xytara 3.1.0 → 3.1.2

package/lib/framework_lane_contract.js

@@ -1,89 +1,89 @@
-"use strict";
-
-const {
-  buildPhase6FrameworkRuntimePack,
-  summarizePhase6FrameworkRuntimePack
-} = require("./phase_6_framework_runtime_pack");
-const {
-  summarizePhase6LanggraphRuntimePack
-} = require("./phase_6_langgraph_runtime_pack");
-const {
-  summarizePhase6LangchainRuntimePack
-} = require("./phase_6_langchain_runtime_pack");
-const {
-  summarizePhase6AutogenRuntimePack
-} = require("./phase_6_autogen_runtime_pack");
-const {
-  summarizePhase6SemanticKernelRuntimePack
-} = require("./phase_6_semantic_kernel_runtime_pack");
-
-function buildFrameworkLanePack() {
-  return {
-    product: "xytara",
-    category: "machine-commerce-framework-lane-pack",
-    pack_version: "xytara-framework-lane-pack-v1",
-    lane_state: "first_party_framework_family_present",
-    posture: "framework_orchestration_and_execution_family",
-    framework_family: {
-      pack: buildPhase6FrameworkRuntimePack(),
-      summary: summarizePhase6FrameworkRuntimePack()
-    },
-    featured_frameworks: {
-      langgraph: summarizePhase6LanggraphRuntimePack(),
-      langchain: summarizePhase6LangchainRuntimePack(),
-      autogen: summarizePhase6AutogenRuntimePack(),
-      semantic_kernel: summarizePhase6SemanticKernelRuntimePack()
-    },
-    registry_backed_frameworks: {
-      crewai: {
-        framework_id: "crewai",
-        posture: "registry-backed multi-agent workflow interoperability lane",
-        integration_ref: "builtin.execution.crewai"
-      },
-      llamaindex: {
-        framework_id: "llamaindex",
-        posture: "registry-backed retrieval and agent interoperability lane",
-        integration_ref: "builtin.execution.llamaindex"
-      }
-    },
-    supported_surfaces: {
-      phase_6_summary_ref: "/v1/phases/phase-6/summary",
-      langgraph_summary_ref: "/v1/phases/phase-6/langgraph/summary",
-      langchain_summary_ref: "/v1/phases/phase-6/langchain/summary",
-      autogen_summary_ref: "/v1/phases/phase-6/autogen/summary",
-      semantic_kernel_summary_ref: "/v1/phases/phase-6/semantic-kernel/summary",
-      integrations_ref: "/v1/integrations",
-      integration_matrix_ref: "/v1/integration-matrix"
-    },
-    first_run_flows: [
-      {
-        flow_ref: "framework_family_selection",
-        recommended_reason: "best first path for understanding how orchestration frameworks map into the canonical runtime instead of sitting as disconnected side examples",
-        sequence: [
-          "inspect_framework_lane_summary",
-          "inspect_phase_6_framework_summary",
-          "inspect_named_framework_profiles",
-          "choose_framework_shape_that_best_matches_runtime_carry_needs"
-        ]
-      }
-    ]
-  };
-}
-
-function summarizeFrameworkLanePack() {
-  const pack = buildFrameworkLanePack();
-  return {
-    product: "xytara",
-    category: "machine-commerce-framework-lane-pack-summary",
-    summary_version: "xytara-framework-lane-pack-summary-v1",
-    lane_state: pack.lane_state,
-    featured_framework_count: Object.keys(pack.featured_frameworks).length + Object.keys(pack.registry_backed_frameworks).length,
-    first_run_flow_count: pack.first_run_flows.length,
-    linked_surfaces: pack.supported_surfaces
-  };
-}
-
-module.exports = {
-  buildFrameworkLanePack,
-  summarizeFrameworkLanePack
-};
