xytara 3.1.13 → 3.1.15

package/scripts/verify_production_readiness.js

@@ -1,268 +1,268 @@
-"use strict";
-
-const assert = require("assert");
-const fs = require("fs");
-const path = require("path");
-const { execFileSync } = require("child_process");
-
-function firstEnv(...names) {
-  for (const name of names) {
-    const value = process.env[name];
-    if (typeof value === "string" && value.trim().length > 0) {
-      return value.trim();
-    }
-  }
-  return "";
-}
-
-function ensureReleaseCandidate() {
-  const releaseOutput = execFileSync(process.execPath, [
-    path.resolve(__dirname, "..", "bin", "xytara-release.js"),
-    "--candidate",
-    "--summary"
-  ], {
-    cwd: path.resolve(__dirname, ".."),
-    encoding: "utf8"
-  });
-  const releaseCandidate = JSON.parse(releaseOutput);
-  assert.strictEqual(releaseCandidate.product, "xytara", "release candidate product mismatch");
-}
-
-function ensurePersistenceConfig() {
-  const stateFile = process.env.XYTARA_STATE_FILE;
-  const supabaseUrl = process.env.XYTARA_SUPABASE_URL;
-  const supabaseServiceRoleKey = process.env.XYTARA_SUPABASE_SERVICE_ROLE_KEY;
-
-  const fileConfigured = typeof stateFile === "string" && stateFile.trim().length > 0;
-  const supabaseConfigured =
-    typeof supabaseUrl === "string" &&
-    supabaseUrl.trim().length > 0 &&
-    typeof supabaseServiceRoleKey === "string" &&
-    supabaseServiceRoleKey.trim().length > 0;
-
-  assert.strictEqual(
-    fileConfigured || supabaseConfigured,
-    true,
-    "configure XYTARA_STATE_FILE on persistent disk or XYTARA_SUPABASE_URL + XYTARA_SUPABASE_SERVICE_ROLE_KEY before treating xytara as production-ready"
-  );
-
-  if (fileConfigured) {
-    const resolvedPath = path.resolve(stateFile);
-    const parentDirectory = path.dirname(resolvedPath);
-    assert.strictEqual(
-      fs.existsSync(parentDirectory),
-      true,
-      `XYTARA_STATE_FILE parent directory does not exist: ${parentDirectory}`
-    );
-    fs.accessSync(parentDirectory, fs.constants.W_OK);
-  }
-}
-
-function ensureProductionSecurityConfig() {
-  const verificationMode = String(process.env.XYTARA_PAYMENT_VERIFICATION_MODE || "").trim() || "presence";
-  assert.notStrictEqual(
-    verificationMode,
-    "presence",
-    "set XYTARA_PAYMENT_VERIFICATION_MODE to local_signed or stronger before treating xytara as production-ready"
-  );
-
-  if (verificationMode === "local_signed") {
-    const walletRegistryJson = String(process.env.XYTARA_WALLET_REGISTRY_JSON || "").trim();
-    assert.strictEqual(walletRegistryJson.length > 0, true, "configure XYTARA_WALLET_REGISTRY_JSON before using local_signed payment verification");
-    const parsed = JSON.parse(walletRegistryJson);
-    assert.strictEqual(Array.isArray(parsed), true, "XYTARA_WALLET_REGISTRY_JSON must be a JSON array");
-    assert.strictEqual(parsed.length > 0, true, "register at least one enabled wallet in XYTARA_WALLET_REGISTRY_JSON before treating xytara as production-ready");
-  }
-
-  assert.strictEqual(
-    String(process.env.XYTARA_CREDIT_BRIDGE_BEARER_TOKEN || "").trim().length > 0,
-    true,
-    "configure XYTARA_CREDIT_BRIDGE_BEARER_TOKEN before treating xytara as production-ready"
-  );
-  assert.strictEqual(
