xoonya 2.5.0 → 2.6.0

package/bin/xoonya-first-run.js

@@ -0,0 +1,184 @@
+#!/usr/bin/env node
+"use strict";
+
+const path = require("path");
+const { spawnSync } = require("child_process");
+
+const DEFAULT_KIT_URL = "https://www.naxytra.com/v1/first-run-kit";
+
+function parseArgs(argv) {
+  const args = {};
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index];
+    if (!token.startsWith("--")) continue;
+    const key = token.slice(2);
+    const next = argv[index + 1];
+    if (!next || next.startsWith("--")) {
+      args[key] = true;
+      continue;
+    }
+    args[key] = next;
+    index += 1;
+  }
+  return args;
+}
+
+function buildLocalGuide() {
+  return {
+    ok: true,
+    product: "xoonya",
+    category: "xoonya-first-run-proof-guide",
+    guide_version: "xoonya-first-run-proof-guide-v1",
+    public_command_kit_url: DEFAULT_KIT_URL,
+    role: "proof_followthrough_after_xytara_runtime_execution",
+    safe_local_verification_command: "xoonya first-run --verify-native --pretty",
+    proof_modes: [
+      {
+        method: "xoonya-native-sha256-v1",
+        verification: "replayable_digest"
+      },
+      {
+        method: "xoonya-native-signed-v1",
+        verification: "ed25519_signature"
+      },
+      {
+        method: "xoonya-native-anchored-v1",
+        verification: "anchor_binding"
+      },
+      {
+        method: "external_interop_methods",
+        verification: "structure_checked_external_verifier_boundary"
+      }
+    ],
+    public_checks: [
+      "https://xoonya.onrender.com/v1/proof-center/native-standard/summary",
+      "https://xoonya.onrender.com/v1/proof-center/native-atom-conformance/summary",
+      "https://xoonya.onrender.com/v1/proof-center/native-anchor-profile/summary"
+    ],
+    boundaries: [
+      "xoonya_verifies_proof_bundles_and_native_method_binding",
+      "xoonya_anchor_binding_does_not_claim_external_provider_or_chain_truth",
+      "xytara_owns_runtime_payment_and_execution_state"
+    ]
+  };
+}
+
+async function fetchPublicKit(url) {
+  const response = await fetch(url, { headers: { accept: "application/json" } });
+  if (!response.ok) {
+    throw new Error(`first_run_kit_fetch_failed_${response.status}`);
+  }
+  return response.json();
+}
+
+function writeJson(payload, pretty) {
+  process.stdout.write(`${JSON.stringify(payload, null, pretty ? 2 : 0)}\n`);
+}
+
+function printUsage() {
+  process.stdout.write([
+    "Usage: xoonya first-run [options]",
+    "",
+    "Options:",
+    "  --json             Print the guided proof followthrough object",
+    "  --offline          Do not fetch the public command kit",
+    "  --verify-native    Run local native/conformance verification",
+    "  --pretty           Pretty-print JSON output",
+    "  --help             Show this help message"
+  ].join("\n"));
+}
+
+function runNativeVerification(args) {
+  const scriptPath = path.join(__dirname, "..", "scripts", "verify_vectors.js");
+  const result = spawnSync(process.execPath, [
+    scriptPath,
+    "--json"
+  ], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "inherit"]
+  });
+  if (result.status !== 0) {
+    process.exitCode = typeof result.status === "number" ? result.status : 1;
+    return;
+  }
+  const summary = JSON.parse(result.stdout);
+  writeJson({
+    ok: true,
+    product: "xoonya",
+    category: "xoonya-first-run-native-verification",
+    verification_version: "xoonya-first-run-native-verification-v1",
+    proof_bundle_conformance_passed: summary.ok === true,
+    conformance_count: summary.conformance_count,
+    adversarial_count: summary.adversarial_count,
+    native_atom_vector_count: summary.native_atom_vector_count,
+    native_atom_adversarial_count: summary.native_atom_adversarial_count,
+    verification_methods: summary.verification_methods,
+    native_atom_error_codes: summary.native_atom_error_codes,
+    required_native_methods_present: [
+      "xoonya-native-sha256-v1",
+      "xoonya-native-signed-v1",
+      "xoonya-native-anchored-v1"
+    ].every((method) => summary.verification_methods.includes(method)),
+    boundary: "local_conformance_verifies_xoonya_binding_and_vectors_not_external_chain_truth"
+  }, args.pretty);
+}
+
+async function main() {
+  const args = parseArgs(process.argv.slice(2));
+  if (args.help) {
+    printUsage();
+    return;
+  }
+  if (args["verify-native"]) {
+    runNativeVerification(args);
+    return;
+  }
+
+  const localGuide = buildLocalGuide();
+  if (args.json) {
+    if (args.offline) {
+      writeJson(localGuide, args.pretty);
+      return;
+    }
+    try {
+      const publicKit = await fetchPublicKit(DEFAULT_KIT_URL);
+      writeJson({
+        ...localGuide,
+        public_command_kit: publicKit
+      }, args.pretty);
+    } catch (error) {
+      writeJson({
+        ...localGuide,
+        public_command_kit_fetch_error: error.message
+      }, args.pretty);
+    }
+    return;
+  }
+
+  process.stdout.write([
+    "xoonya first-run",
+    "",
+    "Proof followthrough after xytara execution:",
+    "  xoonya first-run --verify-native --pretty",
+    "",
+    "Inspect the public command kit:",
+    `  ${DEFAULT_KIT_URL}`,
+    "",
+    "Native proof modes checked locally:",
+    "  xoonya-native-sha256-v1",
+    "  xoonya-native-signed-v1",
+    "  xoonya-native-anchored-v1",
+    "",
+    "Public proof surfaces:",
+    "  https://xoonya.onrender.com/v1/proof-center/native-standard/summary",
+    "  https://xoonya.onrender.com/v1/proof-center/native-anchor-profile/summary",
+    "",
+    "Boundary:",
+    "  xoonya verifies proof and anchor binding; external chain/provider truth stays external."
+  ].join("\n"));
+}
+
+main().catch((error) => {
+  process.stderr.write(`${error.message}\n`);
+  process.exitCode = 1;
+});

