xytara 2.1.0 → 2.3.0

package/lib/phase_4_completion_pack.js

@@ -0,0 +1,94 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildPhase4CompletionPack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-phase-4-completion-pack",
+    phase_ref: "phase_4",
+    posture: "completion_review",
+    coverage: {
+      ecosystem_refs: ["erc8004", "identity_registry", "attestation"],
+      lane_refs: [
+        "/v1/phases/phase-4/erc8004/summary",
+        "/v1/phases/phase-4/identity-registry/summary",
+        "/v1/phases/phase-4/attestation/summary"
+      ],
+      identity_layers: ["erc8004", "identity_registry"],
+      attestation_modes: ["subject_attestation", "registry_binding", "trust_resolution"],
+      erc8004_modes: ["subject_binding", "policy_carry", "wallet_resolution"],
+      registry_modes: ["registry_binding", "subject_resolution", "registry_lookup"],
+      review_modes: ["attester_resolution", "review_carry", "trust_resolution"],
+      trust_artifacts: ["subject_ref", "registry_binding_ref", "attestation_ref"],
+      operator_surfaces: [
+        "/v1/release-center/summary",
+        "/v1/publish-plan/summary",
+        "/v1/phases/phase-4/trust-continuity/summary"
+      ]
+    },
+    completion: {
+      checks: [
+        "broad Phase 4 trust pack is public and inspectable",
+        "all current Phase 4 trust lanes are public and inspectable",
+        "identity and attestation posture are visible at phase level",
+        "trust continuity is explicit across the trust family",
+        "release-center summary reflects Phase 4 breadth and lane coverage",
+        "Phase 4 closure criteria are explicit before opening Phase 5"
+      ],
+      readiness_criteria: [
+        { ref: "criterion.phase_surface_public", label: "Phase 4 broad summary is live and inspectable", satisfied: true },
+        { ref: "criterion.trust_lane_coverage", label: "All current trust lanes are live and inspectable", satisfied: true },
+        { ref: "criterion.trust_continuity_visible", label: "Trust continuity is visible at phase level", satisfied: true },
+        { ref: "criterion.operator_surfaces_attached", label: "Operator surfaces remain attached to the trust family", satisfied: true },
+        { ref: "criterion.freeze_shape_confirmed", label: "The final Phase 4 trust lane shape is explicitly frozen", satisfied: true },
+        { ref: "criterion.next_phase_gate_reviewed", label: "A final freeze review has been recorded before opening Phase 5", satisfied: true }
+      ],
+      ready_for_next_phase: true,
+      remaining_focus: []
+    },
+    first_path: {
+      purpose: "review whether Phase 4 is complete as a trust and identity program slice rather than just enumerated",
+      first_http_sequence: [
+        "/v1/phases/phase-4/summary",
+        "/v1/phases/phase-4/completion/summary",
+        "/v1/release-center/summary"
+      ],
+      first_cli_sequence: [
+        "xytara-release --phase-4-completion --summary",
+        "xytara-release --phase-4 --summary"
+      ]
+    }
+  };
+}
+
+function summarizePhase4CompletionPack() {
+  const pack = buildPhase4CompletionPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    phase_ref: pack.phase_ref,
+    ecosystem_count: pack.coverage.ecosystem_refs.length,
+    lane_count: pack.coverage.lane_refs.length,
+    identity_layer_count: pack.coverage.identity_layers.length,
+    attestation_mode_count: pack.coverage.attestation_modes.length,
+    erc8004_mode_count: pack.coverage.erc8004_modes.length,
+    registry_mode_count: pack.coverage.registry_modes.length,
+    review_mode_count: pack.coverage.review_modes.length,
+    trust_artifact_count: pack.coverage.trust_artifacts.length,
+    operator_surface_count: pack.coverage.operator_surfaces.length,
+    completion_check_count: pack.completion.checks.length,
+    readiness_criteria_count: pack.completion.readiness_criteria.length,
+    satisfied_criteria_count: pack.completion.readiness_criteria.filter((criterion) => criterion.satisfied === true).length,
+    unsatisfied_criteria_count: pack.completion.readiness_criteria.filter((criterion) => criterion.satisfied !== true).length,
+    remaining_focus_count: pack.completion.remaining_focus.length,
+    ready_for_next_phase: pack.completion.ready_for_next_phase
+  };
+}
+
+module.exports = {
+  buildPhase4CompletionPack,
+  summarizePhase4CompletionPack
+};

