xoonya 3.0.0 → 3.1.0

package/lib/offline_verifiability_recovery_contract.js

@@ -0,0 +1,155 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildOfflineVerifiabilityRecoveryContractPack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "naxytra-offline-verifiability-recovery-contract",
+    pack_version: "naxytra-offline-verifiability-recovery-contract-v1",
+    doctrine: "xoonya_keeps_evidence_verifiable_and_recoverable_when_live_provider_paths_are_unavailable",
+    model_state: "core_now",
+    core_claim: "offline mode remains a bounded operational mode with explicit verification restore and evidence lineage rules",
+    offline_states: [
+      { state: "online", description: "normal live operation" },
+      { state: "degraded", description: "limited live capability but still operational" },
+      { state: "offline_verify_only", description: "local evidence verification without live provider dependence" },
+      { state: "restore_pending", description: "durable data is being restored or validated" },
+      { state: "restored", description: "state has been restored and revalidated" }
+    ],
+    verifiable_offline_inputs: [
+      "operational_receipts",
+      "proof_bundles",
+      "registry_records",
+      "identity_or_authority_bindings",
+      "release_and_provenance_artifacts",
+      "checksum_or_hash_manifests"
+    ],
+    recovery_inputs: [
+      "receipts",
+      "proof_bundles",
+      "registry_snapshots",
+      "operator_notes_where_required",
+      "release_evidence",
+      "backup_manifests"
+    ],
+    recovery_rules: [
+      "backups_must_be_versioned",
+      "restore_targets_must_be_explicit",
+      "restore_actions_must_be_replayable_or_at_least_auditable",
+      "restored_state_must_preserve_evidence_lineage",
+      "restore_procedures_must_not_silently_rewrite_the_canonical_record"
+    ],
+    offline_verification_rules: [
+      "local_verification_must_not_depend_on_live_provider_truth_for_the_base_evidence_record",
+      "imported_evidence_must_keep_its_source_boundary_explicit",
+      "cryptographic_checks_must_be_deterministic",
+      "if_an_external_claim_cannot_be_verified_locally_that_limitation_must_be_recorded"
+    ],
+    canonical_objects: [
+      {
+        object_id: "offline_verification_record",
+        role: "local_verification_or_restore_state_record",
+        required_fields: [
+          "version",
+          "state",
+          "record_id",
+          "created_at_iso",
+          "actor_id",
+          "evidence_refs"
+        ],
+        recommended_fields: [
+          "backup_ref",
+          "restore_ref",
+          "proof_ref",
+          "registry_snapshot_ref",
+          "hash_manifest_ref"
+        ],
+        optional_fields: [
+          "limitation_notes",
+          "metadata"
+        ],
+        primary_surfaces: [
+          "/v1/proof-truth",
+          "/v1/proof-truth/summary",
+          "/v1/provenance",
+          "/v1/provenance/summary",
+          "/v1/security-reliability-drills"
+        ]
+      }
+    ],
+    lineage_model: [
+      {
+        layer_id: "offline_verification",
+        order_index: 1,
+        objects: ["offline_verification_record"],
+        invariants: [
+          "local_verification_can_run_without_live_provider_truth",
+          "evidence_boundary_remains_explicit"
+        ]
+      },
+      {
+        layer_id: "restore_and_replay",
+        order_index: 2,
+        objects: ["offline_verification_record"],
+        invariants: [
+          "restores_preserve_lineage",
+          "restore_state_is_auditable"
+        ]
+      },
+      {
+        layer_id: "post_restore_followthrough",
+        order_index: 3,
+        objects: ["offline_verification_record"],
+        invariants: [
+          "restored_state_can_rejoin_live_operation_after_revalidation",
+          "offline_verification_does_not_redefine_core_truth"
+        ]
+      }
+    ],
+    invariants: [
+      "offline_mode_is_bounded",
+      "restore_events_are_evidence_events",
+      "local_verification_does_not_require_live_provider_truth_for_base_evidence",
