xytara 3.1.0 → 3.1.2

package/lib/external_credit_bridge.js

@@ -1,142 +1,142 @@
-"use strict";
-
-const { applyRailCredits, upsertEntitlementPool } = require("./commerce_economics");
-const { findCreditPack } = require("../fixtures/catalog");
-
-function normalizeString(value, fallback) {
-  const trimmed = typeof value === "string" ? value.trim() : "";
-  return trimmed || fallback || null;
-}
-
-function ensureObject(value) {
-  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-
-function nowIso() {
-  return new Date().toISOString();
-}
-
-function listExternalCreditGrants(state, accountId) {
-  const grants = Array.from(state.externalCreditGrants.values());
-  if (!accountId) return grants;
-  return grants.filter((grant) => grant && grant.account_id === accountId);
-}
-
-function getExternalCreditGrant(state, grantId) {
-  return state.externalCreditGrants.get(grantId) || null;
-}
-
-function findExternalCreditGrantByIdempotencyKey(state, idempotencyKey) {
-  if (!idempotencyKey) return null;
-  return Array.from(state.externalCreditGrants.values()).find((grant) => grant && grant.idempotency_key === idempotencyKey) || null;
-}
-
-function createExternalCreditGrant(state, body) {
-  const payload = ensureObject(body);
-  const grantId = normalizeString(payload.grant_id, null);
-  const idempotencyKey = normalizeString(payload.idempotency_key, null);
-
-  if (grantId && state.externalCreditGrants.has(grantId)) {
-    return state.externalCreditGrants.get(grantId);
-  }
-  const existingByIdempotency = findExternalCreditGrantByIdempotencyKey(state, idempotencyKey);
-  if (existingByIdempotency) {
-    return existingByIdempotency;
-  }
-
-  const createdAt = nowIso();
-  const nextGrantId = grantId || `external_credit_grant_${state.externalCreditGrants.size + 1}`;
-  const accountId = normalizeString(payload.account_id, "acct_demo");
-  const packId = normalizeString(payload.pack_id, normalizeString(payload.package_id, null));
-  const creditPack = packId ? findCreditPack(packId) : null;
-  if (packId && !creditPack) {
-    return {
-      ok: false,
-      reason: "credit_pack_not_found",
-      pack_id: packId
-    };
-  }
-  const units = Number.isFinite(Number(payload.units))
-    ? Number(payload.units)
-    : creditPack
-      ? Number(creditPack.issued_units || 0)
-      : 0;
-  const amountMinor = Number.isFinite(Number(payload.amount_minor))
-    ? Number(payload.amount_minor)
-    : creditPack && Number.isFinite(Number(creditPack.nominal_amount_minor))
-      ? Number(creditPack.nominal_amount_minor)
-      : null;
-  const currency = normalizeString(
-    payload.currency,
-    creditPack
-      ? normalizeString(creditPack.nominal_currency, amountMinor != null ? "USD" : null)
-      : amountMinor != null
-        ? "USD"
-        : null
-  );
-  const source = normalizeString(payload.source, "external_checkout");
-  const providerReference = normalizeString(payload.provider_reference, null);
-  const purchaseReference = normalizeString(payload.purchase_reference, null);
-  const metadata = ensureObject(payload.metadata);
-  const creditEventId = normalizeString(payload.credit_event_id, `credit_${nextGrantId}`);
-
-  const creditEvent = applyRailCredits(state, {
-    account_id: accountId,
-    credit_event_id: creditEventId,
-    rail_kind: "external_checkout_bridge",
-    units,
-    amount_minor: amountMinor,
-    currency,
-    provider_reference: providerReference,
-    reason: "external_credit_grant",
-    metadata: {
-      source,
-      purchase_reference: purchaseReference,
-      pack_id: packId,
-      ...metadata
-    }
-  });
-
-  const grant = {
-    grant_id: nextGrantId,
-    account_id: accountId,
-    units,
-    amount_minor: amountMinor,
-    currency,
-    source,
-    provider_reference: providerReference,
-    purchase_reference: purchaseReference,
-    pack_id: packId,
-    credit_pack: creditPack ? {
-      pack_id: creditPack.pack_id,
-      title: creditPack.title,
-      category: creditPack.category,
