is idempotent: no double-mint.
+    const topupReplay = await post(baseUrl, "/x402/credits/topup", { account_id: "acct_topup" }, { "payment-signature": paymentHeader("ok") });
+    assert.strictEqual(topupReplay.status, 200, "replayed topup must still 200");
+    assert.strictEqual(Number(topupReplay.json.balance.available_units), grantedUnits, "replayed topup must not mint credits twice");
+
+    console.log("xytara verify:x402-facilitator passed");
+  } finally {
+    await new Promise((resolve) => server.close(resolve));
+    await new Promise((resolve) => facilitator.server.close(resolve));
+    if (previous.mode === undefined) delete process.env.XYTARA_PAYMENT_VERIFICATION_MODE; else process.env.XYTARA_PAYMENT_VERIFICATION_MODE = previous.mode;
+    if (previous.accepts === undefined) delete process.env.XYTARA_X402_ACCEPTS_JSON; else process.env.XYTARA_X402_ACCEPTS_JSON = previous.accepts;
+    if (previous.facUrl === undefined) delete process.env.XYTARA_X402_FACILITATOR_URL; else process.env.XYTARA_X402_FACILITATOR_URL = previous.facUrl;
+  }
+}
+
+main().catch((error) => {
+  console.error(error && error.message ? error.message : error);
+  process.exitCode = 1;
+});