xoonya 3.0.1 → 3.1.1

package/server.js

@@ -85,6 +85,21 @@ const {
   getTrustPortabilityProfile,
   summarizeTrustPortabilityPack
 } = require('./lib/trust_portability_pack');
+const {
+  buildAdapterCertificationContractPack,
+  summarizeAdapterCertificationContractPack,
+  getAdapterCertificationFrontDetail
+} = require('./lib/adapter_certification_contract');
+const {
+  buildTrustPortabilityBoundaryContractPack,
+  summarizeTrustPortabilityBoundaryContractPack,
+  getTrustPortabilityAxisDetail
+} = require('./lib/trust_portability_boundary_contract');
+const {
+  buildSignedAuditProvenanceContractPack,
+  summarizeSignedAuditProvenanceContractPack,
+  getSignedAuditProvenanceSurfaceDetail
+} = require('./lib/signed_audit_provenance_contract');
 const {
   buildProofTruthModelPack,
   summarizeProofTruthModelPack,
@@ -672,40 +687,109 @@ const {
   summarizePhase3DecisionResolutionPack
 } = require('./lib/phase_3_decision_resolution_pack');
 
+const MAX_JSON_BODY_BYTES = 1024 * 1024;
+const REQUEST_TIMEOUT_MS = 30000;
+const HEADERS_TIMEOUT_MS = 15000;
+const PRIVATE_KEY_FIELD_PATTERN = /private_key/i;
+const PRIVATE_KEY_MATERIAL_ENV = 'XOONYA_ACCEPT_PRIVATE_KEY_MATERIAL';
+
 function readJsonBody(req) {
   return new Promise((resolve, reject) => {
-    let body = '';
+    const declaredLength = Number(req.headers['content-length']);
+    if (Number.isFinite(declaredLength) && declaredLength > MAX_JSON_BODY_BYTES) {
+      reject(new Error('request body too large'));
+      req.resume();
+      return;
+    }
+    const chunks = [];
+    let receivedBytes = 0;
+    let settled = false;
     req.on('data', (chunk) => {
-      body += chunk;
-      if (body.length > 1024 * 1024) {
+      if (settled) return;
+      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+      receivedBytes += buffer.length;
+      if (receivedBytes > MAX_JSON_BODY_BYTES) {
+        settled = true;
         reject(new Error('request body too large'));
         req.destroy();
+        return;
       }
+      chunks.push(buffer);
     });
     req.on('end', () => {
-      if (!body) {
+      if (settled) return;
+      settled = true;
+      if (receivedBytes === 0) {
         resolve({});
         return;
       }
       try {
-        resolve(JSON.parse(body));
+        resolve(JSON.parse(Buffer.concat(chunks, receivedBytes).toString('utf8')));
       } catch (error) {
         reject(new Error('body must be valid JSON'));
       }
     });
-    req.on('error', reject);
+    req.on('error', (error) => {
+      if (settled) return;
+      settled = true;
+      reject(error);
+    });
   });
 }
 
 function sendJson(res, statusCode, payload) {
   const json = JSON.stringify(payload);
-  res.writeHead(statusCode, {
+  const method = res.req && res.req.method ? res.req.method : 'GET';
+  const headers = {
     'content-type': 'application/json; charset=utf-8',
     'content-length': Buffer.byteLength(json),
-  });
+    'x-content-type-options': 'nosniff',
+  };
+  if (method !== 'GET' && method !== 'HEAD') {
+    headers['cache-control'] = 'no-store';
+  }
+  res.writeHead(statusCode, headers);
   res.end(json);
 }
 
+function acceptsPrivateKeyMaterial() {
+  const raw = String(process.env[PRIVATE_KEY_MATERIAL_ENV] || '').trim().toLowerCase();
+  if (raw === 'false' || raw === '0' || raw === 'no') return false;
+  if (raw === 'true' || raw === '1' || raw === 'yes') return true;
+  return !process.env.RENDER;
+}
+
+function findPrivateKeyMaterialPath(value, trail = '', depth = 0) {
+  if (!value || typeof value !== 'object' || depth > 16) return null;
+  const entries = Array.isArray(value)
+    ? value.map((item, index) => [String(index), item])
+    : Object.entries(value);
+  for (const [key, child] of entries) {
+    const path = trail ? `${trail}.${key}` : key;
+    if (!Array.isArray(value) && PRIVATE_KEY_FIELD_PATTERN.test(key)) return path;
+    const nested = findPrivateKeyMaterialPath(child, path, depth + 1);
+    if (nested) return nested;
+  }
+  return null;
+}
+
+function rejectPrivateKeyMaterial(res, body) {
+  if (acceptsPrivateKeyMaterial()) return false;
+  const fieldPath = findPrivateKeyMaterialPath(body);
+  if (!fieldPath) return false;
+  sendJson(res, 400, {
+    ok: false,
+    valid: false,
+    reason: 'private_key_material_not_accepted',
+    field: fieldPath,
+    detail: 'This deployment does not accept private key material over HTTP. Sign locally with the xoonya SDK (emitReceipt / buildProofBundle) or the xoonya CLI and submit the signed receipt or bundle instead.',
+    sdk_ref: 'npm:xoonya#emitReceipt',
+    cli_ref: 'xoonya --help',
+    policy_env: PRIVATE_KEY_MATERIAL_ENV,
+  });
+  return true;
+}
+
 function payloadBufferFromBody(body) {
   if (typeof body.payload_bytes_ascii === 'string') {
     return Buffer.from(body.payload_bytes_ascii, 'ascii');
@@ -726,6 +810,20 @@ function canonicalEventFromBody(body) {
 async function routeRequest(req, res) {
   const url = new URL(req.url, 'http://127.0.0.1');
 