-      intended_usage_posture: creditPack.intended_usage_posture
-    } : null,
-    idempotency_key: idempotencyKey || nextGrantId,
-    metadata,
-    entitlement_id: normalizeString(payload.entitlement_id, `entitlement_${nextGrantId}`),
-    credit_event_id: creditEvent.credit_event_id,
-    credit_event: creditEvent,
-    status: "recorded",
-    created_at_iso: createdAt,
-    updated_at_iso: createdAt
-  };
-
-  grant.entitlement = upsertEntitlementPool(state, {
-    entitlement_id: grant.entitlement_id,
-    account_id: accountId,
-    pack_id: packId,
-    source_ref: grant.grant_id,
-    issued_units: units
-  });
-
-  state.externalCreditGrants.set(grant.grant_id, grant);
-  return grant;
-}
-
-module.exports = {
-  createExternalCreditGrant,
-  getExternalCreditGrant,
-  listExternalCreditGrants
-};
+"use strict";
+
+const { applyRailCredits, upsertEntitlementPool } = require("./commerce_economics");
+const { findCreditPack } = require("../fixtures/catalog");
+
+function normalizeString(value, fallback) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  return trimmed || fallback || null;
+}
+
+function ensureObject(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+
+function nowIso() {
+  return new Date().toISOString();
+}
+
+function listExternalCreditGrants(state, accountId) {
+  const grants = Array.from(state.externalCreditGrants.values());
+  if (!accountId) return grants;
+  return grants.filter((grant) => grant && grant.account_id === accountId);
+}
+
+function getExternalCreditGrant(state, grantId) {
+  return state.externalCreditGrants.get(grantId) || null;
+}
+
+function findExternalCreditGrantByIdempotencyKey(state, idempotencyKey) {
+  if (!idempotencyKey) return null;
+  return Array.from(state.externalCreditGrants.values()).find((grant) => grant && grant.idempotency_key === idempotencyKey) || null;
+}
+
+function createExternalCreditGrant(state, body) {
+  const payload = ensureObject(body);
+  const grantId = normalizeString(payload.grant_id, null);
+  const idempotencyKey = normalizeString(payload.idempotency_key, null);
+
+  if (grantId && state.externalCreditGrants.has(grantId)) {
+    return state.externalCreditGrants.get(grantId);
+  }
+  const existingByIdempotency = findExternalCreditGrantByIdempotencyKey(state, idempotencyKey);
+  if (existingByIdempotency) {
+    return existingByIdempotency;
+  }
+
+  const createdAt = nowIso();
+  const nextGrantId = grantId || `external_credit_grant_${state.externalCreditGrants.size + 1}`;
+  const accountId = normalizeString(payload.account_id, "acct_demo");
+  const packId = normalizeString(payload.pack_id, normalizeString(payload.package_id, null));
+  const creditPack = packId ? findCreditPack(packId) : null;
+  if (packId && !creditPack) {
+    return {
+      ok: false,
+      reason: "credit_pack_not_found",
+      pack_id: packId
+    };
+  }
+  const units = Number.isFinite(Number(payload.units))
+    ? Number(payload.units)
+    : creditPack
+      ? Number(creditPack.issued_units || 0)
+      : 0;
+  const amountMinor = Number.isFinite(Number(payload.amount_minor))
+    ? Number(payload.amount_minor)
+    : creditPack && Number.isFinite(Number(creditPack.nominal_amount_minor))
+      ? Number(creditPack.nominal_amount_minor)
+      : null;
+  const currency = normalizeString(
+    payload.currency,
+    creditPack
+      ? normalizeString(creditPack.nominal_currency, amountMinor != null ? "USD" : null)
+      : amountMinor != null
+        ? "USD"
+        : null
+  );
+  const source = normalizeString(payload.source, "external_checkout");
+  const providerReference = normalizeString(payload.provider_reference, null);
+  const purchaseReference = normalizeString(payload.purchase_reference, null);
+  const metadata = ensureObject(payload.metadata);
+  const creditEventId = normalizeString(payload.credit_event_id, `credit_${nextGrantId}`);
+
+  const creditEvent = applyRailCredits(state, {
+    account_id: accountId,
+    credit_event_id: creditEventId,
