xoonya 3.0.1 → 3.1.0

package/lib/cloudevents_contract.js

@@ -1,79 +1,79 @@
-"use strict";
-
-const pkg = require("../package.json");
-
-function buildCloudEventsContract() {
-  return {
-    product: "xoonya",
-    category: "proof-cloudevents-contract",
-    contract_version: "xoonya-cloudevents-contract-v1",
-    specversion: "1.0",
-    service_version: pkg.version,
-    envelope: {
-      required_attributes: ["specversion", "id", "source", "type", "time", "subject", "datacontenttype", "data"],
-      datacontenttype_default: "application/json",
-      source_prefix: "urn:naxytra:xoonya",
-      id_shape: "evt_<opaque_id>",
-      time_format: "RFC3339"
-    },
-    event_families: [
-      {
-        type: "io.naxytra.xoonya.event.canonicalized",
-        source: "urn:naxytra:xoonya:events",
-        subject: "event.canonicalized"
-      },
-      {
-        type: "io.naxytra.xoonya.event.hashed",
-        source: "urn:naxytra:xoonya:events",
-        subject: "event.hashed"
-      },
-      {
-        type: "io.naxytra.xoonya.receipt.emitted",
-        source: "urn:naxytra:xoonya:receipts",
-        subject: "receipt.emitted"
-      },
-      {
-        type: "io.naxytra.xoonya.proof_bundle.built",
-        source: "urn:naxytra:xoonya:proof_bundles",
-        subject: "proof_bundle.built"
-      },
-      {
-        type: "io.naxytra.xoonya.bridge.economic_handoff.accepted",
-        source: "urn:naxytra:xoonya:bridge",
-        subject: "bridge.economic_handoff"
-      }
-    ],
-    stable_http_surfaces: [
-      "/v1/events/canonicalize",
-      "/v1/events/hash",
-      "/v1/receipts/emit",
-      "/v1/proof-bundles/build",
-      "/v1/proof-center/bridge/economic-handoff"
-    ],
-    linked_surfaces: {
-      openapi_ref: "/openapi.json",
-      asyncapi_ref: "/asyncapi.json",
-      service_contract_ref: "SERVICE_CONTRACT.md"
-    }
-  };
-}
-
-function summarizeCloudEventsContract() {
-  const contract = buildCloudEventsContract();
-  return {
-    product: "xoonya",
-    category: "proof-cloudevents-contract-summary",
-    summary_version: "xoonya-cloudevents-contract-summary-v1",
-    specversion: contract.specversion,
-    contract_version: contract.contract_version,
-    event_family_count: contract.event_families.length,
-    stable_surface_count: contract.stable_http_surfaces.length,
-    primary_event_lanes: ["canonicalization", "proof_bundle", "bridge"],
-    linked_surfaces: contract.linked_surfaces
-  };
-}
-
-module.exports = {
-  buildCloudEventsContract,
-  summarizeCloudEventsContract
-};
+"use strict";
+
+const pkg = require("../package.json");
+
+function buildCloudEventsContract() {
+  return {
+    product: "xoonya",
+    category: "proof-cloudevents-contract",
+    contract_version: "xoonya-cloudevents-contract-v1",
+    specversion: "1.0",
+    service_version: pkg.version,
+    envelope: {
+      required_attributes: ["specversion", "id", "source", "type", "time", "subject", "datacontenttype", "data"],
+      datacontenttype_default: "application/json",
+      source_prefix: "urn:naxytra:xoonya",
+      id_shape: "evt_<opaque_id>",
+      time_format: "RFC3339"
+    },
+    event_families: [
+      {
+        type: "io.naxytra.xoonya.event.canonicalized",
+        source: "urn:naxytra:xoonya:events",
+        subject: "event.canonicalized"
+      },
+      {
+        type: "io.naxytra.xoonya.event.hashed",
+        source: "urn:naxytra:xoonya:events",
+        subject: "event.hashed"
+      },
+      {
+        type: "io.naxytra.xoonya.receipt.emitted",
+        source: "urn:naxytra:xoonya:receipts",
+        subject: "receipt.emitted"
+      },
+      {
+        type: "io.naxytra.xoonya.proof_bundle.built",
+        source: "urn:naxytra:xoonya:proof_bundles",
+        subject: "proof_bundle.built"
+      },
+      {
+        type: "io.naxytra.xoonya.bridge.economic_handoff.accepted",
+        source: "urn:naxytra:xoonya:bridge",
+        subject: "bridge.economic_handoff"
+      }
+    ],
+    stable_http_surfaces: [
+      "/v1/events/canonicalize",
+      "/v1/events/hash",
+      "/v1/receipts/emit",
+      "/v1/proof-bundles/build",
+      "/v1/proof-center/bridge/economic-handoff"
+    ],
+    linked_surfaces: {
+      openapi_ref: "/openapi.json",
+      asyncapi_ref: "/asyncapi.json",
+      service_contract_ref: "SERVICE_CONTRACT.md"
+    }
+  };
+}
+
+function summarizeCloudEventsContract() {
+  const contract = buildCloudEventsContract();
+  return {
+    product: "xoonya",
+    category: "proof-cloudevents-contract-summary",
+    summary_version: "xoonya-cloudevents-contract-summary-v1",
+    specversion: contract.specversion,
+    contract_version: contract.contract_version,
+    event_family_count: contract.event_families.length,
+    stable_surface_count: contract.stable_http_surfaces.length,
+    primary_event_lanes: ["canonicalization", "proof_bundle", "bridge"],
+    linked_surfaces: contract.linked_surfaces
+  };
+}
+
+module.exports = {
+  buildCloudEventsContract,
+  summarizeCloudEventsContract
+};

