xoonya 3.1.17 → 3.2.0

package/lib/adapter_certification_contract.js

@@ -1,90 +0,0 @@
-"use strict";
-
-const packageJson = require("../package.json");
-
-function buildAdapterCertificationContractPack() {
-  return {
-    ok: true,
-    product: packageJson.name,
-    category: "naxytra-adapter-certification-contract",
-    pack_version: "naxytra-adapter-certification-contract-v1",
-    doctrine: "xoonya_certifies_adapter_compatibility_for_proof_and_review_surfaces_without_leaking_proof_core_semantics",
-    model_state: "core_now",
-    core_claim: "adapter certification is the machine-readable gate for manifest, capability, health, idempotency, failure, proof, and front-specific compatibility claims",
-    certification_states: [
-      { state: "pass", description: "the adapter satisfies the declared front contract without material constraints" },
-      { state: "pass_with_constraints", description: "the adapter is usable but only within declared constraints" },
-      { state: "needs_retest", description: "the adapter needs a fresh run against updated vectors or interface versions" },
-      { state: "blocked", description: "the adapter cannot be certified until a required dependency or vector exists" },
-      { state: "fail", description: "the adapter does not satisfy the declared front contract" }
-    ],
-    certification_fronts: [
-      { front_id: "protocol_front", required_tests: ["protocol negotiation", "surface discovery", "normalized request translation"], required_evidence: ["manifest", "protocol compatibility result", "failure mapping result"], claim_boundary: "only_claim_listed_protocol_front_compatibility" },
-      { front_id: "execution_front", required_tests: ["task dispatch", "idempotency", "execution result normalization"], required_evidence: ["manifest", "task vector results", "proof-compatible output facts"], claim_boundary: "only_claim_listed_execution_front_compatibility" },
-      { front_id: "payment_front", required_tests: ["quote to pay compatibility", "payment admission", "reversal or refund posture"], required_evidence: ["payment state result", "receipt compatibility result", "failure mapping result"], claim_boundary: "only_claim_listed_payment_front_compatibility" },
-      { front_id: "settlement_front", required_tests: ["settlement target translation", "finality reference capture", "batch or direct settlement posture"], required_evidence: ["settlement reference", "finality state", "reconciliation evidence"], claim_boundary: "only_claim_listed_settlement_front_compatibility" },
-      { front_id: "identity_trust_front", required_tests: ["identity schema compatibility", "registry linkage", "attestation or trust-state roundtrip"], required_evidence: ["identity record", "registry proof", "trust-state result"], claim_boundary: "only_claim_listed_identity_trust_front_compatibility" },
-      { front_id: "proof_front", required_tests: ["receipt compatibility", "proof import or export compatibility", "verification hook compatibility"], required_evidence: ["proof contract result", "receipt result", "verification evidence"], claim_boundary: "only_claim_listed_proof_front_compatibility" },
-      { front_id: "treasury_front", required_tests: ["destination routing", "balance model compatibility", "payout landing compatibility"], required_evidence: ["treasury route result", "account abstraction result", "operator review note"], claim_boundary: "only_claim_listed_treasury_front_compatibility" },
-      { front_id: "operator_front", required_tests: ["review surface visibility", "promotion posture", "reporting export compatibility"], required_evidence: ["review summary", "promotion readiness result", "operator export"], claim_boundary: "only_claim_listed_operator_front_compatibility" }
-    ],
-    harness_requirements: {
-      test_categories: [
-        "manifest_validity",
-        "interface_conformance",
-        "capability_declaration",
-        "health_reporting",
-        "failure_mapping",
-        "idempotency_behavior",
-        "proof_compatibility",
-        "front_specific_lifecycle_compatibility"
-      ],
-      required_result_fields: [
-        "certification_state",
-        "interface_version",
-        "tested_fronts",
-        "tested_capabilities",
-        "failed_cases",
-        "warnings",
-        "evidence_refs"
-      ]
-    },
-    linked_surfaces: {
-      proof_bridge_ref: "/v1/proof-bridge",
-      verification_services_ref: "/v1/proof-center/verification-services",
-      submission_bundle_review_ref: "/v1/proof-center/result-package-handoff/review/summary",
-      trust_portability_ref: "/v1/proof-center/trust-portability/summary",
-      integration_matrix_ref: "/v1/integration-matrix",
-      provenance_ref: "/v1/provenance"
-    },
-    claim_boundary: "claim_adapter_certification_as_front_specific_compatibility_and_review_gate_without_claiming_vendor_default_or_proof_core_truth"
-  };
-}
-
-function summarizeAdapterCertificationContractPack() {
-  const pack = buildAdapterCertificationContractPack();
-  return {
-    ok: true,
-    product: pack.product,
-    category: pack.category,
-    summary_version: "naxytra-adapter-certification-contract-summary-v1",
-    pack_version: pack.pack_version,
-    model_state: pack.model_state,
-    certification_state_count: pack.certification_states.length,
-    certification_front_count: pack.certification_fronts.length,
-    required_test_category_count: pack.harness_requirements.test_categories.length,
-    linked_surfaces: pack.linked_surfaces
-  };
-}
-
-function getAdapterCertificationFrontDetail(frontId) {
-  const normalized = String(frontId || "").trim().toLowerCase();
-  return (buildAdapterCertificationContractPack().certification_fronts || []).find((entry) => entry.front_id === normalized) || null;
-}
-
-module.exports = {
-  buildAdapterCertificationContractPack,
-  summarizeAdapterCertificationContractPack,
-  getAdapterCertificationFrontDetail
-};
-

