xoonya 2.5.0 → 2.6.0

package/server.js

@@ -2356,6 +2356,96 @@ async function routeRequest(req, res) {
     return;
   }
 
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-standard') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativeProofStandard());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-standard/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativeProofStandard());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-hybrid-readiness') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativeHybridReadinessPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-hybrid-readiness/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativeHybridReadinessPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-standardization') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativeStandardizationPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-standardization/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativeStandardizationPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-payload-profile') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativePayloadProfilePack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-payload-profile/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativePayloadProfilePack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-line-rate-frame') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativeLineRateFramePack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-line-rate-frame/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativeLineRateFramePack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-atom-spec') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativeAtomSpec());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-atom-spec/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativeAtomSpec());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-atom-conformance') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativeAtomConformancePack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-atom-conformance/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativeAtomConformancePack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-anchor-profile') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativeAnchorProfile());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-anchor-profile/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativeAnchorProfile());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/import-adapter') {
+    sendJson(res, 200, proofSdk.buildExternalProofImportAdapterPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/import-adapter/summary') {
+    sendJson(res, 200, proofSdk.summarizeExternalProofImportAdapterPack());
+    return;
+  }
+
   if (req.method === 'GET' && url.pathname === '/v1/proof-center/default-loops') {
     sendJson(res, 200, proofSdk.buildDefaultProofLoopCatalog());
     return;
@@ -2443,6 +2533,39 @@ async function routeRequest(req, res) {
     return;
   }
 
+  if (req.method === 'POST' && url.pathname === '/v1/proof-center/import-adapter/review') {
+    try {
+      const body = await readJsonBody(req);
+      const result = proofSdk.reviewExternalProofImport(body);
+      sendJson(res, 200, result);
+    } catch (error) {
+      sendJson(res, 400, { ok: false, reason: error.message });
+    }
+    return;
+  }
+
+  if (req.method === 'POST' && url.pathname === '/v1/proof-center/import-adapter/review/summary') {
+    try {
+      const body = await readJsonBody(req);
+      const result = proofSdk.summarizeExternalProofImportReview(body);
+      sendJson(res, 200, result);
+    } catch (error) {
+      sendJson(res, 400, { ok: false, reason: error.message });
+    }
+    return;
+  }
+
+  if (req.method === 'POST' && url.pathname === '/v1/proof-center/import-adapter/run') {
+    try {
+      const body = await readJsonBody(req);
+      const result = proofSdk.runExternalProofImport(body);
+      sendJson(res, 200, result);
+    } catch (error) {
+      sendJson(res, 400, { ok: false, reason: error.message });
+    }
+    return;
+  }
+
   if (req.method === 'POST' && url.pathname === '/v1/proof-center/transaction-handoff/run') {
     try {
       const body = await readJsonBody(req);
@@ -3687,8 +3810,8 @@ function createServer() {
 }
 
 if (require.main === module) {
-  const port = Number(process.env.XOONYA_PORT || 4310);
-  const host = process.env.XOONYA_HOST || '127.0.0.1';
+  const port = Number(process.env.PORT || process.env.XOONYA_PORT || 4310);
+  const host = process.env.XOONYA_HOST || (process.env.RENDER ? '0.0.0.0' : '127.0.0.1');
   const server = createServer();
   server.listen(port, host, () => {
     console.log(`xoonya listening on http://${host}:${port}`);

