xoonya 3.1.17 → 3.2.0

package/bin/xoonya.js

@@ -1,81 +1,113 @@
 #!/usr/bin/env node
 "use strict";
 
+const fs = require("fs");
 const path = require("path");
 const { spawnSync } = require("child_process");
 
+const OPERATOR_TOOLING_MESSAGE = "Operator tooling is not part of the xoonya verifier package. See https://www.naxytra.com/xoonya";
+
 function printUsage() {
   process.stdout.write([
     "Usage: xoonya <command> [options]",
     "",
+    "xoonya verifier: checks xoonya proof bundles, native receipts, XNYA atoms and",
+    "detached signatures (Ed25519, ECDSA, RSA, ML-DSA). The proof engine is a hosted",
+    "service and is not part of this package.",
+    "",
     "Commands:",
-    "  release [args]    Open the release/adoption/reporting surface",
-    "  review [args]     Review a carried handoff or proof input",
-    "  conformance       Run proof conformance and adversarial vectors",
-    "  first-run [args]  Guide or run proof followthrough checks",
-    "  start-here        Print the shortest first-run path",
-    "  help              Show this help message",
+    "  start-here                 Print the shortest verification path",
+    "  first-run [args]           Guide or run local native verification",
+    "  conformance [--json]       Run proof conformance and adversarial vectors",
+    "  verify <bundle.json>       Verify a proof bundle file (--strict, --pretty)",
+    "  help                       Show this help message",
     "",
     "Fastest first run:",
     "  xoonya start-here",
-    "  xoonya first-run",
     "  xoonya first-run --verify-native --pretty",
-    "  xoonya release --summary",
     "  xoonya conformance --json",
-    "  xoonya review --help"
-  ].join("\n"));
+    "  xoonya verify ./proof-bundle.json --pretty"
+  ].join("\n") + "\n");
 }
 
 function printStartHere() {
   process.stdout.write([
     "xoonya start-here",
     "",
-    "Public first-run spine:",
-    "  quote -> pay/credits -> execute -> prove",
+    "Role:",
+    "  xoonya verifies proofs and naxytra delivery evidence. The proof engine and",
+    "  server are a hosted service; this package is the verifier.",
+    "",
+    "Public spine:",
+    "  quote -> pay/credits -> execute -> prove -> verify",
     "",
     "1. Open https://www.naxytra.com/v1/first-run-kit",
     "2. Run the xytara quote-only command first; it needs no wallet secret.",
-    "3. After funded execution, verify the proof side:",
+    "3. After funded execution, verify the proof side locally:",
     "   xoonya first-run --verify-native --pretty",
-    "   node examples/package_quickstart.js",
     "   xoonya conformance --json",
-    "4. Inspect native proof surfaces:",
+    "   xoonya verify ./proof-bundle.json --pretty",
+    "4. Inspect hosted proof surfaces:",
     "   https://xoonya.onrender.com/v1/proof-center/native-standard/summary",
     "   https://xoonya.onrender.com/v1/proof-center/native-conformance-mark/summary",
     "   https://xoonya.onrender.com/v1/proof-center/native-anchor-profile/summary",
     "",
-    "Native proof modes:",
+    "Native proof methods verified locally:",
     "  xoonya-native-sha256-v1     replayable digest proof",
-    "  xoonya-native-signed-v1     key-bound authorship proof",
+    "  xoonya-native-signed-v1     key-bound signature proof (ed25519 / secp256k1 / p256)",
+    "  xoonya-native-hybrid-v1     classical + post-quantum proof (ed25519 + ml-dsa-65)",
     "  xoonya-native-anchored-v1   anchor-binding proof",
     "",
     "Boundary:",
-    "  xoonya verifies proof and anchor binding; external chain/provider truth stays external"
-  ].join("\n"));
+    "  xoonya verifies proof binding and signatures; identity, custody, settlement",
+    "  and external chain/provider truth stay external.",
+    "",
+    "More: https://www.naxytra.com/xoonya"
+  ].join("\n") + "\n");
 }
 
-function delegate(scriptName, args) {
-  const scriptPath = path.join(__dirname, scriptName);
+function delegate(scriptPath, args) {
   const result = spawnSync(process.execPath, [scriptPath, ...args], { stdio: "inherit" });
   process.exitCode = typeof result.status === "number" ? result.status : 1;
 }
 
+function readBundleArg(args) {
+  const file = args.find((token) => !token.startsWith("--"));
+  if (!file) {
+    throw new Error("usage: xoonya verify <bundle.json> [--strict] [--pretty]");
+  }
+  const raw = file === "-" ? fs.readFileSync(0, "utf8") : fs.readFileSync(path.resolve(process.cwd(), file), "utf8");
+  return JSON.parse(raw);
+}
+
+function verifyBundleCommand(args) {
+  const verifier = require("../verify");
+  let result;
+  try {
+    const bundle = readBundleArg(args);
+    result = verifier.verifyProofBundle(bundle, { strict: args.includes("--strict") });
+  } catch (error) {
+    result = { valid: false, reason: error.message };
+  }
+  process.stdout.write(`${JSON.stringify(result, null, args.includes("--pretty") ? 2 : 0)}\n`);
+  process.exitCode = result.valid === true ? 0 : 1;
+}
+
 const [command, ...rest] = process.argv.slice(2);
 
 if (!command || command === "help" || command === "--help" || command === "-h") {
   printUsage();
 } else if (command === "start-here" || command === "--start-here") {
   printStartHere();
-} else if (command === "release") {
-  delegate("xoonya-release.js", rest);
-} else if (command === "review") {
-  delegate("xoonya-review.js", rest);
+} else if (command === "release" || command === "review") {
+  process.stderr.write(`${OPERATOR_TOOLING_MESSAGE}\n`);
+  process.exitCode = 2;
 } else if (command === "first-run" || command === "firstrun") {
-  delegate("xoonya-first-run.js", rest);
+  delegate(path.join(__dirname, "xoonya-first-run.js"), rest);
 } else if (command === "conformance" || command === "verify-vectors") {
-  const scriptPath = path.join(__dirname, "..", "scripts", "verify_vectors.js");
-  const result = spawnSync(process.execPath, [scriptPath, ...rest], { stdio: "inherit" });
-  process.exitCode = typeof result.status === "number" ? result.status : 1;
+  delegate(path.join(__dirname, "..", "scripts", "verify_vectors.js"), rest);
+} else if (command === "verify" || command === "verify-bundle") {
+  verifyBundleCommand(rest);
 } else {
   printUsage();
   process.exitCode = 1;