package/lib/announcement_pack.js

@@ -1,61 +0,0 @@
-"use strict";
-
-const packageJson = require("../package.json");
-
-function buildAnnouncementPack() {
-  return {
-    ok: true,
-    product: packageJson.name,
-    category: "proof-announcement-pack",
-    public_quickstart: {
-      install: "npm install xoonya",
-      first_cli: "xoonya-review --file ./handoff.json --summary",
-      first_release_view: "xoonya-release --center --summary",
-      first_http: "/v1/release-center/summary"
-    },
-    release_candidate: {
-      checks: [
-        "install the package on a clean machine",
-        "run xoonya-release --center --summary",
-        "run npm run verify:all",
-        "verify /v1/release-center/summary on the deployed service",
-        "verify /v1/outreach-proof/summary on the deployed service"
-      ]
-    },
-    publish_day: {
-      sequence: [
-        "publish the npm package",
-        "redeploy the service and docs surfaces",
-        "verify release-center, launch-narrative, and outreach-proof summaries live",
-        "run the first public proof-side review path",
-        "share the announcement artifact with proof operators and verification-focused builders"
-      ]
-    },
-    public_message: {
-      headline: "reviewable proof continuation for machine actions that cross trust boundaries",
-      who_should_try_first: [
-        "proof operators",
-        "runtime builders needing verification followthrough",
-        "governance and audit teams"
-      ]
-    }
-  };
-}
-
-function summarizeAnnouncementPack() {
-  const pack = buildAnnouncementPack();
-  return {
-    ok: true,
-    product: pack.product,
-    category: pack.category,
-    rc_check_count: pack.release_candidate.checks.length,
-    publish_step_count: pack.publish_day.sequence.length,
-    first_cli: pack.public_quickstart.first_cli,
-    audience_count: pack.public_message.who_should_try_first.length
-  };
-}
-
-module.exports = {
-  buildAnnouncementPack,
-  summarizeAnnouncementPack
-};