+"use strict";
+
+const {
+  buildPhase6FrameworkRuntimePack,
+  summarizePhase6FrameworkRuntimePack
+} = require("./phase_6_framework_runtime_pack");
+const {
+  summarizePhase6LanggraphRuntimePack
+} = require("./phase_6_langgraph_runtime_pack");
+const {
+  summarizePhase6LangchainRuntimePack
+} = require("./phase_6_langchain_runtime_pack");
+const {
+  summarizePhase6AutogenRuntimePack
+} = require("./phase_6_autogen_runtime_pack");
+const {
+  summarizePhase6SemanticKernelRuntimePack
+} = require("./phase_6_semantic_kernel_runtime_pack");
+
+function buildFrameworkLanePack() {
+  return {
+    product: "xytara",
+    category: "machine-commerce-framework-lane-pack",
+    pack_version: "xytara-framework-lane-pack-v1",
+    lane_state: "first_party_framework_family_present",
+    posture: "framework_orchestration_and_execution_family",
+    framework_family: {
+      pack: buildPhase6FrameworkRuntimePack(),
+      summary: summarizePhase6FrameworkRuntimePack()
+    },
+    featured_frameworks: {
+      langgraph: summarizePhase6LanggraphRuntimePack(),
+      langchain: summarizePhase6LangchainRuntimePack(),
+      autogen: summarizePhase6AutogenRuntimePack(),
+      semantic_kernel: summarizePhase6SemanticKernelRuntimePack()
+    },
+    registry_backed_frameworks: {
+      crewai: {
+        framework_id: "crewai",
+        posture: "registry-backed multi-agent workflow interoperability lane",
+        integration_ref: "builtin.execution.crewai"
+      },
+      llamaindex: {
+        framework_id: "llamaindex",
+        posture: "registry-backed retrieval and agent interoperability lane",
+        integration_ref: "builtin.execution.llamaindex"
+      }
+    },
+    supported_surfaces: {
+      phase_6_summary_ref: "/v1/phases/phase-6/summary",
+      langgraph_summary_ref: "/v1/phases/phase-6/langgraph/summary",
+      langchain_summary_ref: "/v1/phases/phase-6/langchain/summary",
+      autogen_summary_ref: "/v1/phases/phase-6/autogen/summary",
+      semantic_kernel_summary_ref: "/v1/phases/phase-6/semantic-kernel/summary",
+      integrations_ref: "/v1/integrations",
+      integration_matrix_ref: "/v1/integration-matrix"
+    },
+    first_run_flows: [
+      {
+        flow_ref: "framework_family_selection",
+        recommended_reason: "best first path for understanding how orchestration frameworks map into the canonical runtime instead of sitting as disconnected side examples",
+        sequence: [
+          "inspect_framework_lane_summary",
+          "inspect_phase_6_framework_summary",
+          "inspect_named_framework_profiles",
+          "choose_framework_shape_that_best_matches_runtime_carry_needs"
+        ]
+      }
+    ]
+  };
+}
+
+function summarizeFrameworkLanePack() {
+  const pack = buildFrameworkLanePack();
+  return {
+    product: "xytara",
+    category: "machine-commerce-framework-lane-pack-summary",
+    summary_version: "xytara-framework-lane-pack-summary-v1",
+    lane_state: pack.lane_state,
+    featured_framework_count: Object.keys(pack.featured_frameworks).length + Object.keys(pack.registry_backed_frameworks).length,
+    first_run_flow_count: pack.first_run_flows.length,
+    linked_surfaces: pack.supported_surfaces
+  };
+}
+
+module.exports = {
+  buildFrameworkLanePack,
+  summarizeFrameworkLanePack
+};

package/lib/framework_provider_promotion.js

@@ -1,235 +1,235 @@
-"use strict";