-    String(process.env.XYTARA_ACCOUNT_AUTH_BEARER_TOKEN || "").trim().length > 0,
-    true,
-    "configure XYTARA_ACCOUNT_AUTH_BEARER_TOKEN before treating xytara as production-ready"
-  );
-}
-
-function ensureTreasuryConfig() {
-  const treasuryPath = String(process.env.XYTARA_TREASURY_DESTINATIONS_PATH || "").trim();
-  assert.strictEqual(
-    treasuryPath.length > 0,
-    true,
-    "configure XYTARA_TREASURY_DESTINATIONS_PATH before treating xytara as production-ready"
-  );
-  const resolvedPath = path.resolve(treasuryPath);
-  assert.strictEqual(fs.existsSync(resolvedPath), true, `treasury destinations file does not exist: ${resolvedPath}`);
-  const parsed = JSON.parse(fs.readFileSync(resolvedPath, "utf8"));
-  const configuredRails = Object.values(parsed || {}).filter((entry) =>
-    entry
-    && typeof entry === "object"
-    && typeof entry.external_ref === "string"
-    && entry.external_ref.trim().length > 0
-  );
-  assert.strictEqual(
-    configuredRails.length > 0,
-    true,
-    "configure at least one treasury destination external_ref before treating xytara as production-ready"
-  );
-}
-
-function ensureCallbackDeliveryConfig() {
-  const callbackDeliveryEnabled = String(process.env.XYTARA_CALLBACK_DELIVERY_ENABLED || "true").trim().toLowerCase() !== "false";
-  if (!callbackDeliveryEnabled) return;
-  assert.strictEqual(
-    String(process.env.XYTARA_CALLBACK_SIGNING_SECRET || "").trim().length > 0,
-    true,
-    "configure XYTARA_CALLBACK_SIGNING_SECRET before treating xytara as production-ready"
-  );
-}
-
-function ensureHostedCheckoutIngressSecurity() {
-  const verificationRequired = String(
-    process.env.XYTARA_CHECKOUT_WEBHOOK_VERIFICATION_REQUIRED
-    || process.env.XYTARA_HOSTED_CHECKOUT_ENABLED
-    || "true"
-  ).trim().toLowerCase();
-  if (["false", "0", "no", "off"].includes(verificationRequired)) {
-    return;
-  }
-  assert.strictEqual(
-    String(process.env.XYTARA_CHECKOUT_WEBHOOK_SECRET || process.env.XYTARA_HOSTED_CHECKOUT_WEBHOOK_SECRET || "").trim().length > 0,
-    true,
-    "configure XYTARA_CHECKOUT_WEBHOOK_SECRET before treating hosted-checkout ingress as production-ready"
-  );
-}
-
-function ensureL402Config() {
-  const l402Enabled = String(process.env.XYTARA_L402_ENABLED || "false").trim().toLowerCase() === "true";
-  if (!l402Enabled) return;
-  assert.strictEqual(
-    String(process.env.XYTARA_L402_SHARED_SECRET || "").trim().length > 0,
-    true,
-    "configure XYTARA_L402_SHARED_SECRET before treating the L402 ingress as production-ready"
-  );
-}
-
-function ensureBoltConfig() {
-  const boltEnabled = String(process.env.XYTARA_BOLT_ENABLED || "false").trim().toLowerCase() === "true";
-  if (!boltEnabled) return;
-  assert.strictEqual(
-    String(process.env.XYTARA_BOLT_SHARED_SECRET || "").trim().length > 0,
-    true,
-    "configure XYTARA_BOLT_SHARED_SECRET before treating the BOLT ingress as production-ready"
-  );
-}
-
-function ensureMppConfig() {
-  const mppEnabled = String(process.env.XYTARA_MPP_ENABLED || "false").trim().toLowerCase() === "true";
-  if (!mppEnabled) return;
-  assert.strictEqual(
-    String(process.env.XYTARA_MPP_SHARED_SECRET || "").trim().length > 0,
-    true,
-    "configure XYTARA_MPP_SHARED_SECRET before treating the MPP ingress as production-ready"
