xoonya 3.1.0 → 3.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (248) hide show
  1. package/.env.example +10 -2
  2. package/CARRIED_HANDOFF_DEMO.md +60 -60
  3. package/COMPATIBILITY_NOTE.md +27 -27
  4. package/CROSS_RUNTIME_POSTURE.md +77 -77
  5. package/EXAMPLE_PATHS.md +53 -53
  6. package/FINAL_CONTRACT.md +445 -445
  7. package/LICENSE +201 -201
  8. package/NOTICE +3 -3
  9. package/PARTNER_READY_PATH.md +67 -67
  10. package/PUBLIC_DEMO_SCRIPT.md +79 -79
  11. package/README.md +843 -808
  12. package/RELEASE_NOTES.md +10 -15
  13. package/SERVICE_CONTRACT.md +207 -207
  14. package/START_HERE.md +159 -159
  15. package/TERMINOLOGY.md +55 -55
  16. package/WHY_XYTARA_XOONYA.md +43 -43
  17. package/XNYA_CONFORMANCE_MARK.md +78 -78
  18. package/XNYA_REFERENCE_IMPLEMENTATIONS.md +157 -157
  19. package/XOONYA_DEFAULT_PATH_MODEL.md +63 -63
  20. package/XOONYA_FOLLOWTHROUGH_TRUTH_MODEL.md +63 -63
  21. package/XOONYA_NATIVE_ATOM_SPEC.md +184 -184
  22. package/XOONYA_NATIVE_PROOF_FORMAT.md +570 -527
  23. package/XOONYA_NATIVE_STANDARD_GOVERNANCE.md +119 -119
  24. package/XOONYA_PROOF_TRUTH_MODEL.md +58 -58
  25. package/bin/xoonya-first-run.js +184 -184
  26. package/bin/xoonya-release.js +1367 -1367
  27. package/bin/xoonya-review.js +70 -70
  28. package/bin/xoonya.js +82 -82
  29. package/examples/integration_boundary_walkthrough.js +37 -37
  30. package/examples/package_quickstart.js +1007 -1007
  31. package/examples/partner_proof_walkthrough.js +68 -68
  32. package/examples/proof_review_walkthrough.js +66 -66
  33. package/examples/review_carried_handoff.js +72 -72
  34. package/index.js +31 -31
  35. package/integrations/PROOF_INTEGRATION_PROCESS.md +45 -45
  36. package/integrations/examples/example-third-party-verifier-registration.record.json +22 -22
  37. package/integrations/registration-record.schema.json +99 -99
  38. package/integrations/registry-snapshot.schema.json +36 -36
  39. package/integrations/registry.js +636 -636
  40. package/integrations/views.js +36 -36
  41. package/lib/adapter_certification_contract.js +90 -90
  42. package/lib/announcement_pack.js +61 -61
  43. package/lib/artifact_distribution_lane_contract.js +54 -54
  44. package/lib/asyncapi_contract.js +135 -135
  45. package/lib/auth_interop_contract.js +69 -69
  46. package/lib/authority_binding_lifecycle_contract.js +182 -182
  47. package/lib/bridge_intelligence.js +102 -102
  48. package/lib/cloudevents_contract.js +79 -79
  49. package/lib/crypto_agility_matrix.js +125 -125
  50. package/lib/default_path_contract.js +380 -380
  51. package/lib/ecosystem_entry.js +64 -64
  52. package/lib/erc8004_proof_lane_contract.js +64 -64
  53. package/lib/event_system_lane_contract.js +76 -76
  54. package/lib/external_proof_import_lane_contract.js +87 -87
  55. package/lib/feature_control_lane_contract.js +54 -54
  56. package/lib/followthrough_truth_contract.js +214 -214
  57. package/lib/framework_lane_contract.js +76 -76
  58. package/lib/governance_disputes_summary.js +36 -36
  59. package/lib/governance_intelligence.js +108 -108
  60. package/lib/identity_interop_contract.js +83 -83
  61. package/lib/integration_matrix_contract.js +81 -81
  62. package/lib/launch_narrative.js +53 -53
