xytara 3.1.0 → 3.1.2

package/lib/artifact_distribution_lane_contract.js

@@ -1,54 +1,54 @@
-"use strict";
-
-function buildArtifactDistributionLanePack() {
-  return {
-    product: "xytara",
-    category: "machine-commerce-artifact-distribution-lane-pack",
-    pack_version: "xytara-artifact-distribution-lane-pack-v1",
-    lane_state: "first_party_artifact_distribution_lane_present",
-    posture: "oci_style_distribution_and_export_lane",
-    standards: ["oci_artifacts", "oras_style_distribution"],
-    artifact_families: ["adapter_packs", "submission_bundles", "registry_snapshots", "release_artifacts"],
-    supported_surfaces: {
-      integrations_ref: "/v1/integrations",
-      integration_snapshot_ref: "/v1/integrations/review/registry-snapshot",
-      adapter_pack_ref: "/v1/adapter-pack",
-      release_center_ref: "/v1/release-center",
-      release_pack_ref: "/v1/release-pack"
-    },
-    first_run_flows: [
-      {
-        flow_ref: "artifact_distribution_alignment",
-        recommended_reason: "best path for teams that want portable adapter, registry, and release artifacts instead of ad hoc zip-and-doc distribution",
-        sequence: [
-          "inspect_artifact_distribution_lane_summary",
-          "inspect_adapter_and_registry_export_surfaces",
-          "treat_release_and_submission bundles as distribution-ready artifacts",
-          "publish_or_transfer_artifacts through standard registries later without changing canonical shapes"
-        ]
-      }
-    ],
-    guardrails: [
-      "artifact portability should preserve canonical bundle shapes instead of inventing a second artifact model",
-      "distribution posture should remain subordinate to runtime, proof, and integration truth"
-    ]
-  };
-}
-
-function summarizeArtifactDistributionLanePack() {
-  const pack = buildArtifactDistributionLanePack();
-  return {
-    product: "xytara",
-    category: "machine-commerce-artifact-distribution-lane-pack-summary",
-    summary_version: "xytara-artifact-distribution-lane-pack-summary-v1",
-    lane_state: pack.lane_state,
-    standard_count: pack.standards.length,
-    artifact_family_count: pack.artifact_families.length,
-    linked_surfaces: pack.supported_surfaces
-  };
-}
-
-module.exports = {
-  buildArtifactDistributionLanePack,
-  summarizeArtifactDistributionLanePack
-};
+"use strict";
+
+function buildArtifactDistributionLanePack() {
+  return {
+    product: "xytara",
+    category: "machine-commerce-artifact-distribution-lane-pack",
+    pack_version: "xytara-artifact-distribution-lane-pack-v1",
+    lane_state: "first_party_artifact_distribution_lane_present",
+    posture: "oci_style_distribution_and_export_lane",
+    standards: ["oci_artifacts", "oras_style_distribution"],
+    artifact_families: ["adapter_packs", "submission_bundles", "registry_snapshots", "release_artifacts"],
+    supported_surfaces: {
+      integrations_ref: "/v1/integrations",
+      integration_snapshot_ref: "/v1/integrations/review/registry-snapshot",
+      adapter_pack_ref: "/v1/adapter-pack",
+      release_center_ref: "/v1/release-center",
+      release_pack_ref: "/v1/release-pack"
+    },
+    first_run_flows: [
+      {
+        flow_ref: "artifact_distribution_alignment",
+        recommended_reason: "best path for teams that want portable adapter, registry, and release artifacts instead of ad hoc zip-and-doc distribution",
+        sequence: [
+          "inspect_artifact_distribution_lane_summary",
+          "inspect_adapter_and_registry_export_surfaces",
+          "treat_release_and_submission bundles as distribution-ready artifacts",
+          "publish_or_transfer_artifacts through standard registries later without changing canonical shapes"
+        ]
+      }
+    ],
+    guardrails: [
+      "artifact portability should preserve canonical bundle shapes instead of inventing a second artifact model",
+      "distribution posture should remain subordinate to runtime, proof, and integration truth"
+    ]
+  };
+}
+
+function summarizeArtifactDistributionLanePack() {
+  const pack = buildArtifactDistributionLanePack();
+  return {
+    product: "xytara",
+    category: "machine-commerce-artifact-distribution-lane-pack-summary",
+    summary_version: "xytara-artifact-distribution-lane-pack-summary-v1",
+    lane_state: pack.lane_state,
+    standard_count: pack.standards.length,
+    artifact_family_count: pack.artifact_families.length,
+    linked_surfaces: pack.supported_surfaces
+  };
+}
+
+module.exports = {
+  buildArtifactDistributionLanePack,
+  summarizeArtifactDistributionLanePack
+};

package/lib/asyncapi_contract.js

@@ -1,150 +1,150 @@
-"use strict";
-
-const pkg = require("../package.json");
-
-function buildAsyncApiDocument() {
-  return {
-    asyncapi: "3.0.0",
-    info: {
-      title: "xytara Event Contract",
-      version: pkg.version,
-      summary: "Machine-commerce runtime event and handoff contract.",
-      description: "This AsyncAPI document describes the stable runtime event and handoff surfaces that outside builders and partners should rely on first."
