xytara 2.3.0 → 2.4.0

package/lib/identity_auth.js

@@ -0,0 +1,175 @@
+"use strict";
+
+function normalizeString(value, fallback = null) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  return trimmed || fallback;
+}
+
+function ensureArray(value) {
+  return Array.isArray(value) ? value : [];
+}
+
+function nowIso() {
+  return new Date().toISOString();
+}
+
+function buildIdentityBindingPublicView(binding) {
+  if (!binding) return null;
+  return {
+    binding_id: binding.binding_id,
+    account_id: binding.account_id,
+    status: binding.status,
+    identity_kind: binding.identity_kind,
+    identity_ref: binding.identity_ref,
+    registry_scope: binding.registry_scope || null,
+    attached_agent_account_id: binding.attached_agent_account_id || null,
+    source_transaction_id: binding.source_transaction_id || null,
+    expires_at_iso: binding.expires_at_iso || null,
+    rotated_from_binding_id: binding.rotated_from_binding_id || null,
+    replaced_by_binding_id: binding.replaced_by_binding_id || null,
+    created_at_iso: binding.created_at_iso,
+    updated_at_iso: binding.updated_at_iso,
+    revoked_at_iso: binding.revoked_at_iso || null,
+    revoke_reason: binding.revoke_reason || null,
+    labels: ensureArray(binding.labels),
+    issued_by: binding.issued_by || null
+  };
+}
+
+function createIdentityBinding(state, body) {
+  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+  const createdAtIso = nowIso();
+  const binding = {
+    binding_id: normalizeString(payload.binding_id, `identity_binding_${state.machineIdentityBindings.size + 1}`),
+    account_id: normalizeString(payload.account_id, "acct_demo"),
+    status: normalizeString(payload.status, "active"),
+    identity_kind: normalizeString(payload.identity_kind, "registry_anchor_identity"),
+    identity_ref: normalizeString(payload.identity_ref, `identity_ref_${state.machineIdentityBindings.size + 1}`),
+    registry_scope: normalizeString(payload.registry_scope, null),
+    attached_agent_account_id: normalizeString(payload.attached_agent_account_id, null),
+    source_transaction_id: normalizeString(payload.source_transaction_id, null),
+    expires_at_iso: normalizeString(payload.expires_at_iso, null),
+    labels: ensureArray(payload.labels).map((value) => String(value || "").trim()).filter(Boolean),
+    issued_by: normalizeString(payload.issued_by, "operator"),
+    rotated_from_binding_id: normalizeString(payload.rotated_from_binding_id, null),
+    replaced_by_binding_id: normalizeString(payload.replaced_by_binding_id, null),
+    created_at_iso: createdAtIso,
+    updated_at_iso: createdAtIso,
+    revoked_at_iso: null,
+    revoke_reason: null
+  };
+  state.machineIdentityBindings.set(binding.binding_id, binding);
+  return buildIdentityBindingPublicView(binding);
+}
+
+function listIdentityBindings(state, filters) {
+  const payload = filters && typeof filters === "object" && !Array.isArray(filters) ? filters : {};
+  const accountId = normalizeString(payload.account_id, null);
+  const status = normalizeString(payload.status, null);
+  return Array.from(state.machineIdentityBindings.values())
+    .filter((binding) => {
+      if (accountId && binding.account_id !== accountId) return false;
+      if (status && binding.status !== status) return false;
+      return true;
+    })
+    .map((binding) => buildIdentityBindingPublicView(binding));
+}
+
+function getIdentityBinding(state, bindingId) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  return buildIdentityBindingPublicView(state.machineIdentityBindings.get(bindingId));
+}
+
+function revokeIdentityBinding(state, bindingId, body) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+  const current = state.machineIdentityBindings.get(bindingId);
+  const next = {
+    ...current,
+    status: "revoked",
+    revoked_at_iso: nowIso(),