-  );
-}
-
-function ensureRateLimitConfig() {
-  const rateLimitEnabled = String(process.env.XYTARA_RATE_LIMIT_ENABLED || "true").trim().toLowerCase() !== "false";
-  assert.strictEqual(
-    rateLimitEnabled,
-    true,
-    "keep XYTARA_RATE_LIMIT_ENABLED=true before treating xytara as production-ready unless you have an equivalent upstream control"
-  );
-  const windowMs = Number(process.env.XYTARA_RATE_LIMIT_WINDOW_MS || 0);
-  const maxRequests = Number(process.env.XYTARA_RATE_LIMIT_MAX_REQUESTS || 0);
-  assert.strictEqual(Number.isFinite(windowMs) && windowMs > 0, true, "configure XYTARA_RATE_LIMIT_WINDOW_MS to a positive value");
-  assert.strictEqual(Number.isFinite(maxRequests) && maxRequests > 0, true, "configure XYTARA_RATE_LIMIT_MAX_REQUESTS to a positive value");
-}
-
-function ensureExecutionTargetConfig() {
-  const raw = String(process.env.XYTARA_EXECUTION_TARGETS_JSON || "").trim();
-  const requireTargets = String(process.env.XYTARA_EXTERNAL_EXECUTION_REQUIRED || "false").trim().toLowerCase() === "true";
-  if (!raw) {
-    assert.strictEqual(
-      requireTargets,
-      false,
-      "configure XYTARA_EXECUTION_TARGETS_JSON before treating xytara as production-ready when XYTARA_EXTERNAL_EXECUTION_REQUIRED=true"
-    );
-    return;
-  }
-
-  const parsed = JSON.parse(raw);
-  assert.strictEqual(Array.isArray(parsed), true, "XYTARA_EXECUTION_TARGETS_JSON must be a JSON array");
-  assert.strictEqual(parsed.length > 0, true, "configure at least one execution target in XYTARA_EXECUTION_TARGETS_JSON");
-  parsed.forEach((entry, index) => {
-    assert.strictEqual(
-      entry && typeof entry === "object" && !Array.isArray(entry),
-      true,
-      `execution target ${index + 1} must be an object`
-    );
-    assert.strictEqual(
-      typeof entry.endpoint_url === "string" && entry.endpoint_url.trim().length > 0,
-      true,
-      `execution target ${index + 1} must include endpoint_url`
-    );
-    assert.strictEqual(
-      Boolean(
-        (typeof entry.task_ref === "string" && entry.task_ref.trim().length > 0)
-        || (typeof entry.tool_name === "string" && entry.tool_name.trim().length > 0)
-        || (typeof entry.integration_id === "string" && entry.integration_id.trim().length > 0)
-      ),
-      true,
-      `execution target ${index + 1} must match at least one of task_ref, tool_name, or integration_id`
-    );
-  });
-}
-
-function ensureNativeSettlementConfig() {
-  const runtimeMode = String(
-    firstEnv("XYTARA_BSV_SETTLEMENT_RUNTIME_MODE", "XYTARA_BSV_TERANODE_SETTLEMENT_RUNTIME_MODE") || "mock"
-  ).trim().toLowerCase() || "mock";
-  assert.notStrictEqual(
-    runtimeMode,
-    "mock",
-    "configure XYTARA_BSV_SETTLEMENT_RUNTIME_MODE or XYTARA_BSV_TERANODE_SETTLEMENT_RUNTIME_MODE to observe, arc, or another live runtime mode before treating xytara as production-ready"
-  );
-  assert.strictEqual(
-    firstEnv(
-      "XYTARA_BSV_MERCHANT_ADDRESS",
-      "XYTARA_BSV_TERANODE_MERCHANT_ADDRESS",
-      "XYTARA_BSV_MERCHANT_PAYMAIL",
-      "XYTARA_BSV_TERANODE_MERCHANT_PAYMAIL"
-    ).length > 0,
-    true,
-    "configure XYTARA_BSV_MERCHANT_ADDRESS / XYTARA_BSV_MERCHANT_PAYMAIL or the legacy XYTARA_BSV_TERANODE_* merchant vars before treating xytara as production-ready"