+  if (req.method === 'OPTIONS') {
+    res.writeHead(204, {
+      allow: 'GET, HEAD, POST, OPTIONS',
+      'x-content-type-options': 'nosniff',
+      'cache-control': 'no-store',
+    });
+    res.end();
+    return;
+  }
+  if (req.method === 'HEAD') {
+    // Route HEAD exactly like GET; Node already suppresses the response body for HEAD requests.
+    req.method = 'GET';
+  }
+
   if (req.method === 'GET' && url.pathname === '/health') {
     sendJson(res, 200, {
       status: 'ok',
@@ -811,6 +909,93 @@ async function routeRequest(req, res) {
     return;
   }
 
+  if (req.method === 'GET' && url.pathname === '/v1/adapter-certification') {
+    sendJson(res, 200, buildAdapterCertificationContractPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/adapter-certification/summary') {
+    sendJson(res, 200, summarizeAdapterCertificationContractPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname.startsWith('/v1/adapter-certification/')) {
+    const frontId = decodeURIComponent(url.pathname.slice('/v1/adapter-certification/'.length));
+    if (frontId && frontId !== 'summary') {
+      const front = getAdapterCertificationFrontDetail(frontId);
+      if (!front) {
+        sendJson(res, 404, { ok: false, error: 'adapter_certification_front_not_found' });
+        return;
+      }
+      sendJson(res, 200, {
+        ok: true,
+        product: 'xoonya',
+        category: 'naxytra-adapter-certification-detail',
+        front
+      });
+      return;
+    }
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/trust-portability-boundary') {
+    sendJson(res, 200, buildTrustPortabilityBoundaryContractPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/trust-portability-boundary/summary') {
+    sendJson(res, 200, summarizeTrustPortabilityBoundaryContractPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname.startsWith('/v1/trust-portability-boundary/')) {
+    const axisId = decodeURIComponent(url.pathname.slice('/v1/trust-portability-boundary/'.length));
+    if (axisId && axisId !== 'summary') {
+      const axis = getTrustPortabilityAxisDetail(axisId);
+      if (!axis) {
+        sendJson(res, 404, { ok: false, error: 'trust_portability_axis_not_found' });
+        return;
+      }
+      sendJson(res, 200, {
+        ok: true,
+        product: 'xoonya',
+        category: 'naxytra-trust-portability-boundary-detail',
+        axis: {
+          ...axis,
+          axis_id: axis.axis_id || axis.profile_id || axis.portability_axis || null
+        }
+      });
+      return;
+    }
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/signed-audit-provenance') {
+    sendJson(res, 200, buildSignedAuditProvenanceContractPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/signed-audit-provenance/summary') {
+    sendJson(res, 200, summarizeSignedAuditProvenanceContractPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname.startsWith('/v1/signed-audit-provenance/')) {
+    const surfaceId = decodeURIComponent(url.pathname.slice('/v1/signed-audit-provenance/'.length));
+    if (surfaceId && surfaceId !== 'summary') {
+      const surface = getSignedAuditProvenanceSurfaceDetail(surfaceId);
+      if (!surface) {
+        sendJson(res, 404, { ok: false, error: 'signed_audit_provenance_surface_not_found' });
+        return;
+      }
+      sendJson(res, 200, {
+        ok: true,
+        product: 'xoonya',
+        category: 'naxytra-signed-audit-provenance-detail',
+        surface
+      });
+      return;
+    }
+  }
+
   if (req.method === 'GET' && url.pathname === '/v1/proof-truth') {
     sendJson(res, 200, buildProofTruthModelPack());
     return;
@@ -2688,6 +2873,7 @@ async function routeRequest(req, res) {
   if (req.method === 'POST' && url.pathname === '/v1/proof-center/default-loops/run') {
     try {
       const body = await readJsonBody(req);
+      if (rejectPrivateKeyMaterial(res, body)) return;
       const loopRef = String(body.loop_ref || '').trim();
       const result = proofSdk.runDefaultProofLoop(loopRef, body);
       sendJson(res, 200, result);
@@ -2733,6 +2919,7 @@ async function routeRequest(req, res) {
   if (req.method === 'POST' && url.pathname === '/v1/proof-center/transaction-handoff/run') {
     try {
       const body = await readJsonBody(req);
+      if (rejectPrivateKeyMaterial(res, body)) return;
       const result = proofSdk.runTransactionProofHandoff(body);
       sendJson(res, 200, result);
     } catch (error) {
@@ -2744,6 +2931,7 @@ async function routeRequest(req, res) {
   if (req.method === 'POST' && url.pathname === '/v1/proof-center/interaction-spine-handoff/run') {
     try {
       const body = await readJsonBody(req);
+      if (rejectPrivateKeyMaterial(res, body)) return;
       const result = proofSdk.runInteractionSpineProofHandoff(body);
       sendJson(res, 200, result);
     } catch (error) {
@@ -2755,6 +2943,7 @@ async function routeRequest(req, res) {
   if (req.method === 'POST' && url.pathname === '/v1/proof-center/result-package-handoff/run') {
     try {
       const body = await readJsonBody(req);
+      if (rejectPrivateKeyMaterial(res, body)) return;
       const result = proofSdk.runInteractionResultPackageHandoff(body);
       sendJson(res, 200, result);
     } catch (error) {
@@ -3874,6 +4063,7 @@ async function routeRequest(req, res) {
   if (req.method === 'POST' && url.pathname === '/v1/receipts/emit') {
     try {
       const body = await readJsonBody(req);
+      if (rejectPrivateKeyMaterial(res, body)) return;
       const event = canonicalEventFromBody(body);
       const receipt = proofSdk.emitReceipt(event, body.options || {});
       sendJson(res, 200, receipt);
@@ -3909,6 +4099,7 @@ async function routeRequest(req, res) {
   if (req.method === 'POST' && url.pathname === '/v1/proof-bundles/build') {
     try {
       const body = await readJsonBody(req);
+      if (rejectPrivateKeyMaterial(res, body)) return;
       const bundle = proofSdk.buildProofBundle(body);
       sendJson(res, 200, bundle);
     } catch (error) {
@@ -3920,7 +4111,10 @@ async function routeRequest(req, res) {
   if (req.method === 'POST' && url.pathname === '/v1/proof-bundles/verify') {
     try {
       const body = await readJsonBody(req);
-      const result = proofSdk.verifyProofBundle(body.bundle);
+      const verifyOptions = body.options && typeof body.options === 'object' && !Array.isArray(body.options)
+        ? body.options
+        : {};
+      const result = proofSdk.verifyProofBundle(body.bundle, verifyOptions);
       sendJson(res, 200, result);
     } catch (error) {
       sendJson(res, 400, { valid: false, reason: error.message });
@@ -3972,23 +4166,55 @@ async function routeRequest(req, res) {
   });
 }
 