+    rail_kind: "external_checkout_bridge",
+    units,
+    amount_minor: amountMinor,
+    currency,
+    provider_reference: providerReference,
+    reason: "external_credit_grant",
+    metadata: {
+      source,
+      purchase_reference: purchaseReference,
+      pack_id: packId,
+      ...metadata
+    }
+  });
+
+  const grant = {
+    grant_id: nextGrantId,
+    account_id: accountId,
+    units,
+    amount_minor: amountMinor,
+    currency,
+    source,
+    provider_reference: providerReference,
+    purchase_reference: purchaseReference,
+    pack_id: packId,
+    credit_pack: creditPack ? {
+      pack_id: creditPack.pack_id,
+      title: creditPack.title,
+      category: creditPack.category,
+      intended_usage_posture: creditPack.intended_usage_posture
+    } : null,
+    idempotency_key: idempotencyKey || nextGrantId,
+    metadata,
+    entitlement_id: normalizeString(payload.entitlement_id, `entitlement_${nextGrantId}`),
+    credit_event_id: creditEvent.credit_event_id,
+    credit_event: creditEvent,
+    status: "recorded",
+    created_at_iso: createdAt,
+    updated_at_iso: createdAt
+  };
+
+  grant.entitlement = upsertEntitlementPool(state, {
+    entitlement_id: grant.entitlement_id,
+    account_id: accountId,
+    pack_id: packId,
+    source_ref: grant.grant_id,
+    issued_units: units
+  });
+
+  state.externalCreditGrants.set(grant.grant_id, grant);
+  return grant;
+}
+
+module.exports = {
+  createExternalCreditGrant,
+  getExternalCreditGrant,
+  listExternalCreditGrants
+};

package/lib/external_execution_runtime.js

@@ -1,132 +1,132 @@
-"use strict";
-
-const { buildFetchOptionsForPurpose } = require("./network_transport");
-
-function normalizeString(value, fallback = "") {
-  const raw = typeof value === "string" ? value.trim() : "";
-  return raw || fallback;
-}
-
-function ensureObject(value) {
-  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-
-function loadExecutionTargetRegistry() {
-  const raw = String(process.env.XYTARA_EXECUTION_TARGETS_JSON || "").trim();
-  if (!raw) return [];
-  let parsed = [];
-  try {
-    parsed = JSON.parse(raw);
-  } catch (_) {
-    return [];
-  }
-  if (!Array.isArray(parsed)) return [];
-  return parsed
-    .map((entry, index) => {
-      const item = ensureObject(entry);
-      const targetId = normalizeString(item.target_id, `execution_target_${index + 1}`);
-      const endpointUrl = normalizeString(item.endpoint_url);
-      if (!endpointUrl) return null;
-      return {
-        target_id: targetId,
-        endpoint_url: endpointUrl,
-        task_ref: normalizeString(item.task_ref) || null,
-        tool_name: normalizeString(item.tool_name) || null,
-        integration_id: normalizeString(item.integration_id) || null,
-        provider: normalizeString(item.provider, "external_execution"),
-        auth_token: normalizeString(item.auth_token) || null,
-        timeout_ms: Math.max(500, Number(item.timeout_ms || 10000) || 10000),
-        enabled: item.enabled !== false
-      };
-    })
-    .filter(Boolean);
-}
-
-function resolveExecutionTarget(payload, quote) {
-  const registry = loadExecutionTargetRegistry();
-  if (registry.length < 1) return null;
-  const body = ensureObject(payload && payload.body);
-  const taskRefs = Array.isArray(payload && payload.tasks) && payload.tasks.length > 0
-    ? payload.tasks.map((task) => normalizeString(task && task.task_ref)).filter(Boolean)
-    : [normalizeString(payload && payload.task_ref)].filter(Boolean);
-  const toolName = normalizeString(body.tool_name) || null;
-  const integrationIds = new Set(
-    []
-      .concat(normalizeString(payload && payload.integration_id) ? [normalizeString(payload && payload.integration_id)] : [])
-      .concat(Array.isArray(payload && payload.integration_ids) ? payload.integration_ids.map((value) => normalizeString(value)).filter(Boolean) : [])
-      .concat(Array.isArray(quote && quote.integration_ids) ? quote.integration_ids.map((value) => normalizeString(value)).filter(Boolean) : [])