-  );
-  if (runtimeMode === "arc") {
-    assert.strictEqual(
-      firstEnv("XYTARA_BSV_ARC_RPC_URL", "XYTARA_BSV_ARC_URL", "XYTARA_BSV_TERANODE_RPC_URL").length > 0,
-      true,
-      "configure XYTARA_BSV_ARC_RPC_URL, XYTARA_BSV_ARC_URL, or XYTARA_BSV_TERANODE_RPC_URL before treating arc settlement mode as production-ready"
-    );
-    assert.strictEqual(
-      firstEnv("XYTARA_BSV_ARC_RPC_API_KEY", "XYTARA_BSV_ARC_API_KEY", "XYTARA_BSV_TERANODE_RPC_API_KEY").length > 0,
-      true,
-      "configure XYTARA_BSV_ARC_RPC_API_KEY, XYTARA_BSV_ARC_API_KEY, or XYTARA_BSV_TERANODE_RPC_API_KEY before treating arc settlement mode as production-ready"
-    );
-  }
-}
-
-function main() {
-  ensureReleaseCandidate();
-  ensurePersistenceConfig();
-  ensureProductionSecurityConfig();
-  ensureTreasuryConfig();
-  ensureCallbackDeliveryConfig();
-  ensureHostedCheckoutIngressSecurity();
-  ensureL402Config();
-  ensureBoltConfig();
-  ensureMppConfig();
-  ensureRateLimitConfig();
-  ensureExecutionTargetConfig();
-  ensureNativeSettlementConfig();
-  console.log("xytara verify:production-readiness passed");
-}
-
-main();
+"use strict";
+
+const assert = require("assert");
+const fs = require("fs");
+const path = require("path");
+const { execFileSync } = require("child_process");
+
+function firstEnv(...names) {
+  for (const name of names) {
+    const value = process.env[name];
+    if (typeof value === "string" && value.trim().length > 0) {
+      return value.trim();
+    }
+  }
+  return "";
+}
+
+function ensureReleaseCandidate() {
+  const releaseOutput = execFileSync(process.execPath, [
+    path.resolve(__dirname, "..", "bin", "xytara-release.js"),
+    "--candidate",
+    "--summary"
+  ], {
+    cwd: path.resolve(__dirname, ".."),
+    encoding: "utf8"
+  });
+  const releaseCandidate = JSON.parse(releaseOutput);
+  assert.strictEqual(releaseCandidate.product, "xytara", "release candidate product mismatch");
+}
+
+function ensurePersistenceConfig() {
+  const stateFile = process.env.XYTARA_STATE_FILE;
+  const supabaseUrl = process.env.XYTARA_SUPABASE_URL;
+  const supabaseServiceRoleKey = process.env.XYTARA_SUPABASE_SERVICE_ROLE_KEY;
+
+  const fileConfigured = typeof stateFile === "string" && stateFile.trim().length > 0;
+  const supabaseConfigured =
+    typeof supabaseUrl === "string" &&
+    supabaseUrl.trim().length > 0 &&
+    typeof supabaseServiceRoleKey === "string" &&
+    supabaseServiceRoleKey.trim().length > 0;
+
+  assert.strictEqual(
+    fileConfigured || supabaseConfigured,
+    true,
+    "configure XYTARA_STATE_FILE on persistent disk or XYTARA_SUPABASE_URL + XYTARA_SUPABASE_SERVICE_ROLE_KEY before treating xytara as production-ready"
+  );
+
+  if (fileConfigured) {
+    const resolvedPath = path.resolve(stateFile);
+    const parentDirectory = path.dirname(resolvedPath);
+    assert.strictEqual(
+      fs.existsSync(parentDirectory),
+      true,
+      `XYTARA_STATE_FILE parent directory does not exist: ${parentDirectory}`
+    );
+    fs.accessSync(parentDirectory, fs.constants.W_OK);
+  }
+}
+
+function ensureProductionSecurityConfig() {
+  const verificationMode = String(process.env.XYTARA_PAYMENT_VERIFICATION_MODE || "").trim() || "presence";
+  assert.notStrictEqual(
