Files
agents-marketplace/docs/buyer/escrow_ops.py
jelisaveta-talbot cbab81efbd M1-F: end-to-end LLM marketplace lifecycle on Vector testnet
Bonded-escrow marketplace for prompt → response between buyers and
local-LLM suppliers, settling on Vector (UTxO) via Aiken Plutus V3
validators. Lifecycle PostEscrow → Claim → Submit → Accept proven on
Vector testnet 2026-05-06; AcceptEscrow tx 125e3cfe…7dc100d distributes
payment + bonds per the validator's distribution rule.

Workspace layout (pnpm + TypeScript):
  contracts/marketplace/      Aiken validators (advert + escrow) + plutus.json
  packages/shared/            Tx-builders (lucid-evolution), CBOR codecs,
                              chain providers (mock / read-only / live Ogmios)
  supplier/                   OpenAI-compatible HTTP node (Ollama by default;
                              vLLM / llama.cpp / OpenRouter / OpenClaw all
                              swap-in via OLLAMA_URL); 202+poll chat handler
  buyer/                      Express + React SPA; server-side runs the full
                              chain lifecycle via /v1/submit-prompt and
                              /v1/accept; SPA never holds the buyer key
  indexer/                    Chain-follower (extends apex-dashboard pattern),
                              SSE event stream + REST queries
  indexer-ui/                 Operator dashboard (events + suppliers + escrow
                              lookup)
  tests/                      1098 vitest unit + integration tests (10 skipped
                              under M1-F-D-defer for UPLC test plumbing)
  deploy/testnet/             Per-service docker-compose for the Hetzner stack
  docs/EXECUTIVE_SUMMARY.*    Marp deck (PDF + PPTX) — 11 slides, mermaid
                              diagrams pre-rendered for portable export
  docs/CLOUDFLARE_WAF_BYPASS.md  CF Skip-rule runbook for /v1/* paths
  docs/ARCHITECTURE.md        canonical spec

Live demo (testnet, 2026-05-06):
  https://mp-buyers.vector.testnet.apexfusion.org      (buyer SPA)
  https://mp-suppliers.vector.testnet.apexfusion.org   (supplier API)
  https://mp-indexer.vector.testnet.apexfusion.org     (indexer + UI)
2026-05-06 13:27:48 +02:00

141 lines
3.9 KiB
Python

"""Buyer-side escrow operations -- post, accept, and reclaim."""
from cbor2 import CBORTag
from pycardano import (
Address,
RawPlutusData,
Transaction,
TransactionBuilder,
TransactionOutput,
VerificationKeyWitness,
)
from pycardano.hash import ScriptHash
from pycardano.transaction import TransactionWitnessSet
from lib.datum import build_open_datum
from lib.escrow_tx import build_and_submit_script_tx
from lib.constants import BUYER_BOND, SUPPLIER_BOND, DISPUTE_WINDOW_MS
async def post_escrow(
context,
signer,
script_hash,
task_hash,
payment_dfm,
deadline_posix_ms,
resolver_cred,
) -> str:
"""Post escrow on-chain in the Open state.
Locks payment + buyer_bond + 2M lovelace at the script address.
Uses manual signing (NOT build_and_sign) to avoid extended key issues.
Returns the transaction hash as a string.
"""
script_hash_obj = ScriptHash.from_primitive(script_hash)
script_address = Address(script_hash_obj, network=context.network)
buyer_vkh = bytes(signer._wallet.payment_verification_key.hash())
datum = build_open_datum(
task_hash_hex=task_hash,
buyer_vkh=buyer_vkh,
payment_dfm=payment_dfm,
buyer_bond=BUYER_BOND,
supplier_bond=SUPPLIER_BOND,
deadline_posix_ms=deadline_posix_ms,
dispute_window_ms=DISPUTE_WINDOW_MS,
resolver_cred=bytes.fromhex(resolver_cred),
)
total_lovelace = payment_dfm + BUYER_BOND + 2_000_000
datum_obj = RawPlutusData(datum)
await context.async_protocol_param()
builder = TransactionBuilder(context)
builder.add_input_address(signer._wallet.payment_address)
builder.add_output(
TransactionOutput(script_address, total_lovelace, datum=datum_obj)
)
tx_body = builder.build(change_address=signer._wallet.payment_address)
sig = signer._wallet.payment_signing_key.sign(tx_body.hash())
vk_witness = VerificationKeyWitness(signer._wallet.payment_verification_key, sig)
witness_set = TransactionWitnessSet(vkey_witnesses=[vk_witness])
tx = Transaction(tx_body, witness_set)
tx_cbor = tx.to_cbor()
if isinstance(tx_cbor, bytes):
tx_cbor = tx_cbor.hex()
await context.async_submit_tx_cbor(tx_cbor)
return str(tx.id)
async def accept_result(
context,
signer,
utxo,
script,
script_address,
supplier_address,
payment_dfm,
) -> str:
"""Accept a submitted result -- Accept redeemer (CBORTag 123, []).
Pays the supplier: payment + supplier_bond + buyer_bond.
The buyer gets back the remaining lovelace (min UTxO overhead) as change.
Returns the transaction hash as a string.
"""
from pycardano import Address as PycAddress
supplier_addr = PycAddress.from_primitive(supplier_address)
supplier_payout = payment_dfm + SUPPLIER_BOND + BUYER_BOND
redeemer_obj = CBORTag(123, [])
tx_hash = await build_and_submit_script_tx(
context=context,
signer=signer,
utxo=utxo,
script=script,
script_address=script_address,
redeemer_obj=redeemer_obj,
output_value=0,
output_datum_obj=None,
task_id="accept",
step_name="Accept",
extra_outputs=[
TransactionOutput(supplier_addr, supplier_payout),
],
)
return tx_hash
async def reclaim_escrow(
context,
signer,
utxo,
script,
script_address,
) -> str:
"""Reclaim escrow funds -- Reclaim redeemer (CBORTag 126, []).
Returns the transaction hash as a string.
"""
redeemer_obj = CBORTag(126, [])
tx_hash = await build_and_submit_script_tx(
context=context,
signer=signer,
utxo=utxo,
script=script,
script_address=script_address,
redeemer_obj=redeemer_obj,
output_value=0,
output_datum_obj=None,
task_id="reclaim",
step_name="Reclaim",
)
return tx_hash