  63. package/lib/machine_identity_registry_contract.js +199 -199
  64. package/lib/major_rails_proof_lane_contract.js +87 -87
  65. package/lib/offline_verifiability_recovery_contract.js +155 -155
  66. package/lib/openapi_contract.js +227 -227
  67. package/lib/operational_receipt_contract.js +165 -165
  68. package/lib/outreach_proof.js +71 -71
  69. package/lib/phase_10_closeout_pack.js +45 -45
  70. package/lib/phase_10_completion_pack.js +76 -76
  71. package/lib/phase_10_decision_record_pack.js +54 -54
  72. package/lib/phase_10_decision_resolution_pack.js +53 -53
  73. package/lib/phase_10_demand_signal_adapters_proof_pack.js +74 -74
  74. package/lib/phase_10_ecosystem_backlog_triage_proof_pack.js +74 -74
  75. package/lib/phase_10_freeze_baseline_pack.js +67 -67
  76. package/lib/phase_10_freeze_review_pack.js +64 -64
  77. package/lib/phase_10_gate_pack.js +57 -57
  78. package/lib/phase_10_long_tail_continuity_pack.js +80 -80
  79. package/lib/phase_10_long_tail_ecosystem_pack.js +68 -68
  80. package/lib/phase_10_niche_extension_registry_proof_pack.js +74 -74
  81. package/lib/phase_1_claude_mcp_pack.js +60 -60
  82. package/lib/phase_1_claude_mcp_proof_pack.js +57 -57
  83. package/lib/phase_1_ecosystem_pack.js +51 -51
  84. package/lib/phase_1_openai_codex_pack.js +60 -60
  85. package/lib/phase_1_openai_codex_proof_pack.js +57 -57
  86. package/lib/phase_2_base_proof_pack.js +71 -71
  87. package/lib/phase_2_base_usdc_proof_pack.js +72 -72
  88. package/lib/phase_2_closeout_pack.js +65 -65
  89. package/lib/phase_2_completion_pack.js +113 -113
  90. package/lib/phase_2_decision_record_pack.js +66 -66
  91. package/lib/phase_2_decision_resolution_pack.js +69 -69
  92. package/lib/phase_2_eth_proof_pack.js +70 -70
  93. package/lib/phase_2_evm_base_proof_pack.js +73 -73
  94. package/lib/phase_2_evm_proof_pack.js +71 -71
  95. package/lib/phase_2_flip_preview_pack.js +60 -60
  96. package/lib/phase_2_freeze_review_pack.js +99 -99
  97. package/lib/phase_2_gate_pack.js +77 -77
  98. package/lib/phase_2_payment_rails_pack.js +71 -71
  99. package/lib/phase_2_usdc_proof_pack.js +71 -71
  100. package/lib/phase_3_brc_proof_pack.js +81 -81
  101. package/lib/phase_3_bsv_teranode_proof_pack.js +81 -81
  102. package/lib/phase_3_closeout_pack.js +62 -62
  103. package/lib/phase_3_completion_pack.js +92 -92
  104. package/lib/phase_3_decision_record_pack.js +64 -64
  105. package/lib/phase_3_decision_resolution_pack.js +69 -69
  106. package/lib/phase_3_freeze_baseline_pack.js +67 -67
  107. package/lib/phase_3_freeze_review_pack.js +80 -80
  108. package/lib/phase_3_gate_pack.js +76 -76
  109. package/lib/phase_3_metanet_proof_pack.js +81 -81
  110. package/lib/phase_3_native_bsv_pack.js +89 -89
  111. package/lib/phase_3_native_continuity_pack.js +82 -82
  112. package/lib/phase_4_attestation_proof_pack.js +75 -75
  113. package/lib/phase_4_closeout_pack.js +45 -45
  114. package/lib/phase_4_completion_pack.js +82 -82
  115. package/lib/phase_4_decision_record_pack.js +54 -54
  116. package/lib/phase_4_decision_resolution_pack.js +45 -45
  117. package/lib/phase_4_erc8004_proof_pack.js +76 -76
  118. package/lib/phase_4_freeze_baseline_pack.js +67 -67
  119. package/lib/phase_4_freeze_review_pack.js +68 -68