+    verificationMode,
+    "presence",
+    "set XYTARA_PAYMENT_VERIFICATION_MODE to local_signed or stronger before treating xytara as production-ready"
+  );
+
+  if (verificationMode === "local_signed") {
+    const walletRegistryJson = String(process.env.XYTARA_WALLET_REGISTRY_JSON || "").trim();
+    assert.strictEqual(walletRegistryJson.length > 0, true, "configure XYTARA_WALLET_REGISTRY_JSON before using local_signed payment verification");
+    const parsed = JSON.parse(walletRegistryJson);
+    assert.strictEqual(Array.isArray(parsed), true, "XYTARA_WALLET_REGISTRY_JSON must be a JSON array");
+    assert.strictEqual(parsed.length > 0, true, "register at least one enabled wallet in XYTARA_WALLET_REGISTRY_JSON before treating xytara as production-ready");
+  }
+
+  assert.strictEqual(
+    String(process.env.XYTARA_CREDIT_BRIDGE_BEARER_TOKEN || "").trim().length > 0,
+    true,
+    "configure XYTARA_CREDIT_BRIDGE_BEARER_TOKEN before treating xytara as production-ready"
+  );
+  assert.strictEqual(
+    String(process.env.XYTARA_ACCOUNT_AUTH_BEARER_TOKEN || "").trim().length > 0,
+    true,
+    "configure XYTARA_ACCOUNT_AUTH_BEARER_TOKEN before treating xytara as production-ready"
+  );
+}
+
+function ensureTreasuryConfig() {
+  const treasuryPath = String(process.env.XYTARA_TREASURY_DESTINATIONS_PATH || "").trim();
+  assert.strictEqual(
+    treasuryPath.length > 0,
+    true,
+    "configure XYTARA_TREASURY_DESTINATIONS_PATH before treating xytara as production-ready"
+  );
+  const resolvedPath = path.resolve(treasuryPath);
+  assert.strictEqual(fs.existsSync(resolvedPath), true, `treasury destinations file does not exist: ${resolvedPath}`);
+  const parsed = JSON.parse(fs.readFileSync(resolvedPath, "utf8"));
+  const configuredRails = Object.values(parsed || {}).filter((entry) =>
+    entry
+    && typeof entry === "object"
+    && typeof entry.external_ref === "string"
+    && entry.external_ref.trim().length > 0
+  );
+  assert.strictEqual(
+    configuredRails.length > 0,
+    true,
+    "configure at least one treasury destination external_ref before treating xytara as production-ready"
+  );
+}
+
+function ensureCallbackDeliveryConfig() {
+  const callbackDeliveryEnabled = String(process.env.XYTARA_CALLBACK_DELIVERY_ENABLED || "true").trim().toLowerCase() !== "false";
+  if (!callbackDeliveryEnabled) return;
+  assert.strictEqual(
+    String(process.env.XYTARA_CALLBACK_SIGNING_SECRET || "").trim().length > 0,
+    true,
+    "configure XYTARA_CALLBACK_SIGNING_SECRET before treating xytara as production-ready"
+  );
+}
+
+function ensureHostedCheckoutIngressSecurity() {
+  const verificationRequired = String(
+    process.env.XYTARA_CHECKOUT_WEBHOOK_VERIFICATION_REQUIRED
+    || process.env.XYTARA_HOSTED_CHECKOUT_ENABLED
+    || "true"
+  ).trim().toLowerCase();
+  if (["false", "0", "no", "off"].includes(verificationRequired)) {
+    return;
+  }
+  assert.strictEqual(
+    String(process.env.XYTARA_CHECKOUT_WEBHOOK_SECRET || process.env.XYTARA_HOSTED_CHECKOUT_WEBHOOK_SECRET || "").trim().length > 0,
+    true,
+    "configure XYTARA_CHECKOUT_WEBHOOK_SECRET before treating hosted-checkout ingress as production-ready"
+  );
+}
+
+function ensureL402Config() {
