feat: CPTL Phase 2 — Advanced Trust Math (v0.6.0)

- ActionReceipt schema with canonical action categories
- 7-dimension trust vector (E/P/B/D/R/A/C)
- Economic scaling, diminishing returns, recency decay
- Trust engine: src/lib/reputation/trust-engine.ts
- API returns trust_vector + legacy windows (backward compat)
- SDK: submitActionReceipt() + getTrustProfile()
- CLI: coinpay reputation profile <did>
- Web UI: trust vector bar chart
- DB migration: action_category + action_type columns
- All tests passing
- Documentation updated

Author: ralyodio

bin/coinpay

@@ -472,9 +472,10 @@ USAGE
   coinpay <command> [options]
 
 COMMANDS
-  swap       Coin swap operations (no KYC)
-  wallet     Wallet management
-  help       Show this help
+  swap         Coin swap operations (no KYC)
+  wallet       Wallet management
+  reputation   Trust & reputation (CPTL)
+  help         Show this help
 
 SWAP COMMANDS
   coinpay swap quote   Get a swap quote
@@ -496,6 +497,9 @@ WALLET COMMANDS
   coinpay wallet backup          Export encrypted backup
   coinpay wallet delete          Delete local wallet file
 
+REPUTATION COMMANDS
+  coinpay reputation profile <did>  Show trust vector & reputation for a DID
+
 GLOBAL OPTIONS
   --password <pass>       Encryption password (or COINPAY_WALLET_PASSWORD env)
   --wallet-file <path>    Wallet file path (default: ~/.coinpay-wallet.gpg)
@@ -567,6 +571,54 @@ GLOBAL OPTIONS
 
 // ── Main ────────────────────────────────────────────────────────────
 
+// ── Reputation commands ──────────────────────────────────────────────
+
+async function handleReputation(subCommand, args) {
+  const opts = parseArgs(args);
+  switch (subCommand) {
+    case 'profile': {
+      const did = opts._positional?.[0] || opts.did;
+      if (!did) {
+        console.error('Usage: coinpay reputation profile <did>');
+        process.exit(1);
+      }
+      const res = await fetch(`${API_BASE}/api/reputation/agent/${encodeURIComponent(did)}/reputation`);
+      const data = await res.json();
+      if (!data.success) {
+        console.error('Error:', data.error);
+        process.exit(1);
+      }
+      console.log('\n📊 Reputation Profile:', did);
+      if (data.trust_vector) {
+        console.log('\n🔷 Trust Vector (CPTL v2):');
+        console.log(`  E (Economic):    ${data.trust_vector.E}`);
+        console.log(`  P (Productivity): ${data.trust_vector.P}`);
+        console.log(`  B (Behavioral):  ${data.trust_vector.B}`);
+        console.log(`  D (Diversity):   ${data.trust_vector.D}`);
+        console.log(`  R (Recency):     ${data.trust_vector.R}`);
+        console.log(`  A (Anomaly):     ${data.trust_vector.A}`);
+        console.log(`  C (Compliance):  ${data.trust_vector.C}`);
+      }
+      if (data.reputation?.windows) {
+        const w = data.reputation.windows.all_time;
+        console.log('\n📈 All-Time Stats:');
+        console.log(`  Tasks: ${w.task_count}  Accepted: ${w.accepted_count}  Disputed: ${w.disputed_count}`);
+        console.log(`  Volume: $${w.total_volume.toFixed(2)}  Unique Buyers: ${w.unique_buyers}`);
+      }
+      if (data.reputation?.anti_gaming?.flagged) {
+        console.log('\n⚠️  Anti-gaming flags:', data.reputation.anti_gaming.flags.join(', '));
+      }
+      break;
+    }
+    case 'help': case '--help': case '-h': default:
+      console.log(`
+Reputation Commands:
+  coinpay reputation profile <did>   Show trust vector and reputation for a DID
+`);
+      break;
+  }
+}
+
 async function main() {
   const args = process.argv.slice(2);
 
@@ -582,6 +634,9 @@ async function main() {
     case 'wallet':
       await handleWallet(subCommand, args.slice(2));
       break;
+    case 'reputation':
+      await handleReputation(subCommand, args.slice(2));
+      break;
     case 'help': case '--help': case '-h':
       showHelp();
       break;

docs/DID_REPUTATION_SYSTEM.md

@@ -571,14 +571,16 @@ coinpay reputation badge <did>      # Get badge URL for a DID
 - [x] Embeddable SVG badge
 - [x] API documentation
 