-  );
-
-  return registry.find((target) => {
-    if (!target.enabled) return false;
-    if (target.task_ref && !taskRefs.includes(target.task_ref)) return false;
-    if (target.tool_name && target.tool_name !== toolName) return false;
-    if (target.integration_id && !integrationIds.has(target.integration_id)) return false;
-    return true;
-  }) || null;
-}
-
-async function executeExternalTarget(target, payload, quote, authorizationContext) {
-  if (!target) return null;
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), target.timeout_ms);
-  const body = JSON.stringify({
-    command: payload && payload.command ? payload.command : "command.execute",
-    task_ref: payload && payload.task_ref ? payload.task_ref : null,
-    tasks: Array.isArray(payload && payload.tasks) ? payload.tasks : [],
-    body: ensureObject(payload && payload.body),
-    account_id: payload && payload.account_id ? payload.account_id : null,
-    quote,
-    authorization_context: authorizationContext || null
-  });
-  try {
-    const response = await fetch(target.endpoint_url, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        ...(target.auth_token ? { authorization: `Bearer ${target.auth_token}` } : {})
-      },
-      body,
-      signal: controller.signal,
-      ...buildFetchOptionsForPurpose("external_execution")
-    });
-    const text = await response.text();
-    let parsed = null;
-    try {
-      parsed = text ? JSON.parse(text) : null;
-    } catch (_) {
-      parsed = null;
-    }
-    if (!response.ok) {
-      return {
-        ok: false,
-        status: 502,
-        reason: "external_execution_target_rejected",
-        details: parsed || text || null,
-        provider: target.provider
-      };
-    }
-    return {
-      ok: true,
-      provider: target.provider,
-      target_id: target.target_id,
-      target_response: parsed || null
-    };
-  } catch (error) {
-    return {
-      ok: false,
-      status: error && error.name === "AbortError" ? 504 : 502,
-      reason: error && error.name === "AbortError" ? "external_execution_timeout" : "external_execution_failed",
-      details: error && error.message ? error.message : "external execution failed",
-      provider: target.provider
-    };
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
-module.exports = {
-  executeExternalTarget,
-  loadExecutionTargetRegistry,
-  resolveExecutionTarget
-};
+"use strict";
+
+const { buildFetchOptionsForPurpose } = require("./network_transport");
+
+function normalizeString(value, fallback = "") {
+  const raw = typeof value === "string" ? value.trim() : "";
+  return raw || fallback;
+}
+
+function ensureObject(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+
+function loadExecutionTargetRegistry() {
+  const raw = String(process.env.XYTARA_EXECUTION_TARGETS_JSON || "").trim();
+  if (!raw) return [];
+  let parsed = [];
+  try {
+    parsed = JSON.parse(raw);
+  } catch (_) {
+    return [];
+  }
+  if (!Array.isArray(parsed)) return [];
+  return parsed
+    .map((entry, index) => {
+      const item = ensureObject(entry);
+      const targetId = normalizeString(item.target_id, `execution_target_${index + 1}`);
+      const endpointUrl = normalizeString(item.endpoint_url);
+      if (!endpointUrl) return null;
+      return {
+        target_id: targetId,
+        endpoint_url: endpointUrl,
+        task_ref: normalizeString(item.task_ref) || null,
+        tool_name: normalizeString(item.tool_name) || null,
+        integration_id: normalizeString(item.integration_id) || null,
+        provider: normalizeString(item.provider, "external_execution"),
+        auth_token: normalizeString(item.auth_token) || null,
+        timeout_ms: Math.max(500, Number(item.timeout_ms || 10000) || 10000),
+        enabled: item.enabled !== false
+      };
+    })
+    .filter(Boolean);
+}
+
+function resolveExecutionTarget(payload, quote) {
+  const registry = loadExecutionTargetRegistry();
+  if (registry.length < 1) return null;