+  const l402Enabled = String(process.env.XYTARA_L402_ENABLED || "false").trim().toLowerCase() === "true";
+  if (!l402Enabled) return;
+  assert.strictEqual(
+    String(process.env.XYTARA_L402_SHARED_SECRET || "").trim().length > 0,
+    true,
+    "configure XYTARA_L402_SHARED_SECRET before treating the L402 ingress as production-ready"
+  );
+}
+
+function ensureBoltConfig() {
+  const boltEnabled = String(process.env.XYTARA_BOLT_ENABLED || "false").trim().toLowerCase() === "true";
+  if (!boltEnabled) return;
+  assert.strictEqual(
+    String(process.env.XYTARA_BOLT_SHARED_SECRET || "").trim().length > 0,
+    true,
+    "configure XYTARA_BOLT_SHARED_SECRET before treating the BOLT ingress as production-ready"
+  );
+}
+
+function ensureMppConfig() {
+  const mppEnabled = String(process.env.XYTARA_MPP_ENABLED || "false").trim().toLowerCase() === "true";
+  if (!mppEnabled) return;
+  assert.strictEqual(
+    String(process.env.XYTARA_MPP_SHARED_SECRET || "").trim().length > 0,
+    true,
+    "configure XYTARA_MPP_SHARED_SECRET before treating the MPP ingress as production-ready"
+  );
+}
+
+function ensureRateLimitConfig() {
+  const rateLimitEnabled = String(process.env.XYTARA_RATE_LIMIT_ENABLED || "true").trim().toLowerCase() !== "false";
+  assert.strictEqual(
+    rateLimitEnabled,
+    true,
+    "keep XYTARA_RATE_LIMIT_ENABLED=true before treating xytara as production-ready unless you have an equivalent upstream control"
+  );
+  const windowMs = Number(process.env.XYTARA_RATE_LIMIT_WINDOW_MS || 0);
+  const maxRequests = Number(process.env.XYTARA_RATE_LIMIT_MAX_REQUESTS || 0);
+  assert.strictEqual(Number.isFinite(windowMs) && windowMs > 0, true, "configure XYTARA_RATE_LIMIT_WINDOW_MS to a positive value");
+  assert.strictEqual(Number.isFinite(maxRequests) && maxRequests > 0, true, "configure XYTARA_RATE_LIMIT_MAX_REQUESTS to a positive value");
+}
+
+function ensureExecutionTargetConfig() {
+  const raw = String(process.env.XYTARA_EXECUTION_TARGETS_JSON || "").trim();
+  const requireTargets = String(process.env.XYTARA_EXTERNAL_EXECUTION_REQUIRED || "false").trim().toLowerCase() === "true";
+  if (!raw) {
+    assert.strictEqual(
+      requireTargets,
+      false,
+      "configure XYTARA_EXECUTION_TARGETS_JSON before treating xytara as production-ready when XYTARA_EXTERNAL_EXECUTION_REQUIRED=true"
+    );
+    return;
+  }
+
+  const parsed = JSON.parse(raw);
+  assert.strictEqual(Array.isArray(parsed), true, "XYTARA_EXECUTION_TARGETS_JSON must be a JSON array");
+  assert.strictEqual(parsed.length > 0, true, "configure at least one execution target in XYTARA_EXECUTION_TARGETS_JSON");
+  parsed.forEach((entry, index) => {
+    assert.strictEqual(
+      entry && typeof entry === "object" && !Array.isArray(entry),
+      true,
+      `execution target ${index + 1} must be an object`
+    );
+    assert.strictEqual(
+      typeof entry.endpoint_url === "string" && entry.endpoint_url.trim().length > 0,
+      true,
+      `execution target ${index + 1} must include endpoint_url`
+    );
+    assert.strictEqual(
+      Boolean(
+        (typeof entry.task_ref === "string" && entry.task_ref.trim().length > 0)
+        || (typeof entry.tool_name === "string" && entry.tool_name.trim().length > 0)