-    },
-    servers: {
-      httpRuntime: {
-        host: "127.0.0.1:4320",
-        protocol: "http",
-        description: "Local xytara HTTP event and handoff entrypoint"
-      }
-    },
-    channels: {
-      "runtime/events/emit": {
-        address: "/v1/runtime/emit",
-        messages: {
-          runtimeEmitRequest: {
-            name: "runtimeEmitRequest",
-            title: "Runtime emit request",
-            summary: "Append a runtime event record."
-          }
-        }
-      },
-      "runtime/events/anchor": {
-        address: "/v1/runtime/anchor",
-        messages: {
-          runtimeAnchorRequest: {
-            name: "runtimeAnchorRequest",
-            title: "Runtime anchor request",
-            summary: "Anchor a runtime event into registry/anchor posture."
-          }
-        }
-      },
-      "runtime/events/emit-anchor": {
-        address: "/v1/runtime/emit-anchor",
-        messages: {
-          runtimeEmitAnchorRequest: {
-            name: "runtimeEmitAnchorRequest",
-            title: "Runtime emit-anchor request",
-            summary: "Emit and anchor a runtime event in one call."
-          }
-        }
-      },
-      "handoffs/trust/emit": {
-        address: "/v1/trust/handoffs/emit",
-        messages: {
-          trustHandoffEmitRequest: {
-            name: "trustHandoffEmitRequest",
-            title: "Trust handoff emit request",
-            summary: "Emit a trust-compatible handoff bundle."
-          }
-        }
-      },
-      "handoffs/execution-receipts/emit": {
-        address: "/v1/execution-receipts/handoffs/emit",
-        messages: {
-          executionReceiptHandoffEmitRequest: {
-            name: "executionReceiptHandoffEmitRequest",
-            title: "Execution receipt handoff emit request",
-            summary: "Emit an execution receipt handoff bundle."
-          }
-        }
-      },
-      "handoffs/receipt-ledger/emit": {
-        address: "/v1/receipt-ledger/handoffs/emit",
-        messages: {
-          receiptLedgerHandoffEmitRequest: {
-            name: "receiptLedgerHandoffEmitRequest",
-            title: "Receipt ledger handoff emit request",
-            summary: "Emit a receipt-ledger handoff bundle."
-          }
-        }
-      }
-    },
-    operations: {
-      publishRuntimeEvent: {
-        action: "send",
-        channel: { $ref: "#/channels/runtime/events/emit" },
-        summary: "Publish runtime event data through the stable emit surface."
-      },
-      publishRuntimeAnchor: {
-        action: "send",
-        channel: { $ref: "#/channels/runtime/events/anchor" },
-        summary: "Publish anchoring data through the stable anchor surface."
-      },
-      publishRuntimeEmitAnchor: {
-        action: "send",
-        channel: { $ref: "#/channels/runtime/events/emit-anchor" },
-        summary: "Publish combined emit-anchor data through the stable combined surface."
-      },
-      publishTrustHandoff: {
-        action: "send",
-        channel: { $ref: "#/channels/handoffs/trust/emit" },
-        summary: "Publish trust handoff data for proof followthrough."
-      },
-      publishExecutionReceiptHandoff: {
-        action: "send",
-        channel: { $ref: "#/channels/handoffs/execution-receipts/emit" },
-        summary: "Publish execution receipt handoff data."
-      },
-      publishReceiptLedgerHandoff: {
-        action: "send",
-        channel: { $ref: "#/channels/handoffs/receipt-ledger/emit" },
-        summary: "Publish receipt-ledger handoff data."