  120. package/lib/phase_4_gate_pack.js +58 -58
  121. package/lib/phase_4_identity_registry_proof_pack.js +75 -75
  122. package/lib/phase_4_identity_trust_pack.js +73 -73
  123. package/lib/phase_4_trust_continuity_pack.js +86 -86
  124. package/lib/phase_5_antelope_proof_pack.js +76 -76
  125. package/lib/phase_5_closeout_pack.js +44 -44
  126. package/lib/phase_5_completion_pack.js +82 -82
  127. package/lib/phase_5_decision_record_pack.js +54 -54
  128. package/lib/phase_5_decision_resolution_pack.js +45 -45
  129. package/lib/phase_5_freeze_baseline_pack.js +67 -67
  130. package/lib/phase_5_freeze_review_pack.js +68 -68
  131. package/lib/phase_5_gate_pack.js +58 -58
  132. package/lib/phase_5_major_rails_continuity_pack.js +86 -86
  133. package/lib/phase_5_major_rails_pack.js +74 -74
  134. package/lib/phase_5_proton_xpr_proof_pack.js +76 -76
  135. package/lib/phase_5_solana_proof_pack.js +76 -76
  136. package/lib/phase_6_autogen_proof_pack.js +74 -74
  137. package/lib/phase_6_closeout_pack.js +46 -46
  138. package/lib/phase_6_completion_pack.js +77 -77
  139. package/lib/phase_6_decision_record_pack.js +54 -54
  140. package/lib/phase_6_decision_resolution_pack.js +53 -53
  141. package/lib/phase_6_framework_continuity_pack.js +81 -81
  142. package/lib/phase_6_framework_runtime_pack.js +68 -68
  143. package/lib/phase_6_freeze_baseline_pack.js +68 -68
  144. package/lib/phase_6_freeze_review_pack.js +65 -65
  145. package/lib/phase_6_gate_pack.js +59 -59
  146. package/lib/phase_6_langchain_proof_pack.js +74 -74
  147. package/lib/phase_6_langgraph_proof_pack.js +74 -74
  148. package/lib/phase_6_semantic_kernel_proof_pack.js +74 -74
  149. package/lib/phase_7_closeout_pack.js +45 -45
  150. package/lib/phase_7_completion_pack.js +85 -85
  151. package/lib/phase_7_decision_record_pack.js +53 -53
  152. package/lib/phase_7_decision_resolution_pack.js +53 -53
  153. package/lib/phase_7_event_system_continuity_pack.js +89 -89
  154. package/lib/phase_7_event_system_pack.js +76 -76
  155. package/lib/phase_7_freeze_baseline_pack.js +74 -74
  156. package/lib/phase_7_freeze_review_pack.js +65 -65
  157. package/lib/phase_7_gate_pack.js +58 -58
  158. package/lib/phase_7_kafka_proof_pack.js +76 -76
  159. package/lib/phase_7_mqtt_proof_pack.js +76 -76
  160. package/lib/phase_7_nats_proof_pack.js +76 -76
  161. package/lib/phase_7_webhook_event_bus_proof_pack.js +76 -76
  162. package/lib/phase_8_closeout_pack.js +46 -46
  163. package/lib/phase_8_completion_pack.js +82 -82
  164. package/lib/phase_8_decision_record_pack.js +54 -54
  165. package/lib/phase_8_decision_resolution_pack.js +53 -53
  166. package/lib/phase_8_external_receipt_import_proof_pack.js +74 -74
  167. package/lib/phase_8_external_result_import_proof_pack.js +74 -74
  168. package/lib/phase_8_freeze_baseline_pack.js +71 -71
  169. package/lib/phase_8_freeze_review_pack.js +64 -64
  170. package/lib/phase_8_gate_pack.js +58 -58
  171. package/lib/phase_8_proof_bridge_continuity_pack.js +86 -86
  172. package/lib/phase_8_proof_bridges_pack.js +72 -72
  173. package/lib/phase_8_proof_bundle_normalization_proof_pack.js +74 -74
  174. package/lib/phase_9_closeout_pack.js +46 -46
  175. package/lib/phase_9_completion_pack.js +82 -82