+      "restore_procedures_preserve_lineage",
+      "offline_verification_is_a_proof_followthrough_mode_not_a_new_proof_standard"
+    ],
+    linked_surfaces: {
+      proof_truth_ref: "/v1/proof-truth",
+      proof_truth_summary_ref: "/v1/proof-truth/summary",
+      provenance_ref: "/v1/provenance",
+      security_reliability_drills_ref: "/v1/security-reliability-drills",
+      release_verification_receipt_ref: "/v1/release-verification-receipt"
+    },
+    claim_boundary: "claim_the_offline_verification_and_recovery_followthrough_only_without_claiming_live_provider_truth_or_universal_availability"
+  };
+}
+
+function summarizeOfflineVerifiabilityRecoveryContractPack() {
+  const pack = buildOfflineVerifiabilityRecoveryContractPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    summary_version: "naxytra-offline-verifiability-recovery-contract-summary-v1",
+    pack_version: pack.pack_version,
+    model_state: pack.model_state,
+    offline_state_count: pack.offline_states.length,
+    offline_input_count: pack.verifiable_offline_inputs.length,
+    recovery_input_count: pack.recovery_inputs.length,
+    rule_count: pack.recovery_rules.length,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+function getOfflineStateDetail(state) {
+  const normalized = String(state || "").trim().toLowerCase();
+  return (buildOfflineVerifiabilityRecoveryContractPack().offline_states || []).find((entry) => entry.state === normalized) || null;
+}
+
+module.exports = {
+  buildOfflineVerifiabilityRecoveryContractPack,
+  summarizeOfflineVerifiabilityRecoveryContractPack,
+  getOfflineStateDetail
+};

package/lib/openapi_contract.js

@@ -1,227 +1,227 @@
-"use strict";
-
-const pkg = require("../package.json");
-
-function buildOpenApiDocument() {
-  return {
-    openapi: "3.1.0",
-    info: {
-      title: "xoonya Public HTTP Contract",
-      version: pkg.version,
-      summary: "Proof and review contract for the stable public HTTP layer.",
-      description: "This OpenAPI document exposes the stable builder-facing proof, review, and compatibility surfaces that outside builders should rely on first.",
-      contact: {
-        name: "naxytra"
-      }
-    },
-    jsonSchemaDialect: "https://spec.openapis.org/oas/3.1/dialect/base",
-    servers: [
-      {
-        url: "http://127.0.0.1:4340",
-        description: "Local xoonya service"
-      }
-    ],
-    tags: [
-      { name: "health", description: "Service health and readiness." },
-      { name: "proof-center", description: "Core proof and review surfaces." },
-      { name: "events", description: "Canonicalization, hashing, and receipt emission." },
-      { name: "proof-bundles", description: "Proof bundle build and verify surfaces." },
-      { name: "compatibility", description: "Compatibility verification surfaces." },
-      { name: "intelligence", description: "Proof-side intelligence and role surfaces." }
-    ],
-    paths: {
-      "/health": {
-        get: {
-          tags: ["health"],
-          summary: "Health check",
-          operationId: "getHealth",
-          responses: {
-            "200": { description: "Service health response" }
-          }
-        }
-      },
-      "/v1/proof-center": {
-        get: {
-          tags: ["proof-center"],
-          summary: "Get proof center bundle",
-          operationId: "getProofCenter",
-          responses: {
-            "200": { description: "Proof center bundle" }
-          }
-        }
-      },
-      "/v1/proof-center/summary": {
-        get: {
-          tags: ["proof-center"],
-          summary: "Get proof center summary",
-          operationId: "getProofCenterSummary",
-          responses: {
-            "200": { description: "Proof center summary" }
-          }
-        }
-      },
-      "/v1/events/canonicalize": {
-        post: {
-          tags: ["events"],
-          summary: "Canonicalize event payload",
-          operationId: "canonicalizeEvent",
-          responses: {
-            "200": { description: "Canonical event response" },
-            "400": { description: "Invalid event payload" }