-### Phase 2 — Advanced Trust Math
-- [ ] ActionReceipt schema (canonical categories)
-- [ ] Multi-dimensional trust vector (E/P/B/D/R/A/C)
-- [ ] Economic scaling: `log(1 + value_usd)`
-- [ ] Diminishing returns: `log(1 + unique_count)`
-- [ ] Recency decay: 90-day half-life
-- [ ] Diversity multiplier
-- [ ] `@coinpayportal/trust-sdk` standalone package
+### Phase 2 — Advanced Trust Math ✅
+- [x] ActionReceipt schema (canonical categories)
+- [x] Multi-dimensional trust vector (E/P/B/D/R/A/C)
+- [x] Economic scaling: `log(1 + value_usd)`
+- [x] Diminishing returns: `log(1 + unique_count)`
+- [x] Recency decay: 90-day half-life
+- [x] Diversity multiplier
+- [x] SDK: `submitActionReceipt()` + `getTrustProfile()`
+- [x] CLI: `coinpay reputation profile <did>`
+- [x] Web UI: Trust vector bar chart
 
 ### Phase 3 — Anti-Collusion Engine
 - [ ] Graph-based loop detection

packages/sdk/src/reputation.d.ts

@@ -70,6 +70,39 @@ export function getCredential(client: CoinPayClient, credentialId: string): Prom
 export function verifyCredential(client: CoinPayClient, credential: { credential_id: string }): Promise<{ valid: boolean; reason?: string }>;
 export function getRevocationList(client: CoinPayClient): Promise<{ success: boolean; revoked_credentials: string[]; revocations: Array<Record<string, unknown>> }>;
 
+// CPTL Phase 2
+
+export type ActionCategory =
+  | 'economic.transaction' | 'economic.dispute' | 'economic.refund'
+  | 'productivity.task' | 'productivity.application' | 'productivity.completion'
+  | 'identity.profile_update' | 'identity.verification'
+  | 'social.post' | 'social.comment' | 'social.endorsement'
+  | 'compliance.incident' | 'compliance.violation';
+
+export interface ActionReceiptInput extends ReceiptInput {
+  action_category?: ActionCategory;
+  action_type?: string;
+}
+
+export interface TrustVector {
+  E: number;
+  P: number;
+  B: number;
+  D: number;
+  R: number;
+  A: number;
+  C: number;
+}
+
+export interface TrustProfileResult {
+  trust_vector: TrustVector | null;
+  reputation: ReputationResult | null;
+  computed_at: string | null;
+}
+
+export function submitActionReceipt(client: CoinPayClient, receipt: ActionReceiptInput): Promise<{ success: boolean; receipt?: Record<string, unknown>; error?: string }>;
+export function getTrustProfile(client: CoinPayClient, agentDid: string): Promise<TrustProfileResult>;
+
 export interface DidInfo {
   did: string;
   public_key: string;

packages/sdk/src/reputation.js

@@ -123,6 +123,54 @@ export async function getReceipts(client, did) {
   return client.request(`/reputation/receipts?did=${encodeURIComponent(did)}`);
 }
 
+// ═══════════════════════════════════════════════════════════
+// CPTL Phase 2 — Action Receipts & Trust Profile
+// ═══════════════════════════════════════════════════════════
+
+const CANONICAL_CATEGORIES = [
+  'economic.transaction', 'economic.dispute', 'economic.refund',
+  'productivity.task', 'productivity.application', 'productivity.completion',
+  'identity.profile_update', 'identity.verification',
+  'social.post', 'social.comment', 'social.endorsement',
+  'compliance.incident', 'compliance.violation',
+];
+
+/**
+ * Submit an action receipt with schema validation
+ * @param {import('./client.js').CoinPayClient} client
+ * @param {Object} receipt - Action receipt with action_category
+ * @returns {Promise<Object>}
+ */
+export async function submitActionReceipt(client, receipt) {
+  // Validate action_category if provided
+  if (receipt.action_category && !CANONICAL_CATEGORIES.includes(receipt.action_category)) {
+    throw new Error(`Invalid action_category: ${receipt.action_category}. Must be one of: ${CANONICAL_CATEGORIES.join(', ')}`);
+  }
+  // Default action_category
+  if (!receipt.action_category) {
+    receipt = { ...receipt, action_category: 'economic.transaction' };
+  }
+  return client.request('/reputation/receipt', {
+    method: 'POST',
+    body: JSON.stringify(receipt),
+  });
+}
+
+/**
+ * Get trust profile (trust vector) for an agent DID
+ * @param {import('./client.js').CoinPayClient} client
+ * @param {string} agentDid
+ * @returns {Promise<Object>} Trust vector { E, P, B, D, R, A, C }
+ */
+export async function getTrustProfile(client, agentDid) {
+  const result = await client.request(`/reputation/agent/${encodeURIComponent(agentDid)}/reputation`);
+  return {
+    trust_vector: result.trust_vector || null,
+    reputation: result.reputation || null,
+    computed_at: result.computed_at || null,
+  };
+}
+
 /**
  * Get the badge URL for a DID
  * @param {string} baseUrl - The CoinPayPortal base URL