+    revoke_reason: normalizeString(payload.reason, "operator_revoked"),
+    updated_at_iso: nowIso()
+  };
+  state.machineIdentityBindings.set(bindingId, next);
+  return buildIdentityBindingPublicView(next);
+}
+
+function getIdentityBindingRotationSummary(state, bindingId) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  const binding = state.machineIdentityBindings.get(bindingId);
+  return {
+    summary_version: "xytara-identity-binding-rotation-summary-v1",
+    binding_id: binding.binding_id,
+    account_id: binding.account_id,
+    status: binding.status,
+    predecessor_binding_id: binding.rotated_from_binding_id || null,
+    successor_binding_id: binding.replaced_by_binding_id || null,
+    expires_at_iso: binding.expires_at_iso || null,
+    rotation_state: binding.rotated_from_binding_id || binding.replaced_by_binding_id
+      ? "lineage_present"
+      : "standalone",
+    linked_surfaces: {
+      identity_binding_ref: `/v1/identity/bindings/${encodeURIComponent(binding.binding_id)}`
+    },
+    generated_at_iso: nowIso()
+  };
+}
+
+function renewIdentityBinding(state, bindingId, body) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+  const current = state.machineIdentityBindings.get(bindingId);
+  const next = {
+    ...current,
+    expires_at_iso: normalizeString(payload.expires_at_iso, current.expires_at_iso || null),
+    updated_at_iso: nowIso()
+  };
+  state.machineIdentityBindings.set(bindingId, next);
+  return buildIdentityBindingPublicView(next);
+}
+
+function rotateIdentityBinding(state, bindingId, body) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+  const current = state.machineIdentityBindings.get(bindingId);
+  const successorBindingId = normalizeString(payload.successor_binding_id, `${bindingId}_rotated`);
+  const successor = createIdentityBinding(state, {
+    binding_id: successorBindingId,
+    account_id: current.account_id,
+    identity_kind: normalizeString(payload.identity_kind, current.identity_kind),
+    identity_ref: normalizeString(payload.identity_ref, current.identity_ref),
+    registry_scope: normalizeString(payload.registry_scope, current.registry_scope),
+    attached_agent_account_id: normalizeString(payload.attached_agent_account_id, current.attached_agent_account_id),
+    source_transaction_id: normalizeString(payload.source_transaction_id, current.source_transaction_id),
+    expires_at_iso: normalizeString(payload.expires_at_iso, current.expires_at_iso || null),
+    labels: ensureArray(payload.labels).length > 0 ? ensureArray(payload.labels) : ensureArray(current.labels),
+    issued_by: normalizeString(payload.issued_by, current.issued_by || "operator"),
+    rotated_from_binding_id: current.binding_id
+  });
+  revokeIdentityBinding(state, bindingId, {
+    reason: normalizeString(payload.reason, "rotated_to_successor")
+  });
+  state.machineIdentityBindings.set(successor.binding_id, {
+    ...state.machineIdentityBindings.get(successor.binding_id),
+    rotated_from_binding_id: current.binding_id
+  });
+  state.machineIdentityBindings.set(bindingId, {
+    ...state.machineIdentityBindings.get(bindingId),
+    replaced_by_binding_id: successor.binding_id
+  });
+  return {
+    rotated_binding: buildIdentityBindingPublicView(state.machineIdentityBindings.get(bindingId)),
+    successor_identity_binding: buildIdentityBindingPublicView(state.machineIdentityBindings.get(successor.binding_id))
+  };
+}
+
+module.exports = {
+  createIdentityBinding,
+  listIdentityBindings,
+  getIdentityBinding,
+  getIdentityBindingRotationSummary,
+  renewIdentityBinding,
+  revokeIdentityBinding,
+  rotateIdentityBinding
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xytara",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "description": "Machine commerce SDK for discovery, quoting, execution, lifecycle inspection, and adapters.",
   "main": "index.js",
   "bin": {