package/bin/xoonya.js

@@ -11,12 +11,17 @@ function printUsage() {
     "Commands:",
     "  release [args]    Open the release/adoption/reporting surface",
     "  review [args]     Review a carried handoff or proof input",
+    "  conformance       Run proof conformance and adversarial vectors",
+    "  first-run [args]  Guide or run proof followthrough checks",
     "  start-here        Print the shortest first-run path",
     "  help              Show this help message",
     "",
     "Fastest first run:",
     "  xoonya start-here",
+    "  xoonya first-run",
+    "  xoonya first-run --verify-native --pretty",
     "  xoonya release --summary",
+    "  xoonya conformance --json",
     "  xoonya review --help"
   ].join("\n"));
 }
@@ -25,11 +30,26 @@ function printStartHere() {
   process.stdout.write([
     "xoonya start-here",
     "",
-    "1. xoonya release --summary",
-    "2. node examples/package_quickstart.js",
-    "3. npm run verify:all",
-    "4. Inspect /v1/providers, /v1/frameworks, /v1/integration-matrix, /v1/proof-bridge",
-    "5. Continue into proof review, bridge, and import lanes as needed"
+    "Public first-run spine:",
+    "  quote -> pay/credits -> execute -> prove",
+    "",
+    "1. Open https://www.naxytra.com/v1/first-run-kit",
+    "2. Run the xytara quote-only command first; it needs no wallet secret.",
+    "3. After funded execution, verify the proof side:",
+    "   xoonya first-run --verify-native --pretty",
+    "   node examples/package_quickstart.js",
+    "   xoonya conformance --json",
+    "4. Inspect native proof surfaces:",
+    "   https://xoonya.onrender.com/v1/proof-center/native-standard/summary",
+    "   https://xoonya.onrender.com/v1/proof-center/native-anchor-profile/summary",
+    "",
+    "Native proof modes:",
+    "  xoonya-native-sha256-v1     replayable digest proof",
+    "  xoonya-native-signed-v1     key-bound authorship proof",
+    "  xoonya-native-anchored-v1   anchor-binding proof",
+    "",
+    "Boundary:",
+    "  xoonya verifies proof and anchor binding; external chain/provider truth stays external"
   ].join("\n"));
 }
 