package/vectors/adversarial-vectors.json

@@ -48,7 +48,7 @@
           "domain_id": "vectors.demo",
           "sequence": "42",
           "event_commitment": "b4b46b678b96cba7bdfd1a51776c6b5e343eefd6fc84ec2825e86a57d4f59c7c",
-          "algorithm": "none",
+          "algorithm": "detached-assertion-v1",
           "signature": ""
         }
       },
@@ -75,11 +75,382 @@
           "domain_id": "vectors.demo",
           "sequence": "42",
           "event_commitment": "efefefefefefefefefefefefefefefefefefefefefefefefefefefefefefefef",
-          "algorithm": "none",
+          "algorithm": "detached-assertion-v1",
           "signature": "sig-demo-001"
         }
       },
       "expected_reason": "event_commitment_mismatch"
+    },
+    {
+      "id": "reject-ambiguous-none-method",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.demo",
+          "sequence": "42",
+          "actor_id": "agent-demo",
+          "adapter_source": "vector-suite",
+          "event_type": "demo.event",
+          "event_hash": "1212121212121212121212121212121212121212121212121212121212121212",
+          "parent_refs": [
+            "parent-a",
+            "parent-b"
+          ],
+          "capability_refs": [
+            "proof",
+            "demo"
+          ],
+          "semantic_slots": {
+            "alpha": "a",
+            "beta": "b"
+          }
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "21e215294241a765326c085e8fdc2b258ca2dd8af19ea2994de2bf796a3a7c4b",
+          "agent_identity": "agent-demo-signing",
+          "domain_id": "vectors.demo",
+          "sequence": "42",
+          "event_commitment": "b4b46b678b96cba7bdfd1a51776c6b5e343eefd6fc84ec2825e86a57d4f59c7c",
+          "algorithm": "none",
+          "signature": "sig-demo-001"
+        }
+      },
+      "expected_reason": "verification_method_none"
+    },
+    {
+      "id": "reject-unsupported-proof-method",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.demo",
+          "sequence": "42",
+          "actor_id": "agent-demo",
+          "adapter_source": "vector-suite",
+          "event_type": "demo.event",
+          "event_hash": "1212121212121212121212121212121212121212121212121212121212121212",
+          "parent_refs": [
+            "parent-a",
+            "parent-b"
+          ],
+          "capability_refs": [
+            "proof",
+            "demo"
+          ],
+          "semantic_slots": {
+            "alpha": "a",
+            "beta": "b"
+          }
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "21e215294241a765326c085e8fdc2b258ca2dd8af19ea2994de2bf796a3a7c4b",
+          "agent_identity": "agent-demo-signing",
+          "domain_id": "vectors.demo",
+          "sequence": "42",
+          "event_commitment": "b4b46b678b96cba7bdfd1a51776c6b5e343eefd6fc84ec2825e86a57d4f59c7c",
+          "algorithm": "jwt-vc-demo",
+          "signature": "sig-demo-001"
+        }
+      },
+      "expected_reason": "verification_method_unsupported"
+    },
+    {
+      "id": "reject-replayed-receipt-sequence",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.native",
+          "sequence": "8",
+          "actor_id": "agent-native",
+          "adapter_source": "vector-suite",
+          "event_type": "native.event",
+          "event_hash": "3434343434343434343434343434343434343434343434343434343434343434"
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "7c4930d56110f0b9623f79025c7be4789e0c0a6155b2645b243ce4c126f53e96",
+          "agent_identity": "agent-native-signing",
+          "domain_id": "vectors.native",
+          "sequence": "7",
+          "event_commitment": "7361278f20b4d6c6f305ebfb490989b0faa3928823954d1852a7d7e78d92d8cd",
+          "algorithm": "xoonya-native-sha256-v1",
+          "signature": "xoonya-native-sha256-v1:572af7d74cd00b96e54352b113036b9b4473bcef799bd69606ecf40eee86f165"
+        }
+      },
+      "expected_reason": "receipt_sequence_mismatch"
+    },
+    {
+      "id": "reject-native-signature-tamper",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.native",
+          "sequence": "7",
+          "actor_id": "agent-native",
+          "adapter_source": "vector-suite",
+          "event_type": "native.event",
+          "event_hash": "3434343434343434343434343434343434343434343434343434343434343434"
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "7c4930d56110f0b9623f79025c7be4789e0c0a6155b2645b243ce4c126f53e96",
+          "agent_identity": "agent-native-signing",
+          "domain_id": "vectors.native",
+          "sequence": "7",
+          "event_commitment": "7361278f20b4d6c6f305ebfb490989b0faa3928823954d1852a7d7e78d92d8cd",
+          "algorithm": "xoonya-native-sha256-v1",
+          "signature": "xoonya-native-sha256-v1:572af7d74cd00b96e54352b113036b9b4473bcef799bd69606ecf40eee86f160"
+        }
+      },
+      "expected_reason": "signature_native_mismatch"
+    },
+    {
+      "id": "reject-native-method-downgrade",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.native",