package/lib/phase_4_decision_record_pack.js

@@ -0,0 +1,54 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildPhase4DecisionRecordPack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-phase-4-decision-record-pack",
+    phase_ref: "phase_4",
+    posture: "decision_record",
+    records: {
+      freeze_decision: {
+        status: "recorded",
+        description: "record the final trust lane shape as the frozen Phase 4 baseline"
+      },
+      gate_review: {
+        status: "recorded",
+        description: "record the final review that authorizes the move to Phase 5"
+      }
+    },
+    record_steps: [
+      "confirm the current trust lane family is the final Phase 4 shape",
+      "record the freeze decision outcome",
+      "record the gate review outcome",
+      "recheck phase-4 gate summary for zero unsatisfied conditions"
+    ],
+    outputs: [
+      "freeze decision status moves out of pending_record",
+      "gate review status moves out of pending_record",
+      "phase-4 gate can be flipped deliberately"
+    ]
+  };
+}
+
+function summarizePhase4DecisionRecordPack() {
+  const pack = buildPhase4DecisionRecordPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    phase_ref: pack.phase_ref,
+    pending_record_count: Object.values(pack.records).filter((record) => record.status === "pending_record").length,
+    record_step_count: pack.record_steps.length,
+    output_count: pack.outputs.length,
+    freeze_decision_status: pack.records.freeze_decision.status,
+    gate_review_status: pack.records.gate_review.status
+  };
+}
+
+module.exports = {
+  buildPhase4DecisionRecordPack,
+  summarizePhase4DecisionRecordPack
+};

package/lib/phase_4_decision_resolution_pack.js

@@ -0,0 +1,45 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildPhase4DecisionResolutionPack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-phase-4-decision-resolution-pack",
+    phase_ref: "phase_4",
+    posture: "decision_resolution",
+    transitions: [
+      "freeze_decision: pending_record -> recorded",
+      "gate_review: pending_record -> recorded"
+    ],
+    resolution_steps: [
+      "record the final trust-family freeze decision",
+      "record the final gate review",
+      "confirm freeze-review blockers are cleared",
+      "confirm gate unsatisfied count is zero",
+      "treat the gate result as the explicit signal to open Phase 5"
+    ],
+    target_gate_decision: "ready_for_phase_5",
+    target_ready_for_next_phase: true
+  };
+}
+
+function summarizePhase4DecisionResolutionPack() {
+  const pack = buildPhase4DecisionResolutionPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    phase_ref: pack.phase_ref,
+    transition_count: pack.transitions.length,
+    resolution_step_count: pack.resolution_steps.length,
+    target_gate_decision: pack.target_gate_decision,
+    target_ready_for_next_phase: pack.target_ready_for_next_phase
+  };
+}
+
+module.exports = {
+  buildPhase4DecisionResolutionPack,
+  summarizePhase4DecisionResolutionPack
+};