package/lib/artifact_distribution_lane_contract.js

@@ -1,54 +0,0 @@
-"use strict";
-
-function buildArtifactDistributionLanePack() {
-  return {
-    product: "xoonya",
-    category: "proof-artifact-distribution-lane-pack",
-    pack_version: "xoonya-artifact-distribution-lane-pack-v1",
-    lane_state: "first_party_artifact_distribution_lane_present",
-    posture: "oci_style_distribution_for_proof_bundles_and_integration_artifacts",
-    standards: ["oci_artifacts", "oras_style_distribution"],
-    artifact_families: ["proof_bundles", "handoff_bundles", "integration_snapshots", "release_artifacts"],
-    supported_surfaces: {
-      integrations_ref: "/v1/integrations",
-      integrations_snapshot_ref: "/v1/integrations/snapshot",
-      proof_bridge_ref: "/v1/proof-bridge",
-      result_package_trust_ref: "/v1/result-package-trust",
-      release_center_ref: "/v1/release-center"
-    },
-    first_run_flows: [
-      {
-        flow_ref: "proof_artifact_distribution_alignment",
-        recommended_reason: "best path for teams that want portable proof and integration artifacts rather than custom export conventions",
-        sequence: [
-          "inspect_artifact_distribution_lane_summary",
-          "inspect proof_bridge and import surfaces",
-          "treat proof bundles and integration snapshots as distribution-ready artifacts",
-          "publish or transfer them later through standard artifact registries without changing proof semantics"
-        ]
-      }
-    ],
-    guardrails: [
-      "artifact portability should preserve canonical proof bundle and handoff shapes",
-      "distribution posture must not create a second proof model"
-    ]
-  };
-}
-
-function summarizeArtifactDistributionLanePack() {
-  const pack = buildArtifactDistributionLanePack();
-  return {
-    product: "xoonya",
-    category: "proof-artifact-distribution-lane-pack-summary",
-    summary_version: "xoonya-artifact-distribution-lane-pack-summary-v1",
-    lane_state: pack.lane_state,
-    standard_count: pack.standards.length,
-    artifact_family_count: pack.artifact_families.length,
-    linked_surfaces: pack.supported_surfaces
-  };
-}
-
-module.exports = {
-  buildArtifactDistributionLanePack,
-  summarizeArtifactDistributionLanePack
-};

package/lib/asyncapi_contract.js

@@ -1,135 +0,0 @@
-"use strict";
-
-const pkg = require("../package.json");
-
-function buildAsyncApiDocument() {
-  return {
-    asyncapi: "3.0.0",
-    info: {
-      title: "xoonya Event Contract",
-      version: pkg.version,
-      summary: "Proof and review event contract.",
-      description: "This AsyncAPI document describes the stable proof-side canonicalization, receipt, proof-bundle, and bridge event surfaces."
-    },
-    servers: {
-      httpProof: {
-        host: "127.0.0.1:4340",
-        protocol: "http",
-        description: "Local xoonya HTTP proof event entrypoint"
-      }
-    },
-    channels: {
-      "proof/events/canonicalize": {
-        address: "/v1/events/canonicalize",
-        messages: {
-          canonicalizeEventRequest: {
-            name: "canonicalizeEventRequest",
-            title: "Canonicalize event request",
-            summary: "Canonicalize inbound event data before proof construction."
-          }
-        }
-      },
-      "proof/events/hash": {
-        address: "/v1/events/hash",
-        messages: {
-          hashEventRequest: {
-            name: "hashEventRequest",
-            title: "Hash event request",
-            summary: "Hash canonical event data."
-          }
-        }
-      },
-      "proof/receipts/emit": {
-        address: "/v1/receipts/emit",
-        messages: {
-          emitReceiptRequest: {
-            name: "emitReceiptRequest",
-            title: "Emit receipt request",
-            summary: "Emit proof receipt data."
-          }
-        }
-      },
-      "proof/bundles/build": {
-        address: "/v1/proof-bundles/build",
-        messages: {
-          buildProofBundleRequest: {
-            name: "buildProofBundleRequest",
-            title: "Build proof bundle request",
-            summary: "Build a proof bundle from canonical proof inputs."
-          }
-        }
-      },
-      "proof/bridge/economic-handoff": {
-        address: "/v1/proof-center/bridge/economic-handoff",
-        messages: {
-          economicHandoffRequest: {
-            name: "economicHandoffRequest",
-            title: "Economic handoff bridge request",
-            summary: "Bridge bounded economic consequence data into proof review."
-          }
-        }
-      }
-    },
-    operations: {
-      canonicalizeProofEvent: {
-        action: "send",
-        channel: { $ref: "#/channels/proof/events/canonicalize" },
-        summary: "Send canonicalization input into the proof loop."
-      },
-      hashProofEvent: {
-        action: "send",
-        channel: { $ref: "#/channels/proof/events/hash" },
-        summary: "Send event data for proof hash generation."
-      },
-      emitProofReceipt: {
-        action: "send",
-        channel: { $ref: "#/channels/proof/receipts/emit" },
-        summary: "Send receipt emission input into the proof loop."
-      },
-      buildProofBundle: {
-        action: "send",
-        channel: { $ref: "#/channels/proof/bundles/build" },
-        summary: "Send proof-bundle build input into the proof loop."
-      },
-      bridgeEconomicHandoff: {
-        action: "send",
-        channel: { $ref: "#/channels/proof/bridge/economic-handoff" },
-        summary: "Send runtime economic handoff data into proof review."
-      }
-    },
-    "x-naxytra-contract": {
-      product: "xoonya",
-      stability: "stable_public_event_layer",
-      channel_count: 5,
-      linked_docs: [
-        "SERVICE_CONTRACT.md",
-        "FINAL_CONTRACT.md",
-        "START_HERE.md"
-      ]
-    }
-  };
-}
-
-function summarizeAsyncApiDocument() {
-  const document = buildAsyncApiDocument();
-  return {
-    product: "xoonya",
-    category: "proof-asyncapi-contract-summary",
-    summary_version: "xoonya-asyncapi-contract-summary-v1",
-    asyncapi_version: document.asyncapi,
-    info_version: document.info.version,
-    channel_count: Object.keys(document.channels).length,
-    operation_count: Object.keys(document.operations).length,
-    primary_event_lanes: ["canonicalization", "receipts", "proof_bundles", "bridge"],
-    linked_surfaces: {
-      asyncapi_ref: "/asyncapi.json",
-      service_contract_ref: "SERVICE_CONTRACT.md",
-      openapi_ref: "/openapi.json"
-    }
-  };
-}
-
-module.exports = {
-  buildAsyncApiDocument,
-  summarizeAsyncApiDocument
-};

