xoonya 3.1.8 → 3.1.10

package/RELEASE_NOTES.md

@@ -1,10 +1,3 @@
-`xoonya` 3.1.8 is the synchronized release that keeps the proof line aligned with the runtime.
+`xoonya` 3.1.10 refreshes the public README and package metadata to lead with the proven capabilities: deterministic and post-quantum (Ed25519 + ML-DSA-65 hybrid) verification of the native XNYA machine-evidence format, demonstrated live via the paid x402 lane.
 
-This release carries no change to the proof engine, the native XNYA standard, the verification methods, the conformance vectors, or the public proof surfaces. It exists to keep the proof package on the same synchronized line as the runtime, which in this cycle refreshed the public MCP executor's machine-readable description to lead with its pay-per-call story.
-
-Highlights:
-
-- keeps the deterministic hash, sign, and verify core, the verification-class and strict-mode behavior, and the trust-root options unchanged
-- keeps the conformance and forgery-resistance vectors and the full verifier suite passing
-- keeps the canonical `https://naxytra.com/xoonya` public product URL and the synchronized package posture intact
-- tracks the runtime's discovery-description refresh so the proof and runtime packages stay on one release number
+There is no change to the proof engine, verification behavior, vectors, or any route — this is a documentation and packaging refresh for public outreach.

package/START_HERE.md

@@ -4,7 +4,7 @@ This is the shortest reliable path for understanding and using the public `xoony
 
 The phase program is now complete, so this file is the right starting point for a closed and release-shaped proof system rather than an in-flight milestone build.
 
-The product-side implementation, proof posture, and bounded hybrid verification work for the widened `3.0.0` finish line are now complete. The remaining step is the synchronized public `3.0.0` release cut, publish, deploy, and verification sequence documented in [NAXYTRA_3_0_0_RELEASE_CONTRACT.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/docs/release/NAXYTRA_3_0_0_RELEASE_CONTRACT.md) and [PUBLISH_PLAN.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/PUBLISH_PLAN.md).
+The product-side implementation, proof posture, and bounded hybrid verification work for the widened `3.0.0` finish line are now complete. The remaining step is the synchronized public `3.0.0` release cut, publish, deploy, and verification sequence documented in NAXYTRA_3_0_0_RELEASE_CONTRACT.md and PUBLISH_PLAN.md.
 
 If you are arriving from the broader public discovery layer, the canonical entry points are:
 
@@ -68,13 +68,13 @@ This is the fastest way to see the intended proof-side package story end-to-end.
 
 If you want the clearest cross-repo adoption path instead of the broad package tour, continue with:
 
-- [CARRIED_HANDOFF_DEMO.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/CARRIED_HANDOFF_DEMO.md)
+- CARRIED_HANDOFF_DEMO.md
 
 If you want the shortest neutral external-adoption bundle, continue with:
 
-- [PARTNER_READY_PATH.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/PARTNER_READY_PATH.md)
-- [PUBLIC_DEMO_SCRIPT.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/PUBLIC_DEMO_SCRIPT.md)
-- [EXAMPLE_PATHS.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/EXAMPLE_PATHS.md)
+- PARTNER_READY_PATH.md
+- PUBLIC_DEMO_SCRIPT.md
+- EXAMPLE_PATHS.md
 - `node examples/partner_proof_walkthrough.js`
 
 ## 3. Verify The Whole Package
@@ -91,8 +91,8 @@ This is the production-confidence check for the published proof package surface.
 
