xoonya 3.1.0 → 3.1.2

package/scripts/verify_reference_rust_scaffold.js

@@ -1,50 +1,50 @@
-"use strict";
-
-const assert = require("assert");
-const fs = require("fs");
-const path = require("path");
-
-const root = path.resolve(__dirname, "..");
-
-function read(relativePath) {
-  return fs.readFileSync(path.join(root, relativePath), "utf8");
-}
-
-function ensureContains(body, pattern, label) {
-  assert.strictEqual(body.includes(pattern), true, `${label} missing ${pattern}`);
-}
-
-function main() {
-  const readme = read("reference/rust/README.md");
-  const cargo = read("reference/rust/Cargo.toml");
-  const lib = read("reference/rust/src/lib.rs");
-
-  ensureContains(readme, "not a full XNYA-compatible reference implementation yet", "rust readme boundary");
-  ensureContains(readme, "Future promotion requires a real Rust toolchain check", "rust readme promotion gate");
-  ensureContains(cargo, "publish = false", "rust cargo publish boundary");
-  ensureContains(cargo, "name = \"xoonya-native-rust\"", "rust cargo name");
-  ensureContains(lib, "pub const XNYA_MAGIC: [u8; 4] = *b\"XNYA\";", "rust magic constant");
-  ensureContains(lib, "pub const ATOM_V1_LEN: usize = 58;", "rust atom v1 length");
-  ensureContains(lib, "pub const ATOM_V2_LEN: usize = 70;", "rust atom v2 length");
-  ensureContains(lib, "atom_bad_magic", "rust deterministic error code");
-  ensureContains(lib, "atom_unsupported_length", "rust deterministic error code");
-  ensureContains(lib, "atom_unsupported_record_type", "rust deterministic error code");
-  ensureContains(lib, "atom_version_length_mismatch", "rust deterministic error code");
-
-  const summary = {
-    ok: true,
-    product: "xoonya",
-    category: "xnya-rust-reference-scaffold-check",
-    status: "source_scaffold_packaged_not_vector_verified",
-    checked_files: [
-      "reference/rust/README.md",
-      "reference/rust/Cargo.toml",
-      "reference/rust/src/lib.rs"
-    ],
-    boundary: "rust_candidate_is_source_only_until_cargo_vector_parity_and_round_trip_checks_exist"
-  };
-  process.stdout.write(`${JSON.stringify(summary, null, 2)}\n`);
-}
-
-main();
-
+"use strict";
+
+const assert = require("assert");
+const fs = require("fs");
+const path = require("path");
+
+const root = path.resolve(__dirname, "..");
+
+function read(relativePath) {
+  return fs.readFileSync(path.join(root, relativePath), "utf8");
+}
+
+function ensureContains(body, pattern, label) {
+  assert.strictEqual(body.includes(pattern), true, `${label} missing ${pattern}`);
+}
+
+function main() {
+  const readme = read("reference/rust/README.md");
+  const cargo = read("reference/rust/Cargo.toml");
+  const lib = read("reference/rust/src/lib.rs");
+
+  ensureContains(readme, "not a full XNYA-compatible reference implementation yet", "rust readme boundary");
+  ensureContains(readme, "Future promotion requires a real Rust toolchain check", "rust readme promotion gate");
+  ensureContains(cargo, "publish = false", "rust cargo publish boundary");
+  ensureContains(cargo, "name = \"xoonya-native-rust\"", "rust cargo name");
+  ensureContains(lib, "pub const XNYA_MAGIC: [u8; 4] = *b\"XNYA\";", "rust magic constant");
+  ensureContains(lib, "pub const ATOM_V1_LEN: usize = 58;", "rust atom v1 length");
+  ensureContains(lib, "pub const ATOM_V2_LEN: usize = 70;", "rust atom v2 length");
+  ensureContains(lib, "atom_bad_magic", "rust deterministic error code");
+  ensureContains(lib, "atom_unsupported_length", "rust deterministic error code");
+  ensureContains(lib, "atom_unsupported_record_type", "rust deterministic error code");
+  ensureContains(lib, "atom_version_length_mismatch", "rust deterministic error code");
+
+  const summary = {
+    ok: true,
+    product: "xoonya",
+    category: "xnya-rust-reference-scaffold-check",
+    status: "source_scaffold_packaged_not_vector_verified",
+    checked_files: [
+      "reference/rust/README.md",
+      "reference/rust/Cargo.toml",
+      "reference/rust/src/lib.rs"
+    ],
+    boundary: "rust_candidate_is_source_only_until_cargo_vector_parity_and_round_trip_checks_exist"
+  };
+  process.stdout.write(`${JSON.stringify(summary, null, 2)}\n`);
+}
+
+main();
+

package/scripts/verify_release_candidate.js

@@ -1,131 +1,131 @@
-"use strict";
-
-const assert = require("assert");
-const fs = require("fs");
-const path = require("path");
-const { execFileSync, execSync } = require("child_process");
-const packageJson = require("../package.json");
-
-function parsePackDryRun() {
-  const output = execSync("npm pack --dry-run --json", {
-    cwd: path.resolve(__dirname, ".."),
-    encoding: "utf8"
-  });
-  const parsed = JSON.parse(output);
-  return Array.isArray(parsed) ? parsed[0] : parsed;
-}
-
-function verifyReleaseNotes() {
-  const notesPath = path.resolve(__dirname, "..", "RELEASE_NOTES.md");
-  const notes = fs.readFileSync(notesPath, "utf8");
-  assert.strictEqual(
-    /^#\s+xoonya\s+\d+\.\d+\.\d+\s+Release Notes\s*$/m.test(notes),
-    false,
-    "RELEASE_NOTES.md must not duplicate the GitHub release title as a heading"
-  );
-  assert.strictEqual(