-      }
-    },
-    "x-naxytra-contract": {
-      product: "xytara",
-      stability: "stable_public_event_layer",
-      channel_count: 6,
-      linked_docs: [
-        "SERVICE_CONTRACT.md",
-        "FINAL_CONTRACT.md",
-        "START_HERE.md"
-      ]
-    }
-  };
-}
-
-function summarizeAsyncApiDocument() {
-  const document = buildAsyncApiDocument();
-  return {
-    product: "xytara",
-    category: "machine-commerce-asyncapi-contract-summary",
-    summary_version: "xytara-asyncapi-contract-summary-v1",
-    asyncapi_version: document.asyncapi,
-    info_version: document.info.version,
-    channel_count: Object.keys(document.channels).length,
-    operation_count: Object.keys(document.operations).length,
-    primary_event_lanes: ["runtime", "handoff"],
-    linked_surfaces: {
-      asyncapi_ref: "/asyncapi.json",
-      service_contract_ref: "SERVICE_CONTRACT.md",
-      openapi_ref: "/openapi.json"
-    }
-  };
-}
-
-module.exports = {
-  buildAsyncApiDocument,
-  summarizeAsyncApiDocument
-};
+"use strict";
+
+const pkg = require("../package.json");
+
+function buildAsyncApiDocument() {
+  return {
+    asyncapi: "3.0.0",
+    info: {
+      title: "xytara Event Contract",
+      version: pkg.version,
+      summary: "Machine-commerce runtime event and handoff contract.",
+      description: "This AsyncAPI document describes the stable runtime event and handoff surfaces that outside builders and partners should rely on first."
+    },
+    servers: {
+      httpRuntime: {
+        host: "127.0.0.1:4320",
+        protocol: "http",
+        description: "Local xytara HTTP event and handoff entrypoint"
+      }
+    },
+    channels: {
+      "runtime/events/emit": {
+        address: "/v1/runtime/emit",
+        messages: {
+          runtimeEmitRequest: {
+            name: "runtimeEmitRequest",
+            title: "Runtime emit request",
+            summary: "Append a runtime event record."
+          }
+        }
+      },
+      "runtime/events/anchor": {
+        address: "/v1/runtime/anchor",
+        messages: {
+          runtimeAnchorRequest: {
+            name: "runtimeAnchorRequest",
+            title: "Runtime anchor request",
+            summary: "Anchor a runtime event into registry/anchor posture."
+          }
+        }
+      },
+      "runtime/events/emit-anchor": {
+        address: "/v1/runtime/emit-anchor",
+        messages: {
+          runtimeEmitAnchorRequest: {
+            name: "runtimeEmitAnchorRequest",
+            title: "Runtime emit-anchor request",
+            summary: "Emit and anchor a runtime event in one call."
+          }
+        }
+      },
+      "handoffs/trust/emit": {
+        address: "/v1/trust/handoffs/emit",
+        messages: {
+          trustHandoffEmitRequest: {
+            name: "trustHandoffEmitRequest",
+            title: "Trust handoff emit request",
+            summary: "Emit a trust-compatible handoff bundle."
+          }
+        }
+      },
+      "handoffs/execution-receipts/emit": {
+        address: "/v1/execution-receipts/handoffs/emit",
+        messages: {
+          executionReceiptHandoffEmitRequest: {
+            name: "executionReceiptHandoffEmitRequest",
+            title: "Execution receipt handoff emit request",
+            summary: "Emit an execution receipt handoff bundle."
+          }
+        }
+      },
+      "handoffs/receipt-ledger/emit": {
+        address: "/v1/receipt-ledger/handoffs/emit",
+        messages: {
+          receiptLedgerHandoffEmitRequest: {
+            name: "receiptLedgerHandoffEmitRequest",
+            title: "Receipt ledger handoff emit request",
+            summary: "Emit a receipt-ledger handoff bundle."
+          }
+        }
+      }
+    },
+    operations: {
+      publishRuntimeEvent: {
+        action: "send",
+        channel: { $ref: "#/channels/runtime/events/emit" },
+        summary: "Publish runtime event data through the stable emit surface."
+      },
+      publishRuntimeAnchor: {
+        action: "send",
+        channel: { $ref: "#/channels/runtime/events/anchor" },
+        summary: "Publish anchoring data through the stable anchor surface."