 For long-term product understanding, read:
 
-- [FINAL_CONTRACT.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/FINAL_CONTRACT.md)
-- [SERVICE_CONTRACT.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/SERVICE_CONTRACT.md)
+- FINAL_CONTRACT.md
+- SERVICE_CONTRACT.md
 - `GET /openapi.json`
 - `GET /asyncapi.json`
 - `GET /cloudevents.json`
@@ -117,23 +117,23 @@ For long-term product understanding, read:
 - `GET /v1/result-package-trust`
 - `GET /v1/event-systems`
 - `GET /v1/integrations`
-- [PROGRAM_STATUS.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/PROGRAM_STATUS.md)
-- [OPERATOR_START_HERE.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/OPERATOR_START_HERE.md)
-- [OPERATIONS_RUNBOOK.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/OPERATIONS_RUNBOOK.md)
-- [PROGRAM_COMPLETE_RELEASE.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/PROGRAM_COMPLETE_RELEASE.md)
-- [WHY_XYTARA_XOONYA.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/WHY_XYTARA_XOONYA.md)
-- [CARRIED_HANDOFF_DEMO.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/CARRIED_HANDOFF_DEMO.md)
-- [PARTNER_READY_PATH.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/PARTNER_READY_PATH.md)
-- [TERMINOLOGY.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/TERMINOLOGY.md)
+- PROGRAM_STATUS.md
+- OPERATOR_START_HERE.md
+- OPERATIONS_RUNBOOK.md
+- PROGRAM_COMPLETE_RELEASE.md
+- WHY_XYTARA_XOONYA.md
+- CARRIED_HANDOFF_DEMO.md
+- PARTNER_READY_PATH.md
+- TERMINOLOGY.md
 
 ## 5. If You Are Integrating From Outside
 
 Continue with:
 
-- [CROSS_RUNTIME_POSTURE.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/CROSS_RUNTIME_POSTURE.md)
-- [integrations/PROOF_INTEGRATION_PROCESS.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/integrations/PROOF_INTEGRATION_PROCESS.md)
-- [PARTNER_READY_PATH.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/PARTNER_READY_PATH.md)
-- [COMPATIBILITY_NOTE.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/COMPATIBILITY_NOTE.md)
+- CROSS_RUNTIME_POSTURE.md
+- integrations/PROOF_INTEGRATION_PROCESS.md
+- PARTNER_READY_PATH.md
+- COMPATIBILITY_NOTE.md
 
 ## 6. Production Reading Rule
 
@@ -155,5 +155,5 @@ If you want the shortest CLI-first read of the package after install, use:
 
 Use:
 
-- [PROGRAM_STATUS.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/PROGRAM_STATUS.md)
-- [OPERATOR_START_HERE.md](C:/Users/Yoga/Desktop/workspace/vscode_workspace_naxytra/naxytra/xoonya/OPERATOR_START_HERE.md)
+- PROGRAM_STATUS.md
+- OPERATOR_START_HERE.md