  176. package/lib/phase_9_custody_refs_proof_pack.js +74 -74
  177. package/lib/phase_9_decision_record_pack.js +54 -54
  178. package/lib/phase_9_decision_resolution_pack.js +53 -53
  179. package/lib/phase_9_freeze_baseline_pack.js +71 -71
  180. package/lib/phase_9_freeze_review_pack.js +64 -64
  181. package/lib/phase_9_gate_pack.js +58 -58
  182. package/lib/phase_9_operator_accounting_bridges_proof_pack.js +74 -74
  183. package/lib/phase_9_treasury_connectivity_pack.js +72 -72
  184. package/lib/phase_9_treasury_continuity_pack.js +86 -86
  185. package/lib/phase_9_treasury_destinations_proof_pack.js +74 -74
  186. package/lib/phase_program_pack.js +47 -47
  187. package/lib/proof_bridge_lane_contract.js +82 -82
  188. package/lib/proof_truth_contract.js +224 -224
  189. package/lib/provenance_lane_contract.js +54 -54
  190. package/lib/provider_lane_contract.js +67 -67
  191. package/lib/public_surface_policy_contract.js +111 -111
  192. package/lib/publish_plan.js +51 -51
  193. package/lib/release_candidate.js +50 -50
  194. package/lib/release_center.js +1037 -1037
  195. package/lib/release_history.js +206 -206
  196. package/lib/release_manifest.js +114 -114
  197. package/lib/release_pack.js +391 -391
  198. package/lib/result_package_trust_lane_contract.js +74 -74
  199. package/lib/review_intelligence.js +100 -100
  200. package/lib/role_freeze.js +436 -436
  201. package/lib/shared_signals_lane_contract.js +54 -54
  202. package/lib/signed_audit_provenance_contract.js +93 -93
  203. package/lib/telemetry_lane_contract.js +54 -54
  204. package/lib/treasury_proof_lane_contract.js +83 -83
  205. package/lib/trust_intelligence.js +106 -106
  206. package/lib/trust_portability_boundary_contract.js +66 -66
  207. package/lib/trust_portability_pack.js +224 -224
  208. package/lib/verification_service_pack.js +149 -149
  209. package/package.json +98 -97
  210. package/proof_sdk.js +6561 -6265
  211. package/reference/python/README.md +35 -35
  212. package/reference/python/__pycache__/xnya_reference.cpython-314.pyc +0 -0
  213. package/reference/python/requirements-optional.txt +1 -1
  214. package/reference/python/verify_vectors.py +223 -223
  215. package/reference/python/xnya_reference.py +810 -810
  216. package/reference/rust/Cargo.toml +11 -11
  217. package/reference/rust/README.md +28 -28
  218. package/reference/rust/src/lib.rs +87 -87
  219. package/scripts/registry_cli.js +157 -157
  220. package/scripts/verify_all.js +603 -603
  221. package/scripts/verify_control_plane_contracts.js +34 -34
  222. package/scripts/verify_control_plane_routes.js +70 -70
  223. package/scripts/verify_examples.js +19 -19
  224. package/scripts/verify_external_proof_import_gate.js +84 -84
  225. package/scripts/verify_forgery_resistance.js +281 -0
  226. package/scripts/verify_integrations.js +170 -170
  227. package/scripts/verify_native_hybrid_design_gate.js +114 -114
  228. package/scripts/verify_reference_promotion_gate.js +74 -74
  229. package/scripts/verify_reference_python.js +49 -49
  230. package/scripts/verify_reference_python_crypto.js +87 -87
  231. package/scripts/verify_reference_rust_scaffold.js +50 -50
  232. package/scripts/verify_release_candidate.js +131 -131
  233. package/scripts/verify_service.js +3038 -2940