src/app/api/reputation/agent/[did]/reputation/route.ts

@@ -1,6 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { createClient } from '@supabase/supabase-js';
 import { computeReputation } from '@/lib/reputation/attestation-engine';
+import { computeTrustVector } from '@/lib/reputation/trust-engine';
 import { isValidDid } from '@/lib/reputation/crypto';
 
 const supabase = createClient(
@@ -20,8 +21,17 @@ export async function GET(
       return NextResponse.json({ success: false, error: 'Invalid DID format' }, { status: 400 });
     }
 
-    const reputation = await computeReputation(supabase, agentDid);
-    return NextResponse.json({ success: true, reputation });
+    const [reputation, trustProfile] = await Promise.all([
+      computeReputation(supabase, agentDid),
+      computeTrustVector(supabase, agentDid),
+    ]);
+
+    return NextResponse.json({
+      success: true,
+      reputation,
+      trust_vector: trustProfile.trust_vector,
+      computed_at: trustProfile.computed_at,
+    });
   } catch (error) {
     console.error('Reputation query error:', error);
     return NextResponse.json({ success: false, error: 'Internal server error' }, { status: 500 });

src/app/docs/sdk/page.tsx

@@ -1035,6 +1035,44 @@ const result = await client.createPayment({
           </CodeBlock>
         </DocSection>
 
+        {/* CPTL Phase 2 — Trust SDK */}
+        <DocSection title="Trust Profile & Action Receipts (CPTL v2)">
+          <p className="text-gray-300 mb-4">
+            Phase 2 adds multi-dimensional trust scoring with categorized action receipts.
+          </p>
+          <CodeBlock title="Submit Action Receipt">
+{`import { submitActionReceipt } from '@profullstack/coinpay/reputation';
+
+const result = await submitActionReceipt(client, {
+  receipt_id: '550e8400-...',
+  task_id: '550e8400-...',
+  agent_did: 'did:key:z6Mk...',
+  buyer_did: 'did:key:z6Mk...',
+  action_category: 'productivity.completion', // canonical category
+  action_type: 'code_review',                 // custom action type
+  amount: 250,
+  currency: 'USD',
+  outcome: 'accepted',
+  signatures: { escrow_sig: '...' },
+});`}
+          </CodeBlock>
+          <CodeBlock title="Get Trust Profile">
+{`import { getTrustProfile } from '@profullstack/coinpay/reputation';
+
+const profile = await getTrustProfile(client, 'did:key:z6Mk...');
+// profile.trust_vector = { E: 42.5, P: 12.3, B: 9.1, D: 2.08, R: 0.87, A: 0, C: 0 }
+// profile.reputation = { windows: { ... }, anti_gaming: { ... } }
+// profile.computed_at = "2026-02-13T..."`}
+          </CodeBlock>
+          <p className="text-gray-400 text-sm mt-4">
+            Valid action categories: <code>economic.transaction</code>, <code>economic.dispute</code>,
+            <code>economic.refund</code>, <code>productivity.task</code>, <code>productivity.application</code>,
+            <code>productivity.completion</code>, <code>identity.profile_update</code>,
+            <code>identity.verification</code>, <code>social.post</code>, <code>social.comment</code>,
+            <code>social.endorsement</code>, <code>compliance.incident</code>, <code>compliance.violation</code>
+          </p>
+        </DocSection>
+
         {/* Footer Navigation */}
         <div className="mt-12 pt-8 border-t border-white/10">
           <div className="flex justify-between items-center">