package/lib/external_proof_verify.js

@@ -0,0 +1,189 @@
+"use strict";
+
+// Cryptographic verification of IMPORTED external proofs.
+//
+// xoonya binds external proof material into its own bundles. This module lets it
+// additionally VERIFY the external material's own signature — reporting the
+// cryptographic FACTS it can establish, without over-claiming trust.
+//
+// Honesty model (important): from a single self-contained request, xoonya can
+// only establish that "a signature is valid under key K" (signature_valid) and
+// report K's fingerprint (signing_key_ref). It CANNOT establish that K is the
+// legitimate issuer/attester, nor revocation or DID-resolution status. Trust in K
+// is the consumer's decision. The only way a caller gets a trust-anchored result
+// (expected_key_match=true) is by DECLARING, out of band, the key fingerprint they
+// already trust (expected_key_ref) and having the signer match it. A key supplied
+// in the same request — or a self-asserted key embedded in the proof — is NOT, by
+// itself, treated as trusted.
+//
+// Dependency-free (node crypto). Supports compact JWS (EdDSA, ES256/384/512,
+// ES256K, RS256/384/512, PS256/384/512) and generic detached signatures. Private
+// key material (e.g. a JWK with a `d` component) is refused.
+
+const crypto = require("crypto");
+
+function b64urlToBuffer(s) {
+  const str = String(s || "").replace(/-/g, "+").replace(/_/g, "/");
+  const pad = str.length % 4 === 0 ? "" : "=".repeat(4 - (str.length % 4));
+  return Buffer.from(str + pad, "base64");
+}
+
+// alg -> { hash, kind, keyType?/curve? } ; curve/keyType bind the declared alg to
+// the actual key so the reported alg describes how it was really validated.
+const JWS_ALG = {
+  EdDSA: { hash: null, kind: "eddsa", keyType: "ed25519" },
+  ES256: { hash: "sha256", kind: "ecdsa", curve: "prime256v1" },
+  ES384: { hash: "sha384", kind: "ecdsa", curve: "secp384r1" },
+  ES512: { hash: "sha512", kind: "ecdsa", curve: "secp521r1" },
+  ES256K: { hash: "sha256", kind: "ecdsa", curve: "secp256k1" },
+  RS256: { hash: "sha256", kind: "rsa" },
+  RS384: { hash: "sha384", kind: "rsa" },
+  RS512: { hash: "sha512", kind: "rsa" },
+  PS256: { hash: "sha256", kind: "rsapss" },
+  PS384: { hash: "sha384", kind: "rsapss" },
+  PS512: { hash: "sha512", kind: "rsapss" }
+};
+
+function isPrivateJwk(obj) {
+  return Boolean(obj && typeof obj === "object" && !Buffer.isBuffer(obj) && typeof obj.d === "string" && obj.d.length > 0);
+}
+
+// Build a PUBLIC KeyObject from PEM / base64 DER SPKI / public JWK. Refuses
+// private key material. Returns null on any problem.
+function toPublicKeyObject(input) {
+  if (!input) return null;
+  try {
+    if (typeof input === "object" && !Buffer.isBuffer(input)) {
+      if (isPrivateJwk(input)) return null; // never accept private material
+      return crypto.createPublicKey({ key: input, format: "jwk" });
+    }
+    const s = String(input).trim();
+    if (/BEGIN (EC |RSA |DSA |OPENSSH |PGP )?PRIVATE KEY/.test(s)) return null;
+    if (s.includes("BEGIN ")) return crypto.createPublicKey({ key: s, format: "pem" });
+    return crypto.createPublicKey({ key: Buffer.from(s, "base64"), format: "der", type: "spki" });
+  } catch (_) {
+    return null;
+  }
+}
+
+function keyRef(keyObject) {
+  try {
+    const spki = keyObject.export({ type: "spki", format: "der" });
+    const algo = keyObject.asymmetricKeyType || "key";
+    return `${algo}-spki-sha256:` + crypto.createHash("sha256").update(spki).digest("hex");
+  } catch (_) {
+    return null;
+  }
+}
+
+// The declared alg must be consistent with the actual key type/curve.
+function keyMatchesAlg(keyObject, alg) {
+  const spec = JWS_ALG[alg];
+  if (!spec || !keyObject) return false;
+  const t = keyObject.asymmetricKeyType;
+  if (spec.kind === "eddsa") return t === "ed25519";
+  if (spec.kind === "ecdsa") {
+    if (t !== "ec") return false;
+    const details = keyObject.asymmetricKeyDetails || {};
+    return details.namedCurve === spec.curve;
+  }
+  if (spec.kind === "rsa" || spec.kind === "rsapss") return t === "rsa" || t === "rsa-pss";
+  return false;