+  const body = ensureObject(payload && payload.body);
+  const taskRefs = Array.isArray(payload && payload.tasks) && payload.tasks.length > 0
+    ? payload.tasks.map((task) => normalizeString(task && task.task_ref)).filter(Boolean)
+    : [normalizeString(payload && payload.task_ref)].filter(Boolean);
+  const toolName = normalizeString(body.tool_name) || null;
+  const integrationIds = new Set(
+    []
+      .concat(normalizeString(payload && payload.integration_id) ? [normalizeString(payload && payload.integration_id)] : [])
+      .concat(Array.isArray(payload && payload.integration_ids) ? payload.integration_ids.map((value) => normalizeString(value)).filter(Boolean) : [])
+      .concat(Array.isArray(quote && quote.integration_ids) ? quote.integration_ids.map((value) => normalizeString(value)).filter(Boolean) : [])
+  );
+
+  return registry.find((target) => {
+    if (!target.enabled) return false;
+    if (target.task_ref && !taskRefs.includes(target.task_ref)) return false;
+    if (target.tool_name && target.tool_name !== toolName) return false;
+    if (target.integration_id && !integrationIds.has(target.integration_id)) return false;
+    return true;
+  }) || null;
+}
+
+async function executeExternalTarget(target, payload, quote, authorizationContext) {
+  if (!target) return null;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), target.timeout_ms);
+  const body = JSON.stringify({
+    command: payload && payload.command ? payload.command : "command.execute",
+    task_ref: payload && payload.task_ref ? payload.task_ref : null,
+    tasks: Array.isArray(payload && payload.tasks) ? payload.tasks : [],
+    body: ensureObject(payload && payload.body),
+    account_id: payload && payload.account_id ? payload.account_id : null,
+    quote,
+    authorization_context: authorizationContext || null
+  });
+  try {
+    const response = await fetch(target.endpoint_url, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        ...(target.auth_token ? { authorization: `Bearer ${target.auth_token}` } : {})
+      },
+      body,
+      signal: controller.signal,
+      ...buildFetchOptionsForPurpose("external_execution")
+    });
+    const text = await response.text();
+    let parsed = null;
+    try {
+      parsed = text ? JSON.parse(text) : null;
+    } catch (_) {
+      parsed = null;
+    }
+    if (!response.ok) {
+      return {
+        ok: false,
+        status: 502,
+        reason: "external_execution_target_rejected",
+        details: parsed || text || null,
+        provider: target.provider
+      };
+    }
+    return {
+      ok: true,
+      provider: target.provider,
+      target_id: target.target_id,
+      target_response: parsed || null
+    };
+  } catch (error) {
+    return {
+      ok: false,
+      status: error && error.name === "AbortError" ? 504 : 502,
+      reason: error && error.name === "AbortError" ? "external_execution_timeout" : "external_execution_failed",
+      details: error && error.message ? error.message : "external execution failed",
+      provider: target.provider
+    };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+module.exports = {
+  executeExternalTarget,
+  loadExecutionTargetRegistry,
+  resolveExecutionTarget
+};

package/lib/feature_control_lane_contract.js

@@ -1,54 +1,54 @@
-"use strict";
-
-function buildFeatureControlLanePack() {
-  return {
-    product: "xytara",
-    category: "machine-commerce-feature-control-lane-pack",
-    pack_version: "xytara-feature-control-lane-pack-v1",
-    lane_state: "first_party_feature_control_lane_present",
-    posture: "portable_policy_and_rollout_control_lane",
-    standards: ["openfeature", "ofrep"],
-    focal_controls: ["pricing_policy", "authority_policy", "machine_identity_policy", "trust_policy", "release_candidate_gates"],
-    supported_surfaces: {
-      pricing_policy_ref: "/v1/economics/accounts/:account_id/pricing-policy-package",
-      authority_policy_ref: "/v1/economics/accounts/:account_id/authority-policy-pack",