-    notes.includes(`xoonya\` ${packageJson.version}`),
-    true,
-    "RELEASE_NOTES.md must mention the current package version"
-  );
-  const mentionedVersions = notes.match(/\b\d+\.\d+\.\d+\b/g) || [];
-  assert.strictEqual(
-    mentionedVersions.every((version) => version === packageJson.version),
-    true,
-    "RELEASE_NOTES.md must not mention prior package versions"
-  );
-}
-
-function main() {
-  const releaseOutput = execFileSync(process.execPath, [
-    path.resolve(__dirname, "..", "bin", "xoonya-release.js"),
-    "--candidate",
-    "--summary"
-  ], {
-    cwd: path.resolve(__dirname, ".."),
-    encoding: "utf8"
-  });
-  const releaseCandidate = JSON.parse(releaseOutput);
-  assert.strictEqual(releaseCandidate.product, "xoonya", "release candidate product mismatch");
-  assert.strictEqual(releaseCandidate.publish_access, "public", "release candidate publish access mismatch");
-  assert.strictEqual(releaseCandidate.checklist_count >= 5, true, "release candidate checklist count mismatch");
-  verifyReleaseNotes();
-
-  const conformanceOutput = execFileSync(process.execPath, [
-    path.resolve(__dirname, "..", "bin", "xoonya.js"),
-    "conformance",
-    "--json"
-  ], {
-    cwd: path.resolve(__dirname, ".."),
-    encoding: "utf8"
-  });
-  const conformanceSummary = JSON.parse(conformanceOutput);
-  assert.strictEqual(conformanceSummary.ok, true, "conformance command did not pass");
-  assert.strictEqual(conformanceSummary.conformance_count >= 8, true, "conformance vector count too small");
-  assert.strictEqual(conformanceSummary.adversarial_count >= 8, true, "adversarial vector count too small");
-  assert.strictEqual(
-    conformanceSummary.adversarial_reasons.includes("native_hybrid_pq_signature_invalid"),
-    true,
-    "native hybrid adversarial reason missing"
-  );
-  assert.deepStrictEqual(
-    conformanceSummary.verification_methods,
-    [
-      "detached-assertion-v1",
-      "did-vc-v1",
-      "jwt-assertion-v1",
-      "legacy-opreturn-v1",
-      "partner-proof-envelope-v1",
-      "sd-jwt-vc-v1",
-      "signed-envelope-v1",
-      "xoonya-native-anchored-v1",
-      "xoonya-native-hybrid-v1",
-      "xoonya-native-sha256-v1",
-      "xoonya-native-signed-v1"
-    ],
-    "conformance methods mismatch"
-  );
-
-  const dryRun = parsePackDryRun();
-  assert.strictEqual(dryRun.name, packageJson.name, "npm pack dry-run name mismatch");
-  assert.strictEqual(dryRun.version, packageJson.version, "npm pack dry-run version mismatch");
-  assert.strictEqual(Array.isArray(dryRun.files), true, "npm pack dry-run file list missing");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya.js"), true, "npm pack dry-run missing xoonya cli");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya-first-run.js"), true, "npm pack dry-run missing xoonya-first-run");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya-review.js"), true, "npm pack dry-run missing xoonya-review");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya-release.js"), true, "npm pack dry-run missing xoonya-release");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_external_proof_import_gate.js"), true, "npm pack dry-run missing external proof import gate verifier script");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_vectors.js"), true, "npm pack dry-run missing conformance verifier script");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_python.js"), true, "npm pack dry-run missing Python reference verifier script");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_python_crypto.js"), true, "npm pack dry-run missing Python crypto reference verifier script");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_promotion_gate.js"), true, "npm pack dry-run missing reference promotion gate verifier script");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_rust_scaffold.js"), true, "npm pack dry-run missing Rust reference scaffold verifier script");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_native_hybrid_design_gate.js"), true, "npm pack dry-run missing native hybrid verifier script");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_verification_services.js"), true, "npm pack dry-run missing verification services verifier script");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_all.js"), true, "npm pack dry-run missing package verifier script");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "vectors/conformance-vectors.json"), true, "npm pack dry-run missing conformance vectors");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "vectors/adversarial-vectors.json"), true, "npm pack dry-run missing adversarial vectors");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "vectors/native-atom-vectors.json"), true, "npm pack dry-run missing native atom vectors");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "README.md"), true, "npm pack dry-run missing README");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XOONYA_NATIVE_ATOM_SPEC.md"), true, "npm pack dry-run missing native atom spec");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XOONYA_NATIVE_STANDARD_GOVERNANCE.md"), true, "npm