  234. package/scripts/verify_tooling.js +1251 -1251
  235. package/scripts/verify_trust_portability.js +56 -56
  236. package/scripts/verify_vectors.js +192 -192
  237. package/scripts/verify_verification_services.js +56 -56
  238. package/server.js +4223 -4099
  239. package/vectors/adversarial-vectors.json +552 -552
  240. package/vectors/conformance-vectors.json +446 -446
  241. package/vectors/native-atom-vectors.json +101 -101
  242. package/vectors/native-payload-profile-vectors.json +50 -50
  243. package/OPERATIONS_RUNBOOK.md +0 -50
  244. package/OPERATOR_START_HERE.md +0 -67
  245. package/PROGRAM_COMPLETE_RELEASE.md +0 -52
  246. package/PROGRAM_STATUS.md +0 -57
  247. package/PUBLISH_PLAN.md +0 -25
  248. package/RELEASE_CHECKLIST.md +0 -16
@@ -1,184 +1,184 @@
1
- #!/usr/bin/env node
2
- "use strict";
3
-
4
- const path = require("path");
5
- const { spawnSync } = require("child_process");
6
-
7
- const DEFAULT_KIT_URL = "https://www.naxytra.com/v1/first-run-kit";
8
-
9
- function parseArgs(argv) {
10
- const args = {};
11
- for (let index = 0; index < argv.length; index += 1) {
12
- const token = argv[index];
13
- if (!token.startsWith("--")) continue;
14
- const key = token.slice(2);
15
- const next = argv[index + 1];
16
- if (!next || next.startsWith("--")) {
17
- args[key] = true;
18
- continue;
19
- }
20
- args[key] = next;
21
- index += 1;
22
- }
23
- return args;
24
- }
25
-
26
- function buildLocalGuide() {
27
- return {
28
- ok: true,
29
- product: "xoonya",
30
- category: "xoonya-first-run-proof-guide",
31
- guide_version: "xoonya-first-run-proof-guide-v1",
32
- public_command_kit_url: DEFAULT_KIT_URL,
33
- role: "proof_followthrough_after_xytara_runtime_execution",
34
- safe_local_verification_command: "xoonya first-run --verify-native --pretty",
35
- proof_modes: [
36
- {
37
- method: "xoonya-native-sha256-v1",
38
- verification: "replayable_digest"
39
- },
40
- {
41
- method: "xoonya-native-signed-v1",
42
- verification: "ed25519_signature"
43
- },
44
- {
45
- method: "xoonya-native-anchored-v1",
46
- verification: "anchor_binding"
47
- },
48
- {
49
- method: "external_interop_methods",
50
- verification: "structure_checked_external_verifier_boundary"
51
- }
52
- ],
53
- public_checks: [
54
- "https://xoonya.onrender.com/v1/proof-center/native-standard/summary",
55
- "https://xoonya.onrender.com/v1/proof-center/native-atom-conformance/summary",
56
- "https://xoonya.onrender.com/v1/proof-center/native-anchor-profile/summary"
57
- ],
58
- boundaries: [
59
- "xoonya_verifies_proof_bundles_and_native_method_binding",
60
- "xoonya_anchor_binding_does_not_claim_external_provider_or_chain_truth",
61
- "xytara_owns_runtime_payment_and_execution_state"
62
- ]
63
- };
64
- }
65
-
66
- async function fetchPublicKit(url) {
67
- const response = await fetch(url, { headers: { accept: "application/json" } });
68
- if (!response.ok) {
69
- throw new Error(`first_run_kit_fetch_failed_${response.status}`);
70
- }
71
- return response.json();
72
- }
73
-
74
- function writeJson(payload, pretty) {
75
- process.stdout.write(`${JSON.stringify(payload, null, pretty ? 2 : 0)}\n`);
76
- }
77
-
78
- function printUsage() {
79
- process.stdout.write([
80
- "Usage: xoonya first-run [options]",