+      },
+      publishRuntimeEmitAnchor: {
+        action: "send",
+        channel: { $ref: "#/channels/runtime/events/emit-anchor" },
+        summary: "Publish combined emit-anchor data through the stable combined surface."
+      },
+      publishTrustHandoff: {
+        action: "send",
+        channel: { $ref: "#/channels/handoffs/trust/emit" },
+        summary: "Publish trust handoff data for proof followthrough."
+      },
+      publishExecutionReceiptHandoff: {
+        action: "send",
+        channel: { $ref: "#/channels/handoffs/execution-receipts/emit" },
+        summary: "Publish execution receipt handoff data."
+      },
+      publishReceiptLedgerHandoff: {
+        action: "send",
+        channel: { $ref: "#/channels/handoffs/receipt-ledger/emit" },
+        summary: "Publish receipt-ledger handoff data."
+      }
+    },
+    "x-naxytra-contract": {
+      product: "xytara",
+      stability: "stable_public_event_layer",
+      channel_count: 6,
+      linked_docs: [
+        "SERVICE_CONTRACT.md",
+        "FINAL_CONTRACT.md",
+        "START_HERE.md"
+      ]
+    }
+  };
+}
+
+function summarizeAsyncApiDocument() {
+  const document = buildAsyncApiDocument();
+  return {
+    product: "xytara",
+    category: "machine-commerce-asyncapi-contract-summary",
+    summary_version: "xytara-asyncapi-contract-summary-v1",
+    asyncapi_version: document.asyncapi,
+    info_version: document.info.version,
+    channel_count: Object.keys(document.channels).length,
+    operation_count: Object.keys(document.operations).length,
+    primary_event_lanes: ["runtime", "handoff"],
+    linked_surfaces: {
+      asyncapi_ref: "/asyncapi.json",
+      service_contract_ref: "SERVICE_CONTRACT.md",
+      openapi_ref: "/openapi.json"
+    }
+  };
+}
+
+module.exports = {
+  buildAsyncApiDocument,
+  summarizeAsyncApiDocument
+};

package/lib/auth_interop_contract.js

@@ -1,80 +1,80 @@
-"use strict";
-
-const pkg = require("../package.json");
-
-function buildAuthInteropContract() {
-  return {
-    product: "xytara",
-    category: "machine-commerce-auth-interop-contract",
-    contract_version: "xytara-auth-interop-contract-v1",
-    service_version: pkg.version,
-    primary_posture: "native_authority_with_oauth_oidc_token_exchange_interop",
-    supported_interop_profiles: [
-      {
-        profile_id: "oauth_client_credentials_runtime",
-        standards: ["oauth_2_0", "oidc_optional"],
-        intended_use: "machine-to-machine runtime invocation",
-        primary_routes: ["/v1/commands/execute", "/v1/mcp/tools/invoke"]
-      },
-      {
-        profile_id: "bounded_delegation_token_exchange",
-        standards: ["oauth_2_0_token_exchange", "jwt_bearer_optional"],
-        intended_use: "map upstream bearer posture into bounded delegated authority",
-        primary_routes: [
-          "/v1/account-auth/spend-credentials",
-          "/v1/account-auth/authority-bindings",
-          "/v1/commands/execute"
-        ]
-      },
-      {
-        profile_id: "mcp_a2a_a2c_interop_auth",
-        standards: ["oauth_2_0", "oidc", "token_exchange_optional"],
-        intended_use: "protocol-lane authentication for MCP, A2A, and A2C usage",
-        primary_routes: ["/v1/mcp/tools/invoke", "/x402/mcp/tools/invoke", "/v1/commands/execute"]
-      },
-      {
-        profile_id: "x402_payment_plus_bounded_auth",
-        standards: ["oauth_2_0_optional", "x402"],
-        intended_use: "combine payment challenge posture with bounded authenticated execution",
-        primary_routes: ["/x402/mcp/tools/invoke", "/x402/commands/execute"]
-      }
-    ],
-    native_authority_mapping: {
-      authority_bindings: "/v1/account-auth/authority-bindings",
-      spend_credentials: "/v1/account-auth/spend-credentials",
-      execution_entry: "/v1/commands/execute",
-      mcp_entry: "/v1/mcp/tools/invoke"
-    },
-    guardrails: [
-      "native authority bindings remain canonical for bounded execution",
-      "oauth or oidc interop must not replace native consequence bounds",
-      "token exchange may map into delegation but must not bypass authority contracts",