package/lib/phase_4_erc8004_runtime_pack.js

@@ -0,0 +1,76 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildPhase4Erc8004RuntimePack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-phase-4-erc8004-runtime-pack",
+    phase_ref: "phase_4",
+    ecosystem_refs: ["erc8004"],
+    posture: "runtime_path",
+    trust_shape: {
+      identity_layers: ["erc8004"],
+      attestation_modes: ["subject_attestation", "registry_binding", "trust_resolution"],
+      erc8004_modes: ["subject_binding", "policy_carry", "wallet_resolution"],
+      trust_artifacts: ["subject_ref", "attestation_ref", "registry_binding_ref"],
+      operator_surfaces: [
+        "/v1/release-center/summary",
+        "/v1/publish-plan/summary",
+        "/v1/phases/phase-4/summary"
+      ]
+    },
+    completion_shape: {
+      completion_checks: [
+        "the ERC8004 runtime lane is public and inspectable",
+        "trust and attestation posture stay attached to the runtime lane",
+        "operator surfaces remain available for trust review",
+        "Phase 4 begins from explicit identity and attestation legibility"
+      ]
+    },
+    first_path: {
+      purpose: "show the first public trust lane for ERC8004-linked identity and attestation",
+      first_http_sequence: [
+        "/v1/phases/phase-4/summary",
+        "/v1/release-center/summary",
+        "/v1/publish-plan/summary"
+      ],
+      first_cli_sequence: [
+        "xytara-release --phase-4-erc8004-runtime --summary",
+        "xytara-release --phase-4 --summary"
+      ],
+      expected_signals: [
+        "ERC8004 is visible as the first concrete Phase 4 trust lane",
+        "identity and attestation posture are inspectable from a stable route",
+        "Phase 4 starts from trust clarity rather than generic adapter naming"
+      ]
+    }
+  };
+}
+
+function summarizePhase4Erc8004RuntimePack() {
+  const pack = buildPhase4Erc8004RuntimePack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    phase_ref: pack.phase_ref,
+    ecosystem_count: pack.ecosystem_refs.length,
+    identity_layer_count: pack.trust_shape.identity_layers.length,
+    attestation_mode_count: pack.trust_shape.attestation_modes.length,
+    erc8004_mode_count: pack.trust_shape.erc8004_modes.length,
+    trust_artifact_count: pack.trust_shape.trust_artifacts.length,
+    completion_check_count: pack.completion_shape.completion_checks.length,
+    http_step_count: pack.first_path.first_http_sequence.length,
+    cli_step_count: pack.first_path.first_cli_sequence.length,
+    signal_count: pack.first_path.expected_signals.length,
+    operator_surface_count: pack.trust_shape.operator_surfaces.length,
+    first_http_step: pack.first_path.first_http_sequence[0] || null
+  };
+}
+
+module.exports = {
+  buildPhase4Erc8004RuntimePack,
+  summarizePhase4Erc8004RuntimePack
+};

package/lib/phase_4_freeze_baseline_pack.js

@@ -0,0 +1,67 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildPhase4FreezeBaselinePack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-phase-4-freeze-baseline-pack",
+    phase_ref: "phase_4",
+    posture: "frozen_baseline",
+    baseline: {
+      lane_refs: [
+        "/v1/phases/phase-4/erc8004/summary",
+        "/v1/phases/phase-4/identity-registry/summary",
+        "/v1/phases/phase-4/attestation/summary"
+      ],
+      identity_layers: ["erc8004", "identity_registry"],
+      attestation_modes: ["subject_attestation", "registry_binding", "trust_resolution"],
+      baseline_status: "recorded",
+      frozen_outputs: [
+        "current trust lane family is the recorded Phase 4 baseline",
+        "trust family can now be judged against a stable shape rather than an open expansion set",
+        "only the final gate review remains before Phase 5"
+      ]
+    },
+    first_path: {
+      purpose: "show that the Phase 4 trust lane family is now treated as a frozen baseline",
+      first_http_sequence: [
+        "/v1/phases/phase-4/summary",
+        "/v1/phases/phase-4/freeze-baseline/summary",
+        "/v1/phases/phase-4/gate/summary"
+      ],
+      first_cli_sequence: [
+        "xytara-release --phase-4-freeze-baseline --summary",
+        "xytara-release --phase-4 --summary"
+      ],
+      expected_signals: [
+        "the trust lane family is now explicitly frozen",
+        "lane freeze is no longer part of the remaining Phase 4 uncertainty",
+        "the final open work is narrowed to gate review rather than shape definition"
+      ]
+    }
+  };
+}
+
+function summarizePhase4FreezeBaselinePack() {
+  const pack = buildPhase4FreezeBaselinePack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    phase_ref: pack.phase_ref,
+    lane_count: pack.baseline.lane_refs.length,
+    identity_layer_count: pack.baseline.identity_layers.length,
+    attestation_mode_count: pack.baseline.attestation_modes.length,
+    baseline_status: pack.baseline.baseline_status,
+    frozen_output_count: pack.baseline.frozen_outputs.length,
+    signal_count: pack.first_path.expected_signals.length,
+    first_http_step: pack.first_path.first_http_sequence[0] || null
+  };
+}
+
+module.exports = {
+  buildPhase4FreezeBaselinePack,
+  summarizePhase4FreezeBaselinePack
+};