pack dry-run missing native governance doc");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XNYA_CONFORMANCE_MARK.md"), true, "npm pack dry-run missing XNYA conformance mark doc");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XNYA_REFERENCE_IMPLEMENTATIONS.md"), true, "npm pack dry-run missing XNYA reference implementations doc");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/python/xnya_reference.py"), true, "npm pack dry-run missing Python XNYA candidate reference");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/python/verify_vectors.py"), true, "npm pack dry-run missing Python XNYA vector verifier");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/python/requirements-optional.txt"), true, "npm pack dry-run missing Python optional requirements");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/rust/Cargo.toml"), true, "npm pack dry-run missing Rust candidate Cargo manifest");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/rust/src/lib.rs"), true, "npm pack dry-run missing Rust candidate source");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/rust/README.md"), true, "npm pack dry-run missing Rust candidate boundary doc");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "RELEASE_NOTES.md"), true, "npm pack dry-run missing release notes");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "START_HERE.md"), true, "npm pack dry-run missing start-here");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "SERVICE_CONTRACT.md"), true, "npm pack dry-run missing service contract");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "OPERATOR_START_HERE.md"), false, "npm pack dry-run should not ship operator start-here");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "OPERATIONS_RUNBOOK.md"), false, "npm pack dry-run should not ship operations runbook");
-  assert.strictEqual(dryRun.files.some((entry) => entry.path === "PUBLISH_PLAN.md"), false, "npm pack dry-run should not ship publish plan");
-  assert.strictEqual(dryRun.files.length >= 10, true, "npm pack dry-run file count too small");
-
-  console.log("xoonya verify:release-candidate passed");
-}
-
-main();
+"use strict";
+
+const assert = require("assert");
+const fs = require("fs");
+const path = require("path");
+const { execFileSync, execSync } = require("child_process");
+const packageJson = require("../package.json");
+
+function parsePackDryRun() {
+  const output = execSync("npm pack --dry-run --json", {
+    cwd: path.resolve(__dirname, ".."),
+    encoding: "utf8"
+  });
+  const parsed = JSON.parse(output);
+  return Array.isArray(parsed) ? parsed[0] : parsed;
+}
+
+function verifyReleaseNotes() {
+  const notesPath = path.resolve(__dirname, "..", "RELEASE_NOTES.md");
+  const notes = fs.readFileSync(notesPath, "utf8");
+  assert.strictEqual(
+    /^#\s+xoonya\s+\d+\.\d+\.\d+\s+Release Notes\s*$/m.test(notes),
+    false,
+    "RELEASE_NOTES.md must not duplicate the GitHub release title as a heading"
+  );
+  assert.strictEqual(
+    notes.includes(`xoonya\` ${packageJson.version}`),
+    true,
+    "RELEASE_NOTES.md must mention the current package version"
+  );
+  const mentionedVersions = notes.match(/\b\d+\.\d+\.\d+\b/g) || [];
+  assert.strictEqual(
+    mentionedVersions.every((version) => version === packageJson.version),
+    true,
+    "RELEASE_NOTES.md must not mention prior package versions"
+  );
+}
+
+function main() {
+  const releaseOutput = execFileSync(process.execPath, [
+    path.resolve(__dirname, "..", "bin", "xoonya-release.js"),
+    "--candidate",
+    "--summary"
+  ], {
+    cwd: path.resolve(__dirname, ".."),
+    encoding: "utf8"
+  });
+  const releaseCandidate = JSON.parse(releaseOutput);
+  assert.strictEqual(releaseCandidate.product, "xoonya", "release candidate product mismatch");
+  assert.strictEqual(releaseCandidate.publish_access, "public", "release candidate publish access mismatch");
+  assert.strictEqual(releaseCandidate.checklist_count >= 5, true, "release candidate checklist count mismatch");
+  verifyReleaseNotes();
+
+  const conformanceOutput = execFileSync(process.execPath, [
+    path.resolve(__dirname, "..", "bin", "xoonya.js"),
+    "conformance",
+    "--json"
+  ], {
+    cwd: path.resolve(__dirname, ".."),
+    encoding: "utf8"
+  });
+  const conformanceSummary = JSON.parse(conformanceOutput);
+  assert.strictEqual(conformanceSummary.ok, true, "conformance command did not pass");
+  assert.strictEqual(conformanceSummary.conformance_count >= 8, true, "conformance vector count too small");
+  assert.strictEqual(conformanceSummary.adversarial_count >= 8, true, "adversarial vector count too small");
+  assert.strictEqual(
+    conformanceSummary.adversarial_reasons.includes("native_hybrid_pq_signature_invalid"),
+    true,
+    "native hybrid adversarial reason missing"
+  );
+  assert.deepStrictEqual(
+    conformanceSummary.verification_methods,
+    [
+      "detached-assertion-v1",
+      "did-vc-v1",
+      "jwt-assertion-v1",
+      "legacy-opreturn-v1",
+      "partner-proof-envelope-v1",
