Agent-native factory: sim replay viewer, order dock, live kerf quote rail, receipt-gated ordering

[ecto]

Implements the full purple-cow spec (docs/agent-native-factory.md, M0–M4 + kerf rail). One sentence: an agent designs a part in chat, you watch it move, tap approve, and the receipt proves both the geometry and the commerce.

What changed

▶ Physics replay in the inline viewer (M1)

• create_robot_env now mounts the viewer (writesDoc + geometry; registers the env's document as a session, env_id in structuredContent for ChatGPT-shim parity)
• 600-step trajectory ring buffer on gym_step; app-only get_sim_replay / get_sim_version
• Per-step instance transforms computed server-side via kernel solveForwardKinematics — the viewer does zero joint math, FK parity is exact by construction
• get_preview_glb { instances: true }: one named node per assembly instance with TRS, meshes deduped per partDef (glb.ts gains node transforms + meshKey)
• Viewer transport bar: play/pause/scrub/speed, reward sparkline, joint readout, live-follow badge riding the existing adaptive poll

📦 Order dock (M2)

• App-only get_order_feed: six-stop state_chip mapping (exhaustive, never-checked switches over all 16 vcad OrderStates and all 17 kerf JobStates), pricing-basis pills, approval banner → vcad.io/authorize/<id> deep link, receipt/evidence chips, wallet footer
• The iframe is read-only for money — get_order_feed is the only new widget-callable, asserted in viewer-meta tests

🏭 Live kerf rail

• Mirrored @kerf/core contract (drift-checked against the sibling clone when present) + byte-exact intentHash reproduction
• Production KerfClient (bearer auth, AbortController timeouts, degrade-to-estimate on unreachable) + SendCutSend adapter: vendor-native SCS config from the sheet-metal doc, single-DXF bytes_base64 wire contract, sha256-verified at both ends
• Honesty rule: scripted-mode rehearsal prices are downgraded to estimate basis — only live vendor runs carry quoted
• Companion branch ecto/kerf#feat/http-quote-api (unpushed): POST /api/quote + job/evidence GETs, assertTransition-guarded job store, Browser-Use CDP host, ScriptedHost exported ($5.58 canary verified via curl)

✅ Approval + receipt gates (M3/M4, always-on, no flags)

• authorize_spend issues URL-mode elicitation when the client advertises the capability (SDK 1.29.0); decline revokes via compare-and-set; full integration test through the real server pipeline
• place_order gates before any debit: quote doc_hash recompute (mismatch → durable EXPIRED, per ACP-CM "intent changed ⇒ quote dead") and clearance-claim re-verification (fail/unverifiable → refuse fail-closed, persisted receipt_status: violated); consumed-authz idempotent replay skips gates so a crashed debit can always finalize
• Migration 033_fabricate_order_enrichment.sql (not pushed — operator action)

🧹 M0: deprecated-surface tripwire test (roots/sampling/logging — zero usage, now enforced).

How it was verified

• 743 passed / 2 skipped across 54 files (baseline 706/46); build + tsc clean; local MCP-apps smoke green
• 133-agent adversarial review (7 dimensions × 3 refuters per finding) over both repos: 42 raw findings triaged, all confirmed money-path bugs fixed — highlights: session hydration before the gates for signed-in users, event-history preservation in setOrderState, tolerant-retry only on real column skew, order-feed windowing/version-token fixes, euler order aligned to the kernel's Rz·Ry·Rx (authority: vcad-eval/src/kinematics.rs)
• Known out-of-scope issues filed as follow-ups: kernel HashMap joint ordering, web-app euler order, engine kinematics.ts Map bug (all running as separate sessions)

Reviewer notes

• tool-surface.fixture.json regen is deliberate: +3 app-only tools, mount flips on create_robot_env/quote_manufacturing, get_preview_glb.instances, description-only diffs on the ordering pair — nothing else
• Replay/envs are in-process (warm-instance scope), same caveat as the existing gym
• Operator actions after merge: supabase db push (033), push + deploy the kerf branch, set KERF_URL/KERF_API_TOKEN, build the /authorize/<id> app route for the L2 lane

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
vcad-mcp	Building	Preview, Comment	Jul 8, 2026 11:21pm

3 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
mecheval	Ignored		Jul 8, 2026 11:21pm
vcad	Ignored		Jul 8, 2026 11:21pm
vcad-docs	Ignored		Jul 8, 2026 11:21pm

[chojiai]

What shipped

Three new capabilities are now live in the vcad viewer and ordering flow.

• Watch your simulation move. When an AI agent runs a physics simulation of your design, a playback bar now appears in the viewer — you can play, pause, scrub through the motion, and see a live reward chart and joint readout, all without leaving the conversation.
• Track your fabrication orders in one place. A new order dock in the viewer shows the full lifecycle of every manufacturing order — current status, pricing, vendor, and history — so you can follow a part from quote to delivery without switching tabs.
• Stronger safeguards before any money moves. When you approve a spend and the agent goes to place an order, two checks now run automatically: the design must not have changed since the quote was generated, and any safety or geometry checks on the part must still pass. If either fails, the order is blocked and no charge is made.

---

_{Plain-English summary generated by Choji from this pull request.}