81
- "",
82
- "Options:",
83
- " --json Print the guided proof followthrough object",
84
- " --offline Do not fetch the public command kit",
85
- " --verify-native Run local native/conformance verification",
86
- " --pretty Pretty-print JSON output",
87
- " --help Show this help message"
88
- ].join("\n"));
89
- }
90
-
91
- function runNativeVerification(args) {
92
- const scriptPath = path.join(__dirname, "..", "scripts", "verify_vectors.js");
93
- const result = spawnSync(process.execPath, [
94
- scriptPath,
95
- "--json"
96
- ], {
97
- encoding: "utf8",
98
- stdio: ["ignore", "pipe", "inherit"]
99
- });
100
- if (result.status !== 0) {
101
- process.exitCode = typeof result.status === "number" ? result.status : 1;
102
- return;
103
- }
104
- const summary = JSON.parse(result.stdout);
105
- writeJson({
106
- ok: true,
107
- product: "xoonya",
108
- category: "xoonya-first-run-native-verification",
109
- verification_version: "xoonya-first-run-native-verification-v1",
110
- proof_bundle_conformance_passed: summary.ok === true,
111
- conformance_count: summary.conformance_count,
112
- adversarial_count: summary.adversarial_count,
113
- native_atom_vector_count: summary.native_atom_vector_count,
114
- native_atom_adversarial_count: summary.native_atom_adversarial_count,
115
- verification_methods: summary.verification_methods,
116
- native_atom_error_codes: summary.native_atom_error_codes,
117
- required_native_methods_present: [
118
- "xoonya-native-sha256-v1",
119
- "xoonya-native-signed-v1",
120
- "xoonya-native-anchored-v1"
121
- ].every((method) => summary.verification_methods.includes(method)),
122
- boundary: "local_conformance_verifies_xoonya_binding_and_vectors_not_external_chain_truth"
123
- }, args.pretty);
124
- }
125
-
126
- async function main() {
127
- const args = parseArgs(process.argv.slice(2));
128
- if (args.help) {
129
- printUsage();
130
- return;
131
- }
132
- if (args["verify-native"]) {
133
- runNativeVerification(args);
134
- return;
135
- }
136
-
137
- const localGuide = buildLocalGuide();
138
- if (args.json) {
139
- if (args.offline) {
140
- writeJson(localGuide, args.pretty);
141
- return;
142
- }
143
- try {
144
- const publicKit = await fetchPublicKit(DEFAULT_KIT_URL);
145
- writeJson({
146
- ...localGuide,
147
- public_command_kit: publicKit
148
- }, args.pretty);
149
- } catch (error) {
150
- writeJson({
151
- ...localGuide,
152
- public_command_kit_fetch_error: error.message
153
- }, args.pretty);
154
- }
155
- return;
156
- }
157
-
158
- process.stdout.write([
159
- "xoonya first-run",
160
- "",
161
- "Proof followthrough after xytara execution:",
162
- " xoonya first-run --verify-native --pretty",
163
- "",
164
- "Inspect the public command kit:",
165
- ` ${DEFAULT_KIT_URL}`,
166
- "",
167
- "Native proof modes checked locally:",
168
- " xoonya-native-sha256-v1",
169
- " xoonya-native-signed-v1",
170
- " xoonya-native-anchored-v1",
171
- "",
172
- "Public proof surfaces:",
173
- " https://xoonya.onrender.com/v1/proof-center/native-standard/summary",
174
- " https://xoonya.onrender.com/v1/proof-center/native-anchor-profile/summary",
175
- "",
176
- "Boundary:",
177
- " xoonya verifies proof and anchor binding; external chain/provider truth stays external."