package/lib/auth_interop_contract.js

@@ -1,69 +0,0 @@
-"use strict";
-
-const pkg = require("../package.json");
-
-function buildAuthInteropContract() {
-  return {
-    product: "xoonya",
-    category: "proof-auth-interop-contract",
-    contract_version: "xoonya-auth-interop-contract-v1",
-    service_version: pkg.version,
-    primary_posture: "proof_verification_with_oauth_oidc_and_token_exchange_interop",
-    supported_interop_profiles: [
-      {
-        profile_id: "proof_verifier_client_credentials",
-        standards: ["oauth_2_0", "oidc_optional"],
-        intended_use: "machine verifier access to proof verification surfaces",
-        primary_routes: ["/v1/receipts/verify", "/v1/proof-bundles/verify"]
-      },
-      {
-        profile_id: "runtime_to_proof_handoff_token_exchange",
-        standards: ["oauth_2_0_token_exchange", "jwt_bearer_optional"],
-        intended_use: "map runtime-side bearer posture into bounded proof-side review and bridge intake",
-        primary_routes: ["/v1/proof-center/bridge/economic-handoff"]
-      },
-      {
-        profile_id: "proof_role_governance_interop",
-        standards: ["oauth_2_0", "oidc"],
-        intended_use: "operator and reviewer access to frozen proof-role and governance surfaces",
-        primary_routes: ["/v1/role-freeze", "/v1/role-freeze/package"]
-      }
-    ],
-    native_proof_mapping: {
-      proof_verify: "/v1/proof-bundles/verify",
-      receipt_verify: "/v1/receipts/verify",
-      bridge_economic_handoff: "/v1/proof-center/bridge/economic-handoff",
-      role_freeze_package: "/v1/role-freeze/package"
-    },
-    guardrails: [
-      "proof verification semantics remain canonical inside xoonya rather than inside bearer tokens",
-      "token exchange may convey bounded review posture but must not redefine proof truth",
-      "bridge intake auth must remain subordinate to proof-side review and governance checks"
-    ],
-    linked_surfaces: {
-      openapi_ref: "/openapi.json",
-      asyncapi_ref: "/asyncapi.json",
-      cloudevents_ref: "/cloudevents.json",
-      service_contract_ref: "SERVICE_CONTRACT.md"
-    }
-  };
-}
-
-function summarizeAuthInteropContract() {
-  const contract = buildAuthInteropContract();
-  return {
-    product: "xoonya",
-    category: "proof-auth-interop-contract-summary",
-    summary_version: "xoonya-auth-interop-contract-summary-v1",
-    contract_version: contract.contract_version,
-    profile_count: contract.supported_interop_profiles.length,
-    primary_posture: contract.primary_posture,
-    primary_protocol_lanes: ["proof_verify", "receipt_verify", "bridge"],
-    linked_surfaces: contract.linked_surfaces
-  };
-}
-
-module.exports = {
-  buildAuthInteropContract,
-  summarizeAuthInteropContract
-};