package/lib/phase_4_freeze_review_pack.js

@@ -0,0 +1,68 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildPhase4FreezeReviewPack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-phase-4-freeze-review-pack",
+    phase_ref: "phase_4",
+    posture: "freeze_review",
+    current_shape: {
+      lane_refs: [
+        "/v1/phases/phase-4/erc8004/summary",
+        "/v1/phases/phase-4/identity-registry/summary",
+        "/v1/phases/phase-4/attestation/summary"
+      ],
+      identity_layers: ["erc8004", "identity_registry"],
+      attestation_modes: ["subject_attestation", "registry_binding", "trust_resolution"]
+    },
+    freeze_review: {
+      decision_posture: "gate_review_recorded",
+      review_questions: [
+        "Is the current trust-lane split the exact shape we want to preserve for Phase 4?",
+        "Do ERC8004, registry, and attestation communicate distinct trust roles without overlap confusion?",
+        "Is the current operator and review coverage sufficient before opening the next phase?",
+        "Would adding more trust sub-lanes materially improve Phase 4, or just create sprawl?"
+      ],
+      resolution_criteria: [
+        { ref: "criterion.freeze_review_surface_public", label: "Freeze-review surface is public and inspectable", satisfied: true },
+        { ref: "criterion.blockers_explicit", label: "Current blockers are explicit and bounded", satisfied: true },
+        { ref: "criterion.freeze_decision_recorded", label: "Final trust lane freeze has been explicitly recorded", satisfied: true },
+        { ref: "criterion.gate_review_recorded", label: "Next-phase gate review has been explicitly recorded", satisfied: true }
+      ],
+      blockers: [],
+      freeze_outputs: [
+        "freeze decision recorded",
+        "ready_for_next_phase flipped deliberately",
+        "Phase 4 trust shape treated as stable baseline going forward"
+      ]
+    }
+  };
+}
+
+function summarizePhase4FreezeReviewPack() {
+  const pack = buildPhase4FreezeReviewPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    phase_ref: pack.phase_ref,
+    lane_count: pack.current_shape.lane_refs.length,
+    identity_layer_count: pack.current_shape.identity_layers.length,
+    attestation_mode_count: pack.current_shape.attestation_modes.length,
+    review_question_count: pack.freeze_review.review_questions.length,
+    resolution_criteria_count: pack.freeze_review.resolution_criteria.length,
+    satisfied_resolution_count: pack.freeze_review.resolution_criteria.filter((criterion) => criterion.satisfied === true).length,
+    unsatisfied_resolution_count: pack.freeze_review.resolution_criteria.filter((criterion) => criterion.satisfied !== true).length,
+    blocker_count: pack.freeze_review.blockers.length,
+    freeze_output_count: pack.freeze_review.freeze_outputs.length,
+    decision_posture: pack.freeze_review.decision_posture
+  };
+}
+
+module.exports = {
+  buildPhase4FreezeReviewPack,
+  summarizePhase4FreezeReviewPack
+};