178
- ].join("\n"));
179
- }
180
-
181
- main().catch((error) => {
182
- process.stderr.write(`${error.message}\n`);
183
- process.exitCode = 1;
184
- });
1
+ #!/usr/bin/env node
2
+ "use strict";
3
+
4
+ const path = require("path");
5
+ const { spawnSync } = require("child_process");
6
+
7
+ const DEFAULT_KIT_URL = "https://www.naxytra.com/v1/first-run-kit";
8
+
9
+ function parseArgs(argv) {
10
+ const args = {};
11
+ for (let index = 0; index < argv.length; index += 1) {
12
+ const token = argv[index];
13
+ if (!token.startsWith("--")) continue;
14
+ const key = token.slice(2);
15
+ const next = argv[index + 1];
16
+ if (!next || next.startsWith("--")) {
17
+ args[key] = true;
18
+ continue;
19
+ }
20
+ args[key] = next;
21
+ index += 1;
22
+ }
23
+ return args;
24
+ }
25
+
26
+ function buildLocalGuide() {
27
+ return {
28
+ ok: true,
29
+ product: "xoonya",
30
+ category: "xoonya-first-run-proof-guide",
31
+ guide_version: "xoonya-first-run-proof-guide-v1",
32
+ public_command_kit_url: DEFAULT_KIT_URL,
33
+ role: "proof_followthrough_after_xytara_runtime_execution",
34
+ safe_local_verification_command: "xoonya first-run --verify-native --pretty",
35
+ proof_modes: [
36
+ {
37
+ method: "xoonya-native-sha256-v1",
38
+ verification: "replayable_digest"
39
+ },
40
+ {
41
+ method: "xoonya-native-signed-v1",
42
+ verification: "ed25519_signature"
43
+ },
44
+ {
45
+ method: "xoonya-native-anchored-v1",
46
+ verification: "anchor_binding"
47
+ },
48
+ {
49
+ method: "external_interop_methods",
50
+ verification: "structure_checked_external_verifier_boundary"
51
+ }
52
+ ],
53
+ public_checks: [
54
+ "https://xoonya.onrender.com/v1/proof-center/native-standard/summary",
55
+ "https://xoonya.onrender.com/v1/proof-center/native-atom-conformance/summary",
56
+ "https://xoonya.onrender.com/v1/proof-center/native-anchor-profile/summary"
57
+ ],
58
+ boundaries: [
59
+ "xoonya_verifies_proof_bundles_and_native_method_binding",
60
+ "xoonya_anchor_binding_does_not_claim_external_provider_or_chain_truth",
61
+ "xytara_owns_runtime_payment_and_execution_state"
62
+ ]
63
+ };
64
+ }
65
+
66
+ async function fetchPublicKit(url) {
67
+ const response = await fetch(url, { headers: { accept: "application/json" } });
68
+ if (!response.ok) {
69
+ throw new Error(`first_run_kit_fetch_failed_${response.status}`);
70
+ }
71
+ return response.json();
72
+ }
73
+
74
+ function writeJson(payload, pretty) {
75
+ process.stdout.write(`${JSON.stringify(payload, null, pretty ? 2 : 0)}\n`);
76
+ }
77
+
78
+ function printUsage() {
79
+ process.stdout.write([
80
+ "Usage: xoonya first-run [options]",
81
+ "",
82
+ "Options:",
83
+ " --json Print the guided proof followthrough object",
84
+ " --offline Do not fetch the public command kit",
85
+ " --verify-native Run local native/conformance verification",
86
+ " --pretty Pretty-print JSON output",
87
+ " --help Show this help message"
88
+ ].join("\n"));
89
+ }
90
+
91
+ function runNativeVerification(args) {
92