+          "sequence": "7",
+          "actor_id": "agent-native",
+          "adapter_source": "vector-suite",
+          "event_type": "native.event",
+          "event_hash": "3434343434343434343434343434343434343434343434343434343434343434"
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "7c4930d56110f0b9623f79025c7be4789e0c0a6155b2645b243ce4c126f53e96",
+          "agent_identity": "agent-native-signing",
+          "domain_id": "vectors.native",
+          "sequence": "7",
+          "event_commitment": "7361278f20b4d6c6f305ebfb490989b0faa3928823954d1852a7d7e78d92d8cd",
+          "algorithm": "detached-assertion-v1",
+          "signature": "xoonya-native-sha256-v1:572af7d74cd00b96e54352b113036b9b4473bcef799bd69606ecf40eee86f165"
+        }
+      },
+      "expected_reason": "signature_method_mismatch"
+    },
+    {
+      "id": "reject-native-signed-signature-tamper",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.native.signed",
+          "sequence": "9",
+          "actor_id": "agent-native-signed",
+          "adapter_source": "vector-suite",
+          "event_type": "native.signed.event",
+          "event_hash": "4545454545454545454545454545454545454545454545454545454545454545"
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "18e77f9ba51b74da7e1fab9a25c35f560e2e9441d54c9d47b0b2f18a366c5e38",
+          "agent_identity": "agent-native-signed-key",
+          "domain_id": "vectors.native.signed",
+          "sequence": "9",
+          "event_commitment": "3218fa3b29f4e4927b275c99d831d1ce472bc5d40e255ce93076eb551725ecd8",
+          "algorithm": "xoonya-native-signed-v1",
+          "native_proof": {
+            "method": "xoonya-native-signed-v1",
+            "signature_suite": "ed25519",
+            "identity_ref": "did:xoonya:agent-native-signed-key",
+            "public_key_ref": "ed25519-spki-sha256:e5b324c6836ecf00f1b9b322055e5044d2ddeac857b15f7039cdd69a14025197",
+            "public_key_material": {
+              "format": "spki-pem",
+              "value": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEArnC5ARNJQFbPtc6pMrFUz2p043Nbds48Dz66+i1R5gk=\n-----END PUBLIC KEY-----\n"
+            },
+            "proof_material": {
+              "signing_material_sha256": "71476b0e9a1e77ddc592d0035f735bfaa74bd253ad985ed95f5038e023de6b99",
+              "signature": "1n_CkDbWKlVSgwh8XMJn7yHG6U35jIfYViHa43BJ-KV_IvfJGDQkDOkJ0bqJVxliw_d1WqraOHwSIDGrUtdMCA"
+            }
+          },
+          "signature": "xoonya-native-signed-v1:ed25519:1n_CkDbWKlVSgwh8XMJn7yHG6U35jIfYViHa43BJ-KV_IvfJGDQkDOkJ0bqJVxliw_d1WqraOHwSIDGrUtdMCA"
+        }
+      },
+      "expected_reason": "native_signature_invalid"
+    },
+    {
+      "id": "reject-native-signed-public-key-ref-mismatch",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.native.signed",
+          "sequence": "9",
+          "actor_id": "agent-native-signed",
+          "adapter_source": "vector-suite",
+          "event_type": "native.signed.event",
+          "event_hash": "4545454545454545454545454545454545454545454545454545454545454545"
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "18e77f9ba51b74da7e1fab9a25c35f560e2e9441d54c9d47b0b2f18a366c5e38",
+          "agent_identity": "agent-native-signed-key",
+          "domain_id": "vectors.native.signed",
+          "sequence": "9",
+          "event_commitment": "3218fa3b29f4e4927b275c99d831d1ce472bc5d40e255ce93076eb551725ecd8",
+          "algorithm": "xoonya-native-signed-v1",
+          "native_proof": {
+            "method": "xoonya-native-signed-v1",
+            "signature_suite": "ed25519",
+            "identity_ref": "did:xoonya:agent-native-signed-key",
+            "public_key_ref": "ed25519-spki-sha256:e5b324c6836ecf00f1b9b322055e5044d2ddeac857b15f7039cdd69a14025190",
+            "public_key_material": {
+              "format": "spki-pem",
+              "value": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEArnC5ARNJQFbPtc6pMrFUz2p043Nbds48Dz66+i1R5gk=\n-----END PUBLIC KEY-----\n"
+            },
+            "proof_material": {
+              "signing_material_sha256": "71476b0e9a1e77ddc592d0035f735bfaa74bd253ad985ed95f5038e023de6b99",
+              "signature": "0n_CkDbWKlVSgwh8XMJn7yHG6U35jIfYViHa43BJ-KV_IvfJGDQkDOkJ0bqJVxliw_d1WqraOHwSIDGrUtdMCA"
+            }
+          },
+          "signature": "xoonya-native-signed-v1:ed25519:0n_CkDbWKlVSgwh8XMJn7yHG6U35jIfYViHa43BJ-KV_IvfJGDQkDOkJ0bqJVxliw_d1WqraOHwSIDGrUtdMCA"
+        }
+      },
+      "expected_reason": "native_public_key_ref_mismatch"
+    },
+    {
+      "id": "reject-native-anchored-bundle-missing",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.native.anchored",
+          "sequence": "10",
+          "actor_id": "agent-native-anchored",
+          "adapter_source": "vector-suite",
+          "event_type": "native.anchored.event",
+          "event_hash": "6767676767676767676767676767676767676767676767676767676767676767"