package/lib/authority_binding_lifecycle_contract.js

@@ -1,182 +0,0 @@
-"use strict";
-
-const packageJson = require("../package.json");
-
-function buildAuthorityBindingLifecycleContractPack() {
-  return {
-    ok: true,
-    product: packageJson.name,
-    category: "naxytra-authority-binding-lifecycle-contract",
-    pack_version: "naxytra-authority-binding-lifecycle-contract-v1",
-    doctrine: "xoonya_reviews_binding_lifecycle_state_without_claiming_universal_external_identity_authority_or_custody_truth",
-    model_state: "core_now",
-    core_claim: "binding lifecycle state is the proof-linked record for identity bindings authority bindings spend credentials and delegated signing",
-    binding_kinds: [
-      {
-        binding_kind: "identity_binding",
-        description: "binds a subject to an identity posture"
-      },
-      {
-        binding_kind: "authority_binding",
-        description: "binds a subject to an authority posture"
-      },
-      {
-        binding_kind: "spend_credential",
-        description: "binds a subject to a spend credential or delegated spend posture"
-      },
-      {
-        binding_kind: "delegation_grant",
-        description: "records a delegated capability grant"
-      },
-      {
-        binding_kind: "delegation_revocation",
-        description: "records that a delegation has been revoked"
-      },
-      {
-        binding_kind: "key_binding",
-        description: "binds a subject to a key or public-key reference"
-      }
-    ],
-    lifecycle_states: [
-      { state: "active", description: "usable and currently in force" },
-      { state: "rotated", description: "superseded by a successor binding" },
-      { state: "revoked", description: "disabled before natural expiry" },
-      { state: "expired", description: "no longer valid because the validity window ended" },
-      { state: "suspended", description: "temporarily unusable pending review" }
-    ],
-    canonical_objects: [
-      {
-        object_id: "binding_lifecycle_record",
-        role: "versioned_lineage_preserving_state_record_for_a_binding_or_credential",
-        required_fields: [
-          "version",
-          "binding_id",
-          "binding_kind",
-          "subject_id",
-          "status",
-          "issued_by",
-          "issued_at_iso"
-        ],
-        recommended_fields: [
-          "expires_at_iso",
-          "rotated_from_binding_id",
-          "replaced_by_binding_id",
-          "revoked_at_iso",
-          "revoke_reason",
-          "scope",
-          "key_ref",
-          "signature_suite",
-          "proof_ref",
-          "anchor_ref"
-        ],
-        optional_fields: [
-          "delegation_ref",
-          "controller_id",
-          "previous_binding_id",
-          "metadata"
-        ],
-        primary_surfaces: [
-          "/v1/phases/phase-4/identity-registry/proof",
-          "/v1/phases/phase-4/identity-registry/proof/summary",
-          "/v1/phases/phase-4/attestation/proof",
-          "/v1/proof-center/trust-portability",
-          "/v1/proof-center/trust-portability/summary"
-        ]
-      }
-    ],
-    transition_rules: [
-      "issue_creates_a_new_active_binding",
-      "renew_extends_expiry_without_breaking_lineage",
-      "rotate_creates_a_successor_binding_and_preserves_predecessor_lineage",
-      "revoke_disables_the_binding_and_preserves_auditability",
-      "expire_marks_the_binding_inactive_when_the_validity_window_ends",
-      "narrow_scope_must_not_silently_broaden_access"
-    ],