+}
+
+function verifyWithAlg(alg, signingInput, signature, keyObject) {
+  const spec = JWS_ALG[alg];
+  if (!spec || !keyObject) return false;
+  if (!keyMatchesAlg(keyObject, alg)) return false; // bind declared alg to the key
+  const data = Buffer.isBuffer(signingInput) ? signingInput : Buffer.from(String(signingInput), "utf8");
+  try {
+    if (spec.kind === "eddsa") return crypto.verify(null, data, keyObject, signature);
+    if (spec.kind === "ecdsa") return crypto.verify(spec.hash, data, { key: keyObject, dsaEncoding: "ieee-p1363" }, signature);
+    if (spec.kind === "rsa") return crypto.verify(spec.hash, data, keyObject, signature);
+    if (spec.kind === "rsapss") {
+      return crypto.verify(spec.hash, data, { key: keyObject, padding: crypto.constants.RSA_PKCS1_PSS_PADDING, saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST }, signature);
+    }
+  } catch (_) {
+    return false;
+  }
+  return false;
+}
+
+function trustResult(signatureValid, keyObject, keySource, expectedKeyRef, alg, extra) {
+  const kref = keyRef(keyObject);
+  const expected = typeof expectedKeyRef === "string" && expectedKeyRef.trim() ? expectedKeyRef.trim() : null;
+  const expectedMatch = expected ? kref === expected : null;
+  return {
+    ok: true,
+    signature_valid: signatureValid === true,
+    signing_key_ref: kref,
+    key_source: keySource,
+    expected_key_ref: expected,
+    // true only when the caller declared a trusted key fingerprint AND the signer
+    // matches it; null when no expectation was declared. Trust in signing_key_ref
+    // is otherwise the consumer's decision.
+    expected_key_match: expectedMatch,
+    trust_anchored: signatureValid === true && expectedMatch === true,
+    alg,
+    ...(extra || {})
+  };
+}
+
+// Verify a compact JWS. opts = { trusted_public_key?, expected_key_ref? }.
+function verifyJws(jwsCompact, opts) {
+  const o = opts && typeof opts === "object" ? opts : {};
+  const parts = String(jwsCompact || "").split(".");
+  if (parts.length !== 3) return { ok: false, reason: "jws_malformed" };
+  const [protectedB64, payloadB64, signatureB64] = parts;
+  let header;
+  try {
+    header = JSON.parse(b64urlToBuffer(protectedB64).toString("utf8"));
+  } catch (_) {
+    return { ok: false, reason: "jws_header_invalid" };
+  }
+  const alg = header && typeof header.alg === "string" ? header.alg : null;
+  if (alg === "none") return { ok: false, reason: "jws_alg_none_rejected" };
+  if (!alg || !JWS_ALG[alg]) return { ok: false, reason: "jws_alg_unsupported", alg: alg || null };
+  // Refuse unknown critical extensions and non-standard signing-input variants.
+  if (Array.isArray(header.crit) && header.crit.length > 0) return { ok: false, reason: "jws_crit_unsupported" };
+  if (header.b64 === false) return { ok: false, reason: "jws_unencoded_payload_unsupported" };
+
+  const trustedKey = o.trusted_public_key ? toPublicKeyObject(o.trusted_public_key) : null;
+  const embeddedKey = !trustedKey && header.jwk ? toPublicKeyObject(header.jwk) : null;
+  const keyObject = trustedKey || embeddedKey;
+  if (!keyObject) return { ok: false, reason: "no_public_key" };
+
+  const valid = verifyWithAlg(alg, `${protectedB64}.${payloadB64}`, b64urlToBuffer(signatureB64), keyObject);
+  return trustResult(valid, keyObject, trustedKey ? "caller_supplied" : "embedded_self_asserted", o.expected_key_ref, alg, {
+    header,
+    payload_b64url: payloadB64
+  });
+}
+
+// Verify a detached signature over `material`. opts = { material, signature,
+// signature_encoding?, public_key, algorithm, expected_key_ref? }.
+function verifyDetachedSignature(opts) {
+  const o = opts && typeof opts === "object" ? opts : {};
+  const alg = typeof o.algorithm === "string" ? o.algorithm : null;
+  if (!alg || !JWS_ALG[alg]) return { ok: false, reason: "algorithm_unsupported", alg: alg || null };
+  const keyObject = toPublicKeyObject(o.public_key);
+  if (!keyObject) return { ok: false, reason: "no_public_key" };
+  if (o.material === undefined || o.material === null) return { ok: false, reason: "material_required" };