+function handleRouteError(req, res, error) {
+  if (res.headersSent) {
+    res.destroy();
+    return;
+  }
+  if (error instanceof URIError) {
+    sendJson(res, 400, { ok: false, reason: 'invalid_path_encoding' });
+    return;
+  }
+  if (error && error.code === 'ERR_INVALID_URL') {
+    sendJson(res, 400, { ok: false, reason: 'invalid_path' });
+    return;
+  }
+  console.error(`[xoonya] internal_error ${req.method} ${req.url}\n${error && error.stack ? error.stack : error}`);
+  sendJson(res, 500, { ok: false, reason: 'internal_error' });
+}
+
 function createServer() {
-  return http.createServer((req, res) => {
-    routeRequest(req, res).catch((error) => {
-      sendJson(res, 500, {
-        status: 'error',
-        reason: error.message,
-      });
-    });
+  const server = http.createServer((req, res) => {
+    let routed;
+    try {
+      routed = routeRequest(req, res);
+    } catch (error) {
+      handleRouteError(req, res, error);
+      return;
+    }
+    routed.catch((error) => handleRouteError(req, res, error));
   });
+  server.requestTimeout = REQUEST_TIMEOUT_MS;
+  server.headersTimeout = HEADERS_TIMEOUT_MS;
+  return server;
 }
 
 if (require.main === module) {
   const port = Number(process.env.PORT || process.env.XOONYA_PORT || 4310);
   const host = process.env.XOONYA_HOST || (process.env.RENDER ? '0.0.0.0' : '127.0.0.1');
   const server = createServer();
+  process.on('unhandledRejection', (reason) => {
+    console.error(`[xoonya] unhandledRejection\n${reason && reason.stack ? reason.stack : reason}`);
+  });
+  process.on('uncaughtException', (error) => {
+    console.error(`[xoonya] uncaughtException, shutting down\n${error && error.stack ? error.stack : error}`);
+    const forceExit = setTimeout(() => process.exit(1), 5000);
+    forceExit.unref();
+    server.close(() => process.exit(1));
+  });
   server.listen(port, host, () => {
     console.log(`xoonya listening on http://${host}:${port}`);
+    console.log(`xoonya private key material over HTTP: ${acceptsPrivateKeyMaterial() ? 'accepted' : 'rejected'} (${PRIVATE_KEY_MATERIAL_ENV})`);
   });
 }