-          }
-        }
-      },
-      "/v1/events/hash": {
-        post: {
-          tags: ["events"],
-          summary: "Hash canonical event payload",
-          operationId: "hashEvent",
-          responses: {
-            "200": { description: "Event hash response" },
-            "400": { description: "Invalid event payload" }
-          }
-        }
-      },
-      "/v1/receipts/emit": {
-        post: {
-          tags: ["events"],
-          summary: "Emit proof receipt",
-          operationId: "emitReceipt",
-          responses: {
-            "200": { description: "Receipt emission response" },
-            "400": { description: "Invalid receipt emission request" }
-          }
-        }
-      },
-      "/v1/proof-bundles/build": {
-        post: {
-          tags: ["proof-bundles"],
-          summary: "Build proof bundle",
-          operationId: "buildProofBundle",
-          responses: {
-            "200": { description: "Proof bundle created" },
-            "400": { description: "Invalid proof bundle request" }
-          }
-        }
-      },
-      "/v1/proof-bundles/verify": {
-        post: {
-          tags: ["proof-bundles"],
-          summary: "Verify proof bundle",
-          operationId: "verifyProofBundle",
-          responses: {
-            "200": { description: "Proof bundle verification result" },
-            "400": { description: "Invalid proof verification request" }
-          }
-        }
-      },
-      "/v1/receipts/verify": {
-        post: {
-          tags: ["compatibility"],
-          summary: "Verify receipt",
-          operationId: "verifyReceipt",
-          responses: {
-            "200": { description: "Receipt verification result" },
-            "400": { description: "Invalid receipt verification request" }
-          }
-        }
-      },
-      "/v1/proof-center/bridge/economic-handoff": {
-        post: {
-          tags: ["proof-center"],
-          summary: "Bridge economic handoff into proof review",
-          operationId: "bridgeEconomicHandoff",
-          responses: {
-            "200": { description: "Economic handoff bridge result" },
-            "400": { description: "Invalid handoff payload" }
-          }
-        }
-      },
-      "/v1/trust-intelligence/summary": {
-        get: {
-          tags: ["intelligence"],
-          summary: "Get trust intelligence summary",
-          operationId: "getTrustIntelligenceSummary",
-          responses: {
-            "200": { description: "Trust intelligence summary" }
-          }
-        }
-      },
-      "/v1/governance-intelligence/summary": {
-        get: {
-          tags: ["intelligence"],
-          summary: "Get governance intelligence summary",
-          operationId: "getGovernanceIntelligenceSummary",
-          responses: {
-            "200": { description: "Governance intelligence summary" }
-          }
-        }
-      },
-      "/v1/role-freeze/package": {
-        get: {
-          tags: ["intelligence"],
-          summary: "Get canonical role-freeze package",
-          operationId: "getRoleFreezePackage",
-          responses: {
-            "200": { description: "Role-freeze package" }
-          }
-        }
-      },
-      "/v1/role-transition": {
-        get: {
-          tags: ["intelligence"],
-          summary: "Get role transition direction package",
-          operationId: "getRoleTransition",
-          responses: {
-            "200": { description: "Role transition package" }
-          }
-        }
-      },
-      "/v1/capability-registry-home": {
-        get: {
-          tags: ["intelligence"],
-          summary: "Get capability registry home direction package",
-          operationId: "getCapabilityRegistryHome",
-          responses: {
-            "200": { description: "Capability registry home package" }
-          }
-        }
-      }
-    },
-    "x-naxytra-contract": {
-      product: "xoonya",
-      stability: "stable_public_http_layer",
-      route_count: 14,
-      target_audience: ["builders", "partners", "reviewers"],