+  const material = Buffer.isBuffer(o.material) ? o.material : Buffer.from(String(o.material), "utf8");
+  let signature;
+  try {
+    const enc = o.signature_encoding === "hex" ? "hex" : o.signature_encoding === "base64url" ? null : "base64";
+    signature = enc ? Buffer.from(String(o.signature || ""), enc) : b64urlToBuffer(o.signature);
+  } catch (_) {
+    return { ok: false, reason: "signature_invalid" };
+  }
+  if (signature.length === 0) return { ok: false, reason: "signature_invalid" };
+  const valid = verifyWithAlg(alg, material, signature, keyObject);
+  return trustResult(valid, keyObject, "caller_supplied", o.expected_key_ref, alg);
+}
+
+function looksLikeCompactJws(s) {
+  return typeof s === "string" && /^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(s.trim());
+}
+
+module.exports = { verifyJws, verifyDetachedSignature, toPublicKeyObject, isPrivateJwk, looksLikeCompactJws };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "xoonya",
-  "version": "3.1.8",
-  "description": "Deterministic proof and review engine for receipts, handoffs, governance, and verification.",
+  "version": "3.1.10",
+  "description": "Deterministic proof and review engine with post-quantum verification (Ed25519 + ML-DSA-65 hybrid) for receipts, handoffs, governance, and the native XNYA machine-evidence format. Verified live via the paid x402 lane.",
   "main": "index.js",
   "bin": {
     "xoonya": "bin/xoonya.js",
@@ -69,13 +69,23 @@
     "proof-bundle",
     "deterministic",
     "machine",
-    "evidence"
+    "evidence",
+    "post-quantum",
+    "ml-dsa",
+    "slh-dsa",
+    "pqc",
+    "xnya",
+    "ed25519",
+    "x402"
   ],
   "scripts": {
     "start": "node server.js",
     "verify:package": "node scripts/verify_all.js",
     "verify:conformance": "node scripts/verify_vectors.js",
     "verify:external-proof-import-gate": "node scripts/verify_external_proof_import_gate.js",
+    "verify:external-proof-signature": "node scripts/verify_external_proof_signature.js",
+    "verify:paid-execute": "node scripts/verify_paid_execute.js",
+    "verify:paywall-flag": "node scripts/verify_paywall_flag.js",
     "verify:integrations": "node scripts/verify_integrations.js",
     "verify:tooling": "node scripts/verify_tooling.js",
     "verify:reference-python": "node scripts/verify_reference_python.js",
@@ -92,7 +102,7 @@
     "verify:service": "node scripts/verify_service.js",
     "verify:forgery-resistance": "node scripts/verify_forgery_resistance.js",
     "verify:release-candidate": "node scripts/verify_release_candidate.js",
-    "verify:all": "node scripts/verify_all.js && node scripts/verify_external_proof_import_gate.js && node scripts/verify_integrations.js && node scripts/verify_tooling.js && node scripts/verify_vectors.js && node scripts/verify_reference_python.js && node scripts/verify_reference_promotion_gate.js && node scripts/verify_reference_rust_scaffold.js && node scripts/verify_native_hybrid_design_gate.js && node scripts/verify_verification_services.js && node scripts/verify_trust_portability.js && node scripts/verify_control_plane_contracts.js && node scripts/verify_control_plane_routes.js && node scripts/verify_examples.js && node scripts/verify_service.js && node scripts/verify_forgery_resistance.js",
+    "verify:all": "node scripts/verify_all.js && node scripts/verify_external_proof_import_gate.js && node scripts/verify_integrations.js && node scripts/verify_tooling.js && node scripts/verify_vectors.js && node scripts/verify_reference_python.js && node scripts/verify_reference_promotion_gate.js && node scripts/verify_reference_rust_scaffold.js && node scripts/verify_native_hybrid_design_gate.js && node scripts/verify_verification_services.js && node scripts/verify_trust_portability.js && node scripts/verify_control_plane_contracts.js && node scripts/verify_control_plane_routes.js && node scripts/verify_examples.js && node scripts/verify_service.js && node scripts/verify_forgery_resistance.js && node scripts/verify_external_proof_signature.js && node scripts/verify_paid_execute.js && node scripts/verify_paywall_flag.js",
     "prepublishOnly": "npm run verify:release-candidate"
   }
 }