package/lib/phase_4_gate_pack.js

@@ -0,0 +1,58 @@
+"use strict";
+
+const packageJson = require("../package.json");
+const { summarizePhase4CompletionPack } = require("./phase_4_completion_pack");
+const { summarizePhase4FreezeReviewPack } = require("./phase_4_freeze_review_pack");
+
+function buildPhase4GatePack() {
+  const completion = summarizePhase4CompletionPack();
+  const freezeReview = summarizePhase4FreezeReviewPack();
+  const unsatisfiedGateCount =
+    completion.unsatisfied_criteria_count +
+    freezeReview.unsatisfied_resolution_count;
+
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-phase-4-gate-pack",
+    phase_ref: "phase_4",
+    posture: "phase_gate",
+    gate: {
+      decision: unsatisfiedGateCount === 0 ? "ready_for_phase_5" : "hold_phase_4",
+      ready_for_next_phase: unsatisfiedGateCount === 0,
+      satisfied_gate_count:
+        completion.satisfied_criteria_count +
+        freezeReview.satisfied_resolution_count,
+      unsatisfied_gate_count: unsatisfiedGateCount,
+      blockers: unsatisfiedGateCount === 0 ? [] : [
+        "next-phase gate review has not been explicitly recorded"
+      ],
+      advance_when: [
+        "freeze decision is explicitly recorded",
+        "gate review is explicitly recorded",
+        "completion and freeze-review surfaces both show no unsatisfied gate criteria"
+      ]
+    }
+  };
+}
+
+function summarizePhase4GatePack() {
+  const pack = buildPhase4GatePack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    phase_ref: pack.phase_ref,
+    satisfied_gate_count: pack.gate.satisfied_gate_count,
+    unsatisfied_gate_count: pack.gate.unsatisfied_gate_count,
+    blocker_count: pack.gate.blockers.length,
+    advance_when_count: pack.gate.advance_when.length,
+    decision: pack.gate.decision,
+    ready_for_next_phase: pack.gate.ready_for_next_phase
+  };
+}
+
+module.exports = {
+  buildPhase4GatePack,
+  summarizePhase4GatePack
+};

package/lib/phase_4_identity_registry_runtime_pack.js

@@ -0,0 +1,75 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildPhase4IdentityRegistryRuntimePack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-phase-4-identity-registry-runtime-pack",
+    phase_ref: "phase_4",
+    ecosystem_ref: "identity_registry",
+    status: "active",
+    trust_shape: {
+      identity_layers: ["identity_registry"],
+      attestation_modes: ["registry_binding", "subject_resolution", "registry_lookup"],
+      resolution_modes: ["registry_binding", "subject_resolution", "registry_lookup"],
+      trust_artifacts: ["registry_subject_ref", "registry_binding_ref", "resolution_ref"],
+      operator_surfaces: [
+        "/v1/release-center/summary",
+        "/v1/publish-plan/summary",
+        "/v1/phases/phase-4/summary"
+      ]
+    },
+    first_steps: {
+      http: [
+        "/v1/phases/phase-4/summary",
+        "/v1/phases/phase-4/identity-registry/summary",
+        "/v1/release-center/summary"
+      ],
+      cli: [
+        "xytara-release --phase-4 --summary",
+        "xytara-release --phase-4-identity-registry-runtime --summary"
+      ]
+    },
+    success_signals: [
+      "identity registry lane is public and inspectable",
+      "registry binding and subject resolution posture are visible",
+      "operator surfaces stay attached to the registry lane"
+    ],
+    completion_shape: {
+      completion_checks: [
+        "identity registry runtime lane is public and inspectable",
+        "registry binding and resolution modes are visible",
+        "trust artifacts are explicit at lane level",
+        "operator surfaces stay attached to the lane"
+      ]
+    }
+  };
+}
+
+function summarizePhase4IdentityRegistryRuntimePack() {
+  const pack = buildPhase4IdentityRegistryRuntimePack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    phase_ref: pack.phase_ref,
+    ecosystem_count: pack.trust_shape.identity_layers.length,
+    identity_layer_count: pack.trust_shape.identity_layers.length,
+    attestation_mode_count: pack.trust_shape.attestation_modes.length,
+    resolution_mode_count: pack.trust_shape.resolution_modes.length,
+    trust_artifact_count: pack.trust_shape.trust_artifacts.length,
+    completion_check_count: pack.completion_shape.completion_checks.length,
+    http_step_count: pack.first_steps.http.length,
+    cli_step_count: pack.first_steps.cli.length,
+    signal_count: pack.success_signals.length,
+    operator_surface_count: pack.trust_shape.operator_surfaces.length,
+    first_http_step: pack.first_steps.http[0] || null
+  };
+}
+
+module.exports = {
+  buildPhase4IdentityRegistryRuntimePack,
+  summarizePhase4IdentityRegistryRuntimePack
+};