-      machine_identity_policy_ref: "/v1/economics/accounts/:account_id/machine-identity-policy-pack",
-      trust_policy_ref: "/v1/economics/accounts/:account_id/trust-layer-policy-pack",
-      release_candidate_ref: "/v1/release-candidate"
-    },
-    first_run_flows: [
-      {
-        flow_ref: "portable_rollout_control_alignment",
-        recommended_reason: "best path for teams that need portable rollout and policy posture without inventing a second control plane around the runtime",
-        sequence: [
-          "inspect_feature_control_lane_summary",
-          "map native policy packs to portable feature-control posture",
-          "use release and trust gates as rollout-compatible control surfaces",
-          "keep xytara policy truth canonical beneath external control adapters"
-        ]
-      }
-    ],
-    guardrails: [
-      "feature control should expose rollout posture without replacing native pricing, authority, identity, or trust truth",
-      "policy portability should remain bounded to avoid accidental split-brain control semantics"
-    ]
-  };
-}
-
-function summarizeFeatureControlLanePack() {
-  const pack = buildFeatureControlLanePack();
-  return {
-    product: "xytara",
-    category: "machine-commerce-feature-control-lane-pack-summary",
-    summary_version: "xytara-feature-control-lane-pack-summary-v1",
-    lane_state: pack.lane_state,
-    standard_count: pack.standards.length,
-    focal_control_count: pack.focal_controls.length,
-    linked_surfaces: pack.supported_surfaces
-  };
-}
-
-module.exports = {
-  buildFeatureControlLanePack,
-  summarizeFeatureControlLanePack
-};
+"use strict";
+
+function buildFeatureControlLanePack() {
+  return {
+    product: "xytara",
+    category: "machine-commerce-feature-control-lane-pack",
+    pack_version: "xytara-feature-control-lane-pack-v1",
+    lane_state: "first_party_feature_control_lane_present",
+    posture: "portable_policy_and_rollout_control_lane",
+    standards: ["openfeature", "ofrep"],
+    focal_controls: ["pricing_policy", "authority_policy", "machine_identity_policy", "trust_policy", "release_candidate_gates"],
+    supported_surfaces: {
+      pricing_policy_ref: "/v1/economics/accounts/:account_id/pricing-policy-package",
+      authority_policy_ref: "/v1/economics/accounts/:account_id/authority-policy-pack",
+      machine_identity_policy_ref: "/v1/economics/accounts/:account_id/machine-identity-policy-pack",
+      trust_policy_ref: "/v1/economics/accounts/:account_id/trust-layer-policy-pack",
+      release_candidate_ref: "/v1/release-candidate"
+    },
+    first_run_flows: [
+      {
+        flow_ref: "portable_rollout_control_alignment",
+        recommended_reason: "best path for teams that need portable rollout and policy posture without inventing a second control plane around the runtime",
+        sequence: [
+          "inspect_feature_control_lane_summary",
+          "map native policy packs to portable feature-control posture",
+          "use release and trust gates as rollout-compatible control surfaces",
+          "keep xytara policy truth canonical beneath external control adapters"
+        ]
+      }
+    ],
+    guardrails: [
+      "feature control should expose rollout posture without replacing native pricing, authority, identity, or trust truth",
+      "policy portability should remain bounded to avoid accidental split-brain control semantics"
+    ]
+  };
+}
+
+function summarizeFeatureControlLanePack() {
+  const pack = buildFeatureControlLanePack();
+  return {
+    product: "xytara",
+    category: "machine-commerce-feature-control-lane-pack-summary",
+    summary_version: "xytara-feature-control-lane-pack-summary-v1",
+    lane_state: pack.lane_state,
+    standard_count: pack.standards.length,
+    focal_control_count: pack.focal_controls.length,
+    linked_surfaces: pack.supported_surfaces
+  };
+}
+
+module.exports = {
+  buildFeatureControlLanePack,
+  summarizeFeatureControlLanePack
+};