+      "sd-jwt-vc-v1",
+      "signed-envelope-v1",
+      "xoonya-native-anchored-v1",
+      "xoonya-native-hybrid-v1",
+      "xoonya-native-sha256-v1",
+      "xoonya-native-signed-v1"
+    ],
+    "conformance methods mismatch"
+  );
+
+  const dryRun = parsePackDryRun();
+  assert.strictEqual(dryRun.name, packageJson.name, "npm pack dry-run name mismatch");
+  assert.strictEqual(dryRun.version, packageJson.version, "npm pack dry-run version mismatch");
+  assert.strictEqual(Array.isArray(dryRun.files), true, "npm pack dry-run file list missing");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya.js"), true, "npm pack dry-run missing xoonya cli");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya-first-run.js"), true, "npm pack dry-run missing xoonya-first-run");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya-review.js"), true, "npm pack dry-run missing xoonya-review");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya-release.js"), true, "npm pack dry-run missing xoonya-release");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_external_proof_import_gate.js"), true, "npm pack dry-run missing external proof import gate verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_vectors.js"), true, "npm pack dry-run missing conformance verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_python.js"), true, "npm pack dry-run missing Python reference verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_python_crypto.js"), true, "npm pack dry-run missing Python crypto reference verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_promotion_gate.js"), true, "npm pack dry-run missing reference promotion gate verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_rust_scaffold.js"), true, "npm pack dry-run missing Rust reference scaffold verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_native_hybrid_design_gate.js"), true, "npm pack dry-run missing native hybrid verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_verification_services.js"), true, "npm pack dry-run missing verification services verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_all.js"), true, "npm pack dry-run missing package verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "vectors/conformance-vectors.json"), true, "npm pack dry-run missing conformance vectors");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "vectors/adversarial-vectors.json"), true, "npm pack dry-run missing adversarial vectors");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "vectors/native-atom-vectors.json"), true, "npm pack dry-run missing native atom vectors");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "README.md"), true, "npm pack dry-run missing README");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XOONYA_NATIVE_ATOM_SPEC.md"), true, "npm pack dry-run missing native atom spec");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XOONYA_NATIVE_STANDARD_GOVERNANCE.md"), true, "npm pack dry-run missing native governance doc");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XNYA_CONFORMANCE_MARK.md"), true, "npm pack dry-run missing XNYA conformance mark doc");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XNYA_REFERENCE_IMPLEMENTATIONS.md"), true, "npm pack dry-run missing XNYA reference implementations doc");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/python/xnya_reference.py"), true, "npm pack dry-run missing Python XNYA candidate reference");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/python/verify_vectors.py"), true, "npm pack dry-run missing Python XNYA vector verifier");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/python/requirements-optional.txt"), true, "npm pack dry-run missing Python optional requirements");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/rust/Cargo.toml"), true, "npm pack dry-run missing Rust candidate Cargo manifest");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/rust/src/lib.rs"), true, "npm pack dry-run missing Rust candidate source");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/rust/README.md"), true, "npm pack dry-run missing Rust candidate boundary doc");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "RELEASE_NOTES.md"), true, "npm pack dry-run missing release notes");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "START_HERE.md"), true, "npm pack dry-run missing start-here");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "SERVICE_CONTRACT.md"), true, "npm pack dry-run missing service contract");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "OPERATOR_START_HERE.md"), false, "npm pack dry-run should not ship operator start-here");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "OPERATIONS_RUNBOOK.md"), false, "npm pack dry-run should not ship operations runbook");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "PUBLISH_PLAN.md"), false, "npm pack dry-run should not ship publish plan");
+  assert.strictEqual(dryRun.files.length >= 10, true, "npm pack dry-run file count too small");
+
+  console.log("xoonya verify:release-candidate passed");
+}
+
+main();