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "443b44df7814707f1fc4a910dbb33b93c7d15423308130b0ca42d5bdc093371b",
+          "agent_identity": "agent-native-anchored-signing",
+          "domain_id": "vectors.native.anchored",
+          "sequence": "10",
+          "event_commitment": "0371a4395e6635f600506dd045a91c3597561d8511a1690d304009358447ec9f",
+          "algorithm": "xoonya-native-anchored-v1",
+          "native_proof": {
+            "method": "xoonya-native-anchored-v1",
+            "base_method": "xoonya-native-sha256-v1",
+            "anchor_refs": [
+              {
+                "anchor_id": "anchor-bsv-finality-demo",
+                "anchor_kind": "finality_ref",
+                "anchor_ref": "bsv:mainnet:tx/9cd77fd24b884b281c819b3e48f6b15ed328b116939b082580924cabb4518d28",
+                "anchor_hash_sha256": "153ae82600b8eb1d14ca0a9b7bfac3e14f2237e734ec804628c1bf0e832e3a3f",
+                "network": "bsv-mainnet",
+                "finality_state": "finalized",
+                "provider_ref": "operator-finality-material"
+              }
+            ],
+            "proof_material": {
+              "anchor_root_sha256": "fccb0a98893181411c65f8b8176a169b188c06704fb0846ba43b88a5e2548e11",
+              "binding_material_sha256": "50ce853e5d2429cdf53d720df889349c398a4d4bffa71f7a0a74727ba802fd91"
+            }
+          },
+          "signature": "xoonya-native-anchored-v1:50ce853e5d2429cdf53d720df889349c398a4d4bffa71f7a0a74727ba802fd91"
+        }
+      },
+      "expected_reason": "native_anchor_bundle_missing"
+    },
+    {
+      "id": "reject-native-anchored-binding-tamper",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.native.anchored",
+          "sequence": "10",
+          "actor_id": "agent-native-anchored",
+          "adapter_source": "vector-suite",
+          "event_type": "native.anchored.event",
+          "event_hash": "6767676767676767676767676767676767676767676767676767676767676767"
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "443b44df7814707f1fc4a910dbb33b93c7d15423308130b0ca42d5bdc093371b",
+          "agent_identity": "agent-native-anchored-signing",
+          "domain_id": "vectors.native.anchored",
+          "sequence": "10",
+          "event_commitment": "0371a4395e6635f600506dd045a91c3597561d8511a1690d304009358447ec9f",
+          "algorithm": "xoonya-native-anchored-v1",
+          "native_proof": {
+            "method": "xoonya-native-anchored-v1",
+            "base_method": "xoonya-native-sha256-v1",
+            "anchor_refs": [
+              {
+                "anchor_id": "anchor-bsv-finality-demo",
+                "anchor_kind": "finality_ref",
+                "anchor_ref": "bsv:mainnet:tx/9cd77fd24b884b281c819b3e48f6b15ed328b116939b082580924cabb4518d28",
+                "anchor_hash_sha256": "153ae82600b8eb1d14ca0a9b7bfac3e14f2237e734ec804628c1bf0e832e3a3f",
+                "network": "bsv-mainnet",
+                "finality_state": "finalized",
+                "provider_ref": "operator-finality-material"
+              }
+            ],
+            "proof_material": {
+              "anchor_root_sha256": "fccb0a98893181411c65f8b8176a169b188c06704fb0846ba43b88a5e2548e11",
+              "binding_material_sha256": "00ce853e5d2429cdf53d720df889349c398a4d4bffa71f7a0a74727ba802fd91"
+            }
+          },
+          "signature": "xoonya-native-anchored-v1:50ce853e5d2429cdf53d720df889349c398a4d4bffa71f7a0a74727ba802fd91"
+        },
+        "anchors": [
+          {
+            "anchor_id": "anchor-bsv-finality-demo",
+            "anchor_kind": "finality_ref",
+            "anchor_ref": "bsv:mainnet:tx/9cd77fd24b884b281c819b3e48f6b15ed328b116939b082580924cabb4518d28",
+            "anchor_hash_sha256": "153ae82600b8eb1d14ca0a9b7bfac3e14f2237e734ec804628c1bf0e832e3a3f",
+            "network": "bsv-mainnet",
+            "finality_state": "finalized",
+            "provider_ref": "operator-finality-material"
+          }
+        ]
+      },
+      "expected_reason": "native_anchor_binding_hash_mismatch"
+    },
+    {
+      "id": "reject-receipt-id-mismatch",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.native",
+          "sequence": "7",
+          "actor_id": "agent-native",
+          "adapter_source": "vector-suite",
+          "event_type": "native.event",
+          "event_hash": "3434343434343434343434343434343434343434343434343434343434343434"
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "0000000000000000000000000000000000000000000000000000000000000000",
+          "agent_identity": "agent-native-signing",
+          "domain_id": "vectors.native",
+          "sequence": "7",
+          "event_commitment": "7361278f20b4d6c6f305ebfb490989b0faa3928823954d1852a7d7e78d92d8cd",
+          "algorithm": "xoonya-native-sha256-v1",
+          "signature": "xoonya-native-sha256-v1:572af7d74cd00b96e54352b113036b9b4473bcef799bd69606ecf40eee86f165"
+        }
+      },
+      "expected_reason": "receipt_id_mismatch"
     }
   ]
 }