package/lib/crypto_agility_matrix.js

@@ -0,0 +1,125 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildCryptoAgilityMatrixPack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "naxytra-crypto-agility-matrix",
+    pack_version: "naxytra-crypto-agility-matrix-v1",
+    doctrine: "xoonya_verifies_crypto_agility_boundaries_without_claiming_unverified_future_algorithms_as_current_proof_truth",
+    model_state: "core_now",
+    core_claim: "the proof stack must be explicit about which algorithms are core today, supported today, future lane, blocked, or never core",
+    lane_classes: [
+      {
+        lane_class: "core_today",
+        description: "verified and claimable today",
+        items: [
+          "sha256_domain_separated_commitments",
+          "ed25519",
+          "secp256k1",
+          "p256",
+          "native_anchor_binding",
+          "line_rate_transport_frame"
+        ]
+      },
+      {
+        lane_class: "supported_today",
+        description: "supported as interop or external verification lanes today",
+        items: [
+          "jwt",
+          "jws",
+          "jwk",
+          "did",
+          "vc",
+          "sd_jwt_vc",
+          "webauthn_cose_when_verifier_present"
+        ]
+      },
+      {
+        lane_class: "future_lane",
+        description: "explicit future cryptographic direction, not claimable as the current core",
+        items: [
+          "ml_dsa",
+          "slh_dsa",
+          "xoonya_native_hybrid_v1",
+          "xoonya_native_atom_v2"
+        ]
+      },
+      {
+        lane_class: "blocked_until_vectors",
+        description: "not claimable until validators and vectors exist",
+        items: [
+          "webauthn_cose",
+          "dilithium",
+          "falcon",
+          "sphincs_plus"
+        ]
+      },
+      {
+        lane_class: "never_core",
+        description: "must never become implicit or silent core behavior",
+        items: [
+          "silent_algorithm_negotiation",
+          "implicit_downgrade",
+          "unversioned_signature_assumptions",
+          "hidden_verifier_boundaries"
+        ]
+      }
+    ],
+    signature_suites: [
+      { suite_id: "ed25519", state: "core_today" },
+      { suite_id: "secp256k1", state: "core_today" },
+      { suite_id: "p256", state: "core_today" },
+      { suite_id: "webauthn-cose", state: "blocked_until_vectors" },
+      { suite_id: "dilithium", state: "blocked_until_vectors" },
+      { suite_id: "falcon", state: "blocked_until_vectors" },
+      { suite_id: "sphincs-plus", state: "blocked_until_vectors" },
+      { suite_id: "ml-dsa", state: "future_lane" },
+      { suite_id: "slh-dsa", state: "future_lane" }
+    ],
+    proof_envelope_rules: [
+      "signature_suite_must_be_explicit",
+      "unsupported_suites_must_not_be_claimed_as_verified",
+      "native_proof_methods_remain_optional",
+      "envelopes_must_not_redefine_receipt_validity",
+      "envelope_claims_must_stay_bounded_to_verified_behavior"
+    ],
+    linked_surfaces: {
+      native_standard_ref: "/v1/proof-center/native-standard",
+      native_standard_summary_ref: "/v1/proof-center/native-standard/summary",
+      native_atom_spec_ref: "/v1/proof-center/native-atom-spec",
+      native_payload_profile_ref: "/v1/proof-center/native-payload-profile",
+      native_anchor_profile_ref: "/v1/proof-center/native-anchor-profile"
+    },
+    claim_boundary: "claim_the_crypto_agility_policy_for_xoonya_only_without_claiming_unverified_future_algorithms_as_current_core_truth"
+  };
+}
+
+function summarizeCryptoAgilityMatrixPack() {
+  const pack = buildCryptoAgilityMatrixPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    summary_version: "naxytra-crypto-agility-matrix-summary-v1",
+    pack_version: pack.pack_version,
+    model_state: pack.model_state,
+    lane_class_count: pack.lane_classes.length,
+    signature_suite_count: pack.signature_suites.length,
+    rule_count: pack.proof_envelope_rules.length,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+function getCryptoAgilitySuiteDetail(suiteId) {
+  const normalized = String(suiteId || "").trim().toLowerCase();
+  return (buildCryptoAgilityMatrixPack().signature_suites || []).find((entry) => entry.suite_id === normalized) || null;
+}
+
+module.exports = {
+  buildCryptoAgilityMatrixPack,
+  summarizeCryptoAgilityMatrixPack,
+  getCryptoAgilitySuiteDetail
+};