amaru-treasury-tx

Build unsigned Amaru treasury transactions (disburse, reorganize, withdraw, swap) from unified intents, then witness, assemble, and submit them.

What is this

amaru-treasury-tx is a Haskell CLI for operating the Amaru treasury on Cardano. Typed wizards verify the upstream pragma-org/amaru-treasury/journal/2026/ metadata.json against the on-chain registry NFT and build-time-pinned Plutus blobs, then emit a unified intent.json. tx-build turns an intent into the unsigned Conway CBOR the operator signs, re-evaluating every redeemer against a live ChainContext before any bytes are written. It is a Haskell port of the bash recipes in that upstream journal, built on the cardano-node-clients TxBuild DSL.

Signing stays off the build path. The same binary creates detached, age-encrypted vault-backed witnesses (vault / witness), merges them into the unsigned transaction (attach-witness), and submits the result through a local node socket (submit). Transactions are scoped to the registered treasury scopes — core_development, ops_and_use_cases, network_compliance, middleware, and contingency.

A hosted operator web app runs at https://amaru-treasury.plutimus.com — a browser SPA backed by the amaru-treasury-tx-api server with an embedded chain-sync indexer: View (live dashboard across the registered scopes), Audit (indexer-backed history and tx detail with RDF-resolved scope/role labels and named SPARQL / SHACL lenses), Operate (build unsigned swap / disburse / reorganize transactions from the browser, with a Graph tab previewing the resolved spend→produce effect), and Books (saved operator values). The app builds unsigned transactions only; signing and submission stay off the server.

Architecture

flowchart LR
    Wizard["*-wizard"]
    Intent["intent.json"]
    TxBuild["tx-build"]
    Unsigned["unsigned CBOR"]
    Vault[("age vault")]
    Witness["witness"]
    Attach["attach-witness"]
    Submit["submit"]
    Node[("cardano-node (N2C socket)")]
    Indexer["chain-sync indexer (RocksDB)"]
    Api["amaru-treasury-tx-api: /v1/* + SPA"]

    Wizard --> Intent --> TxBuild --> Unsigned
    Vault --> Witness
    Unsigned --> Witness --> Attach --> Submit
    TxBuild -. ChainContext query .-> Node
    Submit -- LocalTxSubmission --> Node
    Node -. chain-sync .-> Indexer
    Indexer --> Api

tx-build reads the action discriminator and the network from the intent itself (single source of truth) and dispatches to the matching builder. See the architecture overview for the full module map.

Install

macOS (Apple Silicon):

brew tap lambdasistemi/tap
brew install amaru-treasury-tx

Linux (x86_64) — AppImage / .deb / .rpm from the releases page:

curl -L \
  https://github.com/lambdasistemi/amaru-treasury-tx/releases/latest/download/amaru-treasury-tx.AppImage \
  -o amaru-treasury-tx
chmod +x ./amaru-treasury-tx
./amaru-treasury-tx --help

Or run from the flake without installing:

nix run github:lambdasistemi/amaru-treasury-tx -- --help

Quickstart

# 1. Point at a mainnet node.
export CARDANO_NODE_SOCKET_PATH=/path/to/cardano-node.socket

# 2. Fetch the upstream metadata. The wizard treats this as an
#    untrusted hint and re-verifies every consumed field on-chain.
curl -fsSL https://raw.githubusercontent.com/pragma-org/amaru-treasury/main/journal/2026/metadata.json \
    -o metadata-mainnet.json

# 3. Resolve a disbursement into a unified intent, then build the
#    unsigned tx (--unit defaults to USDM; 100000000 = 100 USDM).
amaru-treasury-tx disburse-wizard \
    --wallet-addr addr1... \
    --metadata metadata-mainnet.json \
    --scope network_compliance \
    --amount 100000000 \
    --beneficiary-addr addr1... \
    --description "…" --justification "…" --destination-label "…" \
    --out disburse.intent.json
amaru-treasury-tx tx-build \
    --intent disburse.intent.json \
    --out tx.cbor.hex \
    --report report.json

# 4. Witness from an age vault, assemble, and submit.
amaru-treasury-tx witness --tx tx.cbor.hex --vault vault.age \
    --identity <label> --out witness.hex
amaru-treasury-tx attach-witness --tx tx.cbor.hex \
    --witness "$(cat witness.hex)" --out signed.hex
amaru-treasury-tx submit --tx signed.hex

The full walkthrough — wizard-to-tx-build pipes, the pre-signing report review, and creating the vault — is on the Quickstart page.

This is the beginning of the README. Read the rest at the original. Read the full README ↗