+        || (typeof entry.integration_id === "string" && entry.integration_id.trim().length > 0)
+      ),
+      true,
+      `execution target ${index + 1} must match at least one of task_ref, tool_name, or integration_id`
+    );
+  });
+}
+
+function ensureNativeSettlementConfig() {
+  const runtimeMode = String(
+    firstEnv("XYTARA_BSV_SETTLEMENT_RUNTIME_MODE", "XYTARA_BSV_TERANODE_SETTLEMENT_RUNTIME_MODE") || "mock"
+  ).trim().toLowerCase() || "mock";
+  assert.notStrictEqual(
+    runtimeMode,
+    "mock",
+    "configure XYTARA_BSV_SETTLEMENT_RUNTIME_MODE or XYTARA_BSV_TERANODE_SETTLEMENT_RUNTIME_MODE to observe, arc, or another live runtime mode before treating xytara as production-ready"
+  );
+  assert.strictEqual(
+    firstEnv(
+      "XYTARA_BSV_MERCHANT_ADDRESS",
+      "XYTARA_BSV_TERANODE_MERCHANT_ADDRESS",
+      "XYTARA_BSV_MERCHANT_PAYMAIL",
+      "XYTARA_BSV_TERANODE_MERCHANT_PAYMAIL"
+    ).length > 0,
+    true,
+    "configure XYTARA_BSV_MERCHANT_ADDRESS / XYTARA_BSV_MERCHANT_PAYMAIL or the legacy XYTARA_BSV_TERANODE_* merchant vars before treating xytara as production-ready"
+  );
+  if (runtimeMode === "arc") {
+    assert.strictEqual(
+      firstEnv("XYTARA_BSV_ARC_RPC_URL", "XYTARA_BSV_ARC_URL", "XYTARA_BSV_TERANODE_RPC_URL").length > 0,
+      true,
+      "configure XYTARA_BSV_ARC_RPC_URL, XYTARA_BSV_ARC_URL, or XYTARA_BSV_TERANODE_RPC_URL before treating arc settlement mode as production-ready"
+    );
+    assert.strictEqual(
+      firstEnv("XYTARA_BSV_ARC_RPC_API_KEY", "XYTARA_BSV_ARC_API_KEY", "XYTARA_BSV_TERANODE_RPC_API_KEY").length > 0,
+      true,
+      "configure XYTARA_BSV_ARC_RPC_API_KEY, XYTARA_BSV_ARC_API_KEY, or XYTARA_BSV_TERANODE_RPC_API_KEY before treating arc settlement mode as production-ready"
+    );
+  }
+}
+
+function main() {
+  ensureReleaseCandidate();
+  ensurePersistenceConfig();
+  ensureProductionSecurityConfig();
+  ensureTreasuryConfig();
+  ensureCallbackDeliveryConfig();
+  ensureHostedCheckoutIngressSecurity();
+  ensureL402Config();
+  ensureBoltConfig();
+  ensureMppConfig();
+  ensureRateLimitConfig();
+  ensureExecutionTargetConfig();
+  ensureNativeSettlementConfig();
+  console.log("xytara verify:production-readiness passed");
+}
+
+main();

package/scripts/verify_rate_limiter.js

@@ -1,52 +1,52 @@
-"use strict";
-
-// Verifies the in-memory fixed-window rate limiter (lib/rate_limiter.js) used to
-// gate the L402 invoice-creating path. Offline, no network, no timers waited on.
-
-const assert = require("assert");
-const { createRateLimiter } = require("../lib/rate_limiter");
-
-function main() {
-  // Per-key ceiling: first `max` hits allowed, the next denied with scope "key".
-  const rl = createRateLimiter({ windowMs: 60000, max: 3, maxGlobal: 100 });
-  assert.strictEqual(rl.check("1.1.1.1").allowed, true);
-  assert.strictEqual(rl.check("1.1.1.1").allowed, true);
-  const third = rl.check("1.1.1.1");
-  assert.strictEqual(third.allowed, true);
-  assert.strictEqual(third.remaining, 0);
-  const denied = rl.check("1.1.1.1");
-  assert.strictEqual(denied.allowed, false);
-  assert.strictEqual(denied.scope, "key");
-  assert.ok(denied.retryAfterMs > 0 && denied.retryAfterMs <= 60000);
-
-  // A different key is independent (not affected by another key's exhaustion).