@@ -49,6 +69,12 @@ if (!command || command === "help" || command === "--help" || command === "-h")
   delegate("xoonya-release.js", rest);
 } else if (command === "review") {
   delegate("xoonya-review.js", rest);
+} else if (command === "first-run" || command === "firstrun") {
+  delegate("xoonya-first-run.js", rest);
+} else if (command === "conformance" || command === "verify-vectors") {
+  const scriptPath = path.join(__dirname, "..", "scripts", "verify_vectors.js");
+  const result = spawnSync(process.execPath, [scriptPath, ...rest], { stdio: "inherit" });
+  process.exitCode = typeof result.status === "number" ? result.status : 1;
 } else {
   printUsage();
   process.exitCode = 1;

package/lib/release_history.js

@@ -10,6 +10,22 @@ function buildReleaseHistory() {
     current_version: packageJson.version,
     release_track: "public_release",
     history: [
+      {
+        version: "2.6.0",
+        channel: "public_release",
+        maturity_posture: "expansion_ready",
+        headline: "expansion proof release with XNYA native payload and line-rate profiles, native signed and anchored methods, external proof import, and standardization guardrails",
+        milestone_refs: [
+          "xoonya_native_signed_ed25519_secp256k1_p256",
+          "xoonya_native_anchored_method",
+          "xoonya_native_payload_profile_xnyp",
+          "xoonya_native_line_rate_frame",
+          "native_payload_profile_vectors",
+          "external_proof_import_adapter",
+          "native_hybrid_readiness_guardrails",
+          "native_standardization_pack"
+        ]
+      },
       {
         version: "2.5.0",
         channel: "public_release",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "xoonya",
-  "version": "2.5.0",
-  "description": "Deterministic proof SDK for canonical events, receipts, proof bundles, and verification.",
+  "version": "2.6.0",
+  "description": "Deterministic proof and review engine for receipts, handoffs, governance, and verification.",
   "main": "index.js",
   "bin": {
     "xoonya": "bin/xoonya.js",
@@ -11,13 +11,6 @@
   "type": "commonjs",
   "license": "Apache-2.0",
   "homepage": "https://xoonya.com",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/naxytra/xoonya.git"
-  },
-  "bugs": {
-    "url": "https://github.com/naxytra/xoonya/issues"
-  },
   "funding": {
     "type": "individual",
     "url": "https://xoonya.com"
@@ -34,14 +27,11 @@
     "integrations/",
     "vectors/",
     "RELEASE_NOTES.md",
-    "RELEASE_CHECKLIST.md",
-    "PUBLISH_PLAN.md",
     ".env.example",
     "README.md",
-    "PROGRAM_STATUS.md",
-    "OPERATOR_START_HERE.md",
-    "OPERATIONS_RUNBOOK.md",
-    "PROGRAM_COMPLETE_RELEASE.md",
+    "XOONYA_NATIVE_PROOF_FORMAT.md",
+    "XOONYA_NATIVE_ATOM_SPEC.md",
+    "XOONYA_NATIVE_STANDARD_GOVERNANCE.md",
     "WHY_XYTARA_XOONYA.md",
     "CARRIED_HANDOFF_DEMO.md",
     "PARTNER_READY_PATH.md",
@@ -63,6 +53,10 @@
   },
   "keywords": [
     "proof",
+    "review",
+    "handoff",
+    "governance",
+    "audit",
     "receipt",
     "canonical-events",
     "proof-bundle",
@@ -73,6 +67,7 @@
   "scripts": {
     "start": "node server.js",
     "verify:package": "node scripts/verify_all.js",
+    "verify:conformance": "node scripts/verify_vectors.js",
     "verify:integrations": "node scripts/verify_integrations.js",
     "verify:tooling": "node scripts/verify_tooling.js",
     "verify:vectors": "node scripts/verify_vectors.js",