+ const scriptPath = path.join(__dirname, "..", "scripts", "verify_vectors.js");
93
+ const result = spawnSync(process.execPath, [
94
+ scriptPath,
95
+ "--json"
96
+ ], {
97
+ encoding: "utf8",
98
+ stdio: ["ignore", "pipe", "inherit"]
99
+ });
100
+ if (result.status !== 0) {
101
+ process.exitCode = typeof result.status === "number" ? result.status : 1;
102
+ return;
103
+ }
104
+ const summary = JSON.parse(result.stdout);
105
+ writeJson({
106
+ ok: true,
107
+ product: "xoonya",
108
+ category: "xoonya-first-run-native-verification",
109
+ verification_version: "xoonya-first-run-native-verification-v1",
110
+ proof_bundle_conformance_passed: summary.ok === true,
111
+ conformance_count: summary.conformance_count,
112
+ adversarial_count: summary.adversarial_count,
113
+ native_atom_vector_count: summary.native_atom_vector_count,
114
+ native_atom_adversarial_count: summary.native_atom_adversarial_count,
115
+ verification_methods: summary.verification_methods,
116
+ native_atom_error_codes: summary.native_atom_error_codes,
117
+ required_native_methods_present: [
118
+ "xoonya-native-sha256-v1",
119
+ "xoonya-native-signed-v1",
120
+ "xoonya-native-anchored-v1"
121
+ ].every((method) => summary.verification_methods.includes(method)),
122
+ boundary: "local_conformance_verifies_xoonya_binding_and_vectors_not_external_chain_truth"
123
+ }, args.pretty);
124
+ }
125
+
126
+ async function main() {
127
+ const args = parseArgs(process.argv.slice(2));
128
+ if (args.help) {
129
+ printUsage();
130
+ return;
131
+ }
132
+ if (args["verify-native"]) {
133
+ runNativeVerification(args);
134
+ return;
135
+ }
136
+
137
+ const localGuide = buildLocalGuide();
138
+ if (args.json) {
139
+ if (args.offline) {
140
+ writeJson(localGuide, args.pretty);
141
+ return;
142
+ }
143
+ try {
144
+ const publicKit = await fetchPublicKit(DEFAULT_KIT_URL);
145
+ writeJson({
146
+ ...localGuide,
147
+ public_command_kit: publicKit
148
+ }, args.pretty);
149
+ } catch (error) {
150
+ writeJson({
151
+ ...localGuide,
152
+ public_command_kit_fetch_error: error.message
153
+ }, args.pretty);
154
+ }
155
+ return;
156
+ }
157
+
158
+ process.stdout.write([
159
+ "xoonya first-run",
160
+ "",
161
+ "Proof followthrough after xytara execution:",
162
+ " xoonya first-run --verify-native --pretty",
163
+ "",
164
+ "Inspect the public command kit:",
165
+ ` ${DEFAULT_KIT_URL}`,
166
+ "",
167
+ "Native proof modes checked locally:",
168
+ " xoonya-native-sha256-v1",
169
+ " xoonya-native-signed-v1",
170
+ " xoonya-native-anchored-v1",
171
+ "",
172
+ "Public proof surfaces:",
173
+ " https://xoonya.onrender.com/v1/proof-center/native-standard/summary",
174
+ " https://xoonya.onrender.com/v1/proof-center/native-anchor-profile/summary",
175
+ "",
176
+ "Boundary:",
177
+ " xoonya verifies proof and anchor binding; external chain/provider truth stays external."
178
+ ].join("\n"));
179
+ }
180
+
181
+ main().catch((error) => {
182
+ process.stderr.write(`${error.message}\n`);
183
+ process.exitCode = 1;
184
+ });