-  assert.strictEqual(rl.check("2.2.2.2").allowed, true);
-
-  // Denied hits are not counted, so they cannot push the reset further out or
-  // starve a key beyond its window (no self-inflicted lockout extension).
-  assert.strictEqual(rl.check("1.1.1.1").allowed, false);
-
-  // Global ceiling: once the global budget is spent, a fresh key is still denied
-  // with scope "global" (maxGlobal >= max always, so set them equal to exercise it
-  // across distinct keys before any single key is exhausted).
-  const g = createRateLimiter({ windowMs: 60000, max: 2, maxGlobal: 2 });
-  assert.strictEqual(g.check("a").allowed, true); // global 1, key a 1
-  assert.strictEqual(g.check("b").allowed, true); // global 2, key b 1
-  const gDenied = g.check("c"); // global budget spent, key c untouched
-  assert.strictEqual(gDenied.allowed, false);
-  assert.strictEqual(gDenied.scope, "global");
-
-  // reset() clears all buckets.
-  g.reset();
-  assert.strictEqual(g.check("c").allowed, true);
-
-  // Config is clamped to sane floors.
-  const clamped = createRateLimiter({ windowMs: 1, max: 0, maxGlobal: 0 });
-  assert.ok(clamped.config.windowMs >= 1000);
-  assert.ok(clamped.config.max >= 1);
-  assert.ok(clamped.config.maxGlobal >= clamped.config.max);
-
-  console.log("verify_rate_limiter: all rate limiter checks passed");
-}
-
-main();
+"use strict";
+
+// Verifies the in-memory fixed-window rate limiter (lib/rate_limiter.js) used to
+// gate the L402 invoice-creating path. Offline, no network, no timers waited on.
+
+const assert = require("assert");
+const { createRateLimiter } = require("../lib/rate_limiter");
+
+function main() {
+  // Per-key ceiling: first `max` hits allowed, the next denied with scope "key".
+  const rl = createRateLimiter({ windowMs: 60000, max: 3, maxGlobal: 100 });
+  assert.strictEqual(rl.check("1.1.1.1").allowed, true);
+  assert.strictEqual(rl.check("1.1.1.1").allowed, true);
+  const third = rl.check("1.1.1.1");
+  assert.strictEqual(third.allowed, true);
+  assert.strictEqual(third.remaining, 0);
+  const denied = rl.check("1.1.1.1");
+  assert.strictEqual(denied.allowed, false);
+  assert.strictEqual(denied.scope, "key");
+  assert.ok(denied.retryAfterMs > 0 && denied.retryAfterMs <= 60000);
+
+  // A different key is independent (not affected by another key's exhaustion).
+  assert.strictEqual(rl.check("2.2.2.2").allowed, true);
+
+  // Denied hits are not counted, so they cannot push the reset further out or
+  // starve a key beyond its window (no self-inflicted lockout extension).
+  assert.strictEqual(rl.check("1.1.1.1").allowed, false);
+
+  // Global ceiling: once the global budget is spent, a fresh key is still denied
+  // with scope "global" (maxGlobal >= max always, so set them equal to exercise it
+  // across distinct keys before any single key is exhausted).
+  const g = createRateLimiter({ windowMs: 60000, max: 2, maxGlobal: 2 });
+  assert.strictEqual(g.check("a").allowed, true); // global 1, key a 1
+  assert.strictEqual(g.check("b").allowed, true); // global 2, key b 1
+  const gDenied = g.check("c"); // global budget spent, key c untouched
+  assert.strictEqual(gDenied.allowed, false);
+  assert.strictEqual(gDenied.scope, "global");
+
+  // reset() clears all buckets.
+  g.reset();
+  assert.strictEqual(g.check("c").allowed, true);
+
+  // Config is clamped to sane floors.
+  const clamped = createRateLimiter({ windowMs: 1, max: 0, maxGlobal: 0 });
+  assert.ok(clamped.config.windowMs >= 1000);
+  assert.ok(clamped.config.max >= 1);
+  assert.ok(clamped.config.maxGlobal >= clamped.config.max);
+
+  console.log("verify_rate_limiter: all rate limiter checks passed");
+}
+
+main();