-      linked_docs: [
-        "SERVICE_CONTRACT.md",
-        "FINAL_CONTRACT.md",
-        "START_HERE.md"
-      ]
-    }
-  };
-}
-
-function summarizeOpenApiDocument() {
-  const document = buildOpenApiDocument();
-  return {
-    product: "xoonya",
-    category: "proof-openapi-contract-summary",
-    summary_version: "xoonya-openapi-contract-summary-v1",
-    openapi_version: document.openapi,
-    info_version: document.info.version,
-    path_count: Object.keys(document.paths).length,
-    server_count: document.servers.length,
-    primary_protocol_lanes: ["http", "proof", "bridge"],
-    linked_surfaces: {
-      openapi_ref: "/openapi.json",
-      service_contract_ref: "SERVICE_CONTRACT.md",
-      final_contract_ref: "FINAL_CONTRACT.md"
-    }
-  };
-}
-
-module.exports = {
-  buildOpenApiDocument,
-  summarizeOpenApiDocument
-};
+"use strict";
+
+const pkg = require("../package.json");
+
+function buildOpenApiDocument() {
+  return {
+    openapi: "3.1.0",
+    info: {
+      title: "xoonya Public HTTP Contract",
+      version: pkg.version,
+      summary: "Proof and review contract for the stable public HTTP layer.",
+      description: "This OpenAPI document exposes the stable builder-facing proof, review, and compatibility surfaces that outside builders should rely on first.",
+      contact: {
+        name: "naxytra"
+      }
+    },
+    jsonSchemaDialect: "https://spec.openapis.org/oas/3.1/dialect/base",
+    servers: [
+      {
+        url: "http://127.0.0.1:4340",
+        description: "Local xoonya service"
+      }
+    ],
+    tags: [
+      { name: "health", description: "Service health and readiness." },
+      { name: "proof-center", description: "Core proof and review surfaces." },
+      { name: "events", description: "Canonicalization, hashing, and receipt emission." },
+      { name: "proof-bundles", description: "Proof bundle build and verify surfaces." },
+      { name: "compatibility", description: "Compatibility verification surfaces." },
+      { name: "intelligence", description: "Proof-side intelligence and role surfaces." }
+    ],
+    paths: {
+      "/health": {
+        get: {
+          tags: ["health"],
+          summary: "Health check",
+          operationId: "getHealth",
+          responses: {
+            "200": { description: "Service health response" }
+          }
+        }
+      },
+      "/v1/proof-center": {
+        get: {
+          tags: ["proof-center"],
+          summary: "Get proof center bundle",
+          operationId: "getProofCenter",
+          responses: {
+            "200": { description: "Proof center bundle" }
+          }
+        }
+      },
+      "/v1/proof-center/summary": {
+        get: {
+          tags: ["proof-center"],
+          summary: "Get proof center summary",
+          operationId: "getProofCenterSummary",
+          responses: {
+            "200": { description: "Proof center summary" }
+          }
+        }
+      },
+      "/v1/events/canonicalize": {
+        post: {
+          tags: ["events"],
+          summary: "Canonicalize event payload",
+          operationId: "canonicalizeEvent",
+          responses: {
+            "200": { description: "Canonical event response" },
+            "400": { description: "Invalid event payload" }
+          }
+        }
+      },
+      "/v1/events/hash": {
+        post: {
+          tags: ["events"],
+          summary: "Hash canonical event payload",
+          operationId: "hashEvent",
+          responses: {
+            "200": { description: "Event hash response" },
+            "400": { description: "Invalid event payload" }
+          }
+        }
+      },
+      "/v1/receipts/emit": {
+        post: {
+          tags: ["events"],
+          summary: "Emit proof receipt",
+          operationId: "emitReceipt",
+          responses: {
+            "200": { description: "Receipt emission response" },
+            "400": { description: "Invalid receipt emission request" }
+          }
+        }
+      },
+      "/v1/proof-bundles/build": {
+        post: {
+          tags: ["proof-bundles"],