-      "payment verification and auth posture remain separate concerns even when combined in one flow"
-    ],
-    linked_surfaces: {
-      openapi_ref: "/openapi.json",
-      asyncapi_ref: "/asyncapi.json",
-      cloudevents_ref: "/cloudevents.json",
-      service_contract_ref: "SERVICE_CONTRACT.md"
-    }
-  };
-}
-
-function summarizeAuthInteropContract() {
-  const contract = buildAuthInteropContract();
-  return {
-    product: "xytara",
-    category: "machine-commerce-auth-interop-contract-summary",
-    summary_version: "xytara-auth-interop-contract-summary-v1",
-    contract_version: contract.contract_version,
-    profile_count: contract.supported_interop_profiles.length,
-    primary_posture: contract.primary_posture,
-    primary_protocol_lanes: ["mcp", "a2a", "a2c", "x402"],
-    linked_surfaces: contract.linked_surfaces
-  };
-}
-
-module.exports = {
-  buildAuthInteropContract,
-  summarizeAuthInteropContract
-};
+"use strict";
+
+const pkg = require("../package.json");
+
+function buildAuthInteropContract() {
+  return {
+    product: "xytara",
+    category: "machine-commerce-auth-interop-contract",
+    contract_version: "xytara-auth-interop-contract-v1",
+    service_version: pkg.version,
+    primary_posture: "native_authority_with_oauth_oidc_token_exchange_interop",
+    supported_interop_profiles: [
+      {
+        profile_id: "oauth_client_credentials_runtime",
+        standards: ["oauth_2_0", "oidc_optional"],
+        intended_use: "machine-to-machine runtime invocation",
+        primary_routes: ["/v1/commands/execute", "/v1/mcp/tools/invoke"]
+      },
+      {
+        profile_id: "bounded_delegation_token_exchange",
+        standards: ["oauth_2_0_token_exchange", "jwt_bearer_optional"],
+        intended_use: "map upstream bearer posture into bounded delegated authority",
+        primary_routes: [
+          "/v1/account-auth/spend-credentials",
+          "/v1/account-auth/authority-bindings",
+          "/v1/commands/execute"
+        ]
+      },
+      {
+        profile_id: "mcp_a2a_a2c_interop_auth",
+        standards: ["oauth_2_0", "oidc", "token_exchange_optional"],
+        intended_use: "protocol-lane authentication for MCP, A2A, and A2C usage",
+        primary_routes: ["/v1/mcp/tools/invoke", "/x402/mcp/tools/invoke", "/v1/commands/execute"]
+      },
+      {
+        profile_id: "x402_payment_plus_bounded_auth",
+        standards: ["oauth_2_0_optional", "x402"],
+        intended_use: "combine payment challenge posture with bounded authenticated execution",
+        primary_routes: ["/x402/mcp/tools/invoke", "/x402/commands/execute"]
+      }
+    ],
+    native_authority_mapping: {
+      authority_bindings: "/v1/account-auth/authority-bindings",
+      spend_credentials: "/v1/account-auth/spend-credentials",
+      execution_entry: "/v1/commands/execute",
+      mcp_entry: "/v1/mcp/tools/invoke"
+    },
+    guardrails: [
+      "native authority bindings remain canonical for bounded execution",
+      "oauth or oidc interop must not replace native consequence bounds",
+      "token exchange may map into delegation but must not bypass authority contracts",
+      "payment verification and auth posture remain separate concerns even when combined in one flow"
+    ],
+    linked_surfaces: {
+      openapi_ref: "/openapi.json",
+      asyncapi_ref: "/asyncapi.json",
+      cloudevents_ref: "/cloudevents.json",
+      service_contract_ref: "SERVICE_CONTRACT.md"
+    }
+  };
+}
+
+function summarizeAuthInteropContract() {
+  const contract = buildAuthInteropContract();
+  return {
+    product: "xytara",
+    category: "machine-commerce-auth-interop-contract-summary",
+    summary_version: "xytara-auth-interop-contract-summary-v1",
+    contract_version: contract.contract_version,
+    profile_count: contract.supported_interop_profiles.length,
+    primary_posture: contract.primary_posture,
+    primary_protocol_lanes: ["mcp", "a2a", "a2c", "x402"],
+    linked_surfaces: contract.linked_surfaces
+  };
+}
+
+module.exports = {
+  buildAuthInteropContract,
+  summarizeAuthInteropContract
+};