package/lib/phase_4_identity_trust_pack.js

@@ -0,0 +1,73 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildPhase4IdentityTrustPack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-phase-4-identity-trust-pack",
+    phase_ref: "phase_4",
+    status: "active",
+    ecosystems: ["erc8004", "identity_registry", "attestation"],
+    lane_refs: [
+      "/v1/phases/phase-4/erc8004/summary",
+      "/v1/phases/phase-4/identity-registry/summary",
+      "/v1/phases/phase-4/attestation/summary"
+    ],
+    trust_shape: {
+      identity_layers: ["erc8004", "identity_registry"],
+      attestation_modes: ["subject_attestation", "registry_binding", "trust_resolution"],
+      erc8004_modes: ["subject_binding", "policy_carry", "wallet_resolution"],
+      registry_modes: ["registry_binding", "subject_resolution", "registry_lookup"],
+      review_modes: ["attester_resolution", "review_carry", "trust_resolution"],
+      operator_surfaces: [
+        "/v1/release-center/summary",
+        "/v1/publish-plan/summary",
+        "/v1/phases/phase-4/erc8004/summary"
+      ]
+    },
+    completion_shape: {
+      completion_checks: [
+        "broad Phase 4 identity and trust pack is public and inspectable",
+        "Phase 4 trust lanes are public and inspectable",
+        "identity and attestation posture are visible at phase level",
+        "operator surfaces stay attached to the Phase 4 trust family",
+        "release-center summary reflects Phase 4 activation and the trust lane family"
+      ]
+    },
+    goal: "deepen identity, registry, and attestation posture as the next active program slice",
+    done_means: [
+      "Phase 3 is no longer the active program slice",
+      "Phase 4 has a public runtime-facing entry path",
+      "ERC8004 and trust-facing identity posture are visible as an explicit phase family",
+      "the trust lane family feels operational rather than like a placeholder"
+    ]
+  };
+}
+
+function summarizePhase4IdentityTrustPack() {
+  const pack = buildPhase4IdentityTrustPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    phase_ref: pack.phase_ref,
+    ecosystem_count: pack.ecosystems.length,
+    lane_count: pack.lane_refs.length,
+    identity_layer_count: pack.trust_shape.identity_layers.length,
+    attestation_mode_count: pack.trust_shape.attestation_modes.length,
+    erc8004_mode_count: pack.trust_shape.erc8004_modes.length,
+    registry_mode_count: pack.trust_shape.registry_modes.length,
+    review_mode_count: pack.trust_shape.review_modes.length,
+    operator_surface_count: pack.trust_shape.operator_surfaces.length,
+    completion_check_count: pack.completion_shape.completion_checks.length,
+    done_mean_count: pack.done_means.length,
+    first_ecosystem: pack.ecosystems[0] || null
+  };
+}
+
+module.exports = {
+  buildPhase4IdentityTrustPack,
+  summarizePhase4IdentityTrustPack
+};