-    delegated_signing_rules: [
-      "delegated_signing_must_be_explicit",
-      "delegated_signing_must_be_scope_bounded",
-      "delegated_signing_must_be_time_bounded_unless_a_product_decision_says_otherwise",
-      "delegated_signing_must_preserve_subject_and_issuer_lineage",
-      "delegated_signing_must_not_become_hidden_shared_secret_magic"
-    ],
-    lineage_model: [
-      {
-        layer_id: "binding_review",
-        order_index: 1,
-        objects: ["binding_lifecycle_record"],
-        invariants: [
-          "issuance_is_explicit",
-          "binding_ids_are_versioned_and_auditable"
-        ]
-      },
-      {
-        layer_id: "binding_portability",
-        order_index: 2,
-        objects: ["binding_lifecycle_record"],
-        invariants: [
-          "predecessor_and_successor_linkage_is_preserved",
-          "revocation_history_remains_visible"
-        ]
-      },
-      {
-        layer_id: "proof_followthrough",
-        order_index: 3,
-        objects: ["binding_lifecycle_record"],
-        invariants: [
-          "binding_lineage_can_be_carried_into_proof_without_becoming_proof_truth_itself",
-          "optional_proof_and_anchor_refs_do_not_change_base_binding_meaning"
-        ]
-      }
-    ],
-    invariants: [
-      "binding_state_changes_are_explicit_and_versioned",
-      "rotation_preserves_lineage",
-      "revocation_preserves_auditability",
-      "delegated_signing_remains_bounded",
-      "binding_lifecycle_is_a_proof_followthrough_concept_not_a_general_web_token_story"
-    ],
-    linked_surfaces: {
-      identity_binding_proof_ref: "/v1/phases/phase-4/identity-registry/proof",
-      identity_binding_proof_summary_ref: "/v1/phases/phase-4/identity-registry/proof/summary",
-      attestation_proof_ref: "/v1/phases/phase-4/attestation/proof",
-      trust_portability_ref: "/v1/proof-center/trust-portability",
-      trust_portability_summary_ref: "/v1/proof-center/trust-portability/summary"
-    },
-    claim_boundary: "claim_the_xoonya_binding_lifecycle_followthrough_only_without_claiming_universal_external_identity_authority_or_custody_truth"
-  };
-}
-
-function summarizeAuthorityBindingLifecycleContractPack() {
-  const pack = buildAuthorityBindingLifecycleContractPack();
-  return {
-    ok: true,
-    product: pack.product,
-    category: pack.category,
-    summary_version: "naxytra-authority-binding-lifecycle-contract-summary-v1",
-    pack_version: pack.pack_version,
-    model_state: pack.model_state,
-    binding_kind_count: pack.binding_kinds.length,
-    lifecycle_state_count: pack.lifecycle_states.length,
-    canonical_object_count: pack.canonical_objects.length,
-    transition_rule_count: pack.transition_rules.length,
-    delegated_signing_rule_count: pack.delegated_signing_rules.length,
-    linked_surfaces: pack.linked_surfaces
-  };
-}
-
-function getAuthorityBindingKindDetail(bindingKind) {
-  const normalized = String(bindingKind || "").trim().toLowerCase();
-  return (buildAuthorityBindingLifecycleContractPack().binding_kinds || []).find((entry) => entry.binding_kind === normalized) || null;
-}
-
-function getAuthorityLifecycleStateDetail(state) {
-  const normalized = String(state || "").trim().toLowerCase();
-  return (buildAuthorityBindingLifecycleContractPack().lifecycle_states || []).find((entry) => entry.state === normalized) || null;
-}
-
-module.exports = {
-  buildAuthorityBindingLifecycleContractPack,
-  summarizeAuthorityBindingLifecycleContractPack,
-  getAuthorityBindingKindDetail,
-  getAuthorityLifecycleStateDetail
-};