+          summary: "Build proof bundle",
+          operationId: "buildProofBundle",
+          responses: {
+            "200": { description: "Proof bundle created" },
+            "400": { description: "Invalid proof bundle request" }
+          }
+        }
+      },
+      "/v1/proof-bundles/verify": {
+        post: {
+          tags: ["proof-bundles"],
+          summary: "Verify proof bundle",
+          operationId: "verifyProofBundle",
+          responses: {
+            "200": { description: "Proof bundle verification result" },
+            "400": { description: "Invalid proof verification request" }
+          }
+        }
+      },
+      "/v1/receipts/verify": {
+        post: {
+          tags: ["compatibility"],
+          summary: "Verify receipt",
+          operationId: "verifyReceipt",
+          responses: {
+            "200": { description: "Receipt verification result" },
+            "400": { description: "Invalid receipt verification request" }
+          }
+        }
+      },
+      "/v1/proof-center/bridge/economic-handoff": {
+        post: {
+          tags: ["proof-center"],
+          summary: "Bridge economic handoff into proof review",
+          operationId: "bridgeEconomicHandoff",
+          responses: {
+            "200": { description: "Economic handoff bridge result" },
+            "400": { description: "Invalid handoff payload" }
+          }
+        }
+      },
+      "/v1/trust-intelligence/summary": {
+        get: {
+          tags: ["intelligence"],
+          summary: "Get trust intelligence summary",
+          operationId: "getTrustIntelligenceSummary",
+          responses: {
+            "200": { description: "Trust intelligence summary" }
+          }
+        }
+      },
+      "/v1/governance-intelligence/summary": {
+        get: {
+          tags: ["intelligence"],
+          summary: "Get governance intelligence summary",
+          operationId: "getGovernanceIntelligenceSummary",
+          responses: {
+            "200": { description: "Governance intelligence summary" }
+          }
+        }
+      },
+      "/v1/role-freeze/package": {
+        get: {
+          tags: ["intelligence"],
+          summary: "Get canonical role-freeze package",
+          operationId: "getRoleFreezePackage",
+          responses: {
+            "200": { description: "Role-freeze package" }
+          }
+        }
+      },
+      "/v1/role-transition": {
+        get: {
+          tags: ["intelligence"],
+          summary: "Get role transition direction package",
+          operationId: "getRoleTransition",
+          responses: {
+            "200": { description: "Role transition package" }
+          }
+        }
+      },
+      "/v1/capability-registry-home": {
+        get: {
+          tags: ["intelligence"],
+          summary: "Get capability registry home direction package",
+          operationId: "getCapabilityRegistryHome",
+          responses: {
+            "200": { description: "Capability registry home package" }
+          }
+        }
+      }
+    },
+    "x-naxytra-contract": {
+      product: "xoonya",
+      stability: "stable_public_http_layer",
+      route_count: 14,
+      target_audience: ["builders", "partners", "reviewers"],
+      linked_docs: [
+        "SERVICE_CONTRACT.md",
+        "FINAL_CONTRACT.md",
+        "START_HERE.md"
+      ]
+    }
+  };
+}
+
+function summarizeOpenApiDocument() {
+  const document = buildOpenApiDocument();
+  return {
+    product: "xoonya",
+    category: "proof-openapi-contract-summary",
+    summary_version: "xoonya-openapi-contract-summary-v1",
+    openapi_version: document.openapi,
+    info_version: document.info.version,
+    path_count: Object.keys(document.paths).length,
+    server_count: document.servers.length,
+    primary_protocol_lanes: ["http", "proof", "bridge"],
+    linked_surfaces: {
+      openapi_ref: "/openapi.json",
+      service_contract_ref: "SERVICE_CONTRACT.md",
+      final_contract_ref: "FINAL_CONTRACT.md"
+    }
+  };
+}
+
+module.exports = {
+  buildOpenApiDocument,
+  summarizeOpenApiDocument
+};