-
-const packageJson = require("../package.json");
-
-const FRAMEWORK_PROVIDER_CANDIDATES = Object.freeze([
-  Object.freeze({
-    framework_id: "langgraph",
-    adapter_id: "reference.framework.langgraph",
-    task_ref: "framework.langgraph.execute",
-    endpoint_env: "XYTARA_LANGGRAPH_PROVIDER_URL",
-    auth_env: "XYTARA_LANGGRAPH_PROVIDER_TOKEN",
-    health_path_env: "XYTARA_LANGGRAPH_PROVIDER_HEALTH_PATH"
-  }),
-  Object.freeze({
-    framework_id: "langchain",
-    adapter_id: "reference.framework.langchain",
-    task_ref: "framework.langchain.execute",
-    endpoint_env: "XYTARA_LANGCHAIN_PROVIDER_URL",
-    auth_env: "XYTARA_LANGCHAIN_PROVIDER_TOKEN",
-    health_path_env: "XYTARA_LANGCHAIN_PROVIDER_HEALTH_PATH"
-  })
-]);
-
-const FRAMEWORK_PROVIDER_PROMOTION_REQUIREMENTS = Object.freeze([
-  "endpoint_configured",
-  "auth_configured",
-  "health_check_passes",
-  "latency_observed",
-  "failure_behavior_bounded",
-  "proof_fact_shape_preserved",
-  "operator_evidence_recorded"
-]);
-
-const FRAMEWORK_PROVIDER_PROMOTION_REJECTION_CODES = Object.freeze([
-  "framework_not_registered",
-  "candidate_not_live_check_ready",
-  "adapter_id_mismatch",
-  "task_ref_mismatch",
-  "operator_evidence_missing",
-  "auth_boundary_evidence_missing",
-  "health_check_missing",
-  "health_check_failed",
-  "latency_measurement_missing",
-  "latency_budget_exceeded",
-  "failure_behavior_evidence_missing",
-  "proof_fact_shape_evidence_missing",
-  "secret_material_forbidden"
-]);
-
-function normalizeString(value) {
-  return typeof value === "string" ? value.trim() : "";
-}
-
-function containsSecretMaterial(value) {
-  if (!value || typeof value !== "object") return false;
-  const secretishKey = /(secret|token|credential|password|private[_-]?key|authorization)/i;
-  const secretishValue = /(bearer\s+[a-z0-9._-]{8,}|sk_live_|npm_[a-z0-9]|ghp_[a-z0-9]|xox[baprs]-)/i;
-  const stack = [value];
-  while (stack.length > 0) {
-    const current = stack.pop();
-    if (!current || typeof current !== "object") continue;
-    for (const [key, entry] of Object.entries(current)) {
-      if (secretishKey.test(String(key))) return true;
-      if (typeof entry === "string" && secretishValue.test(entry)) return true;
-      if (entry && typeof entry === "object") stack.push(entry);
-    }
-  }
-  return false;
-}
-
-function boolFromEnv(value) {
-  const normalized = normalizeString(value).toLowerCase();
-  return ["1", "true", "yes", "on"].includes(normalized);
-}
-
-function summarizeCandidate(candidate, env = process.env) {
-  const endpoint = normalizeString(env[candidate.endpoint_env]);
-  const authToken = normalizeString(env[candidate.auth_env]);
-  const healthPath = normalizeString(env[candidate.health_path_env]) || "/health";
-  const endpointConfigured = Boolean(endpoint);
-  const authConfigured = Boolean(authToken);
-  const liveCheckReady = endpointConfigured && authConfigured;
-  return {
-    framework_id: candidate.framework_id,
-    adapter_id: candidate.adapter_id,
-    task_ref: candidate.task_ref,
-    state: liveCheckReady ? "live_check_ready" : "reference_contract_only",
-    endpoint_configured: endpointConfigured,
-    auth_configured: authConfigured,
-    health_path: healthPath,
-    endpoint_env: candidate.endpoint_env,
-    auth_env: candidate.auth_env,
-    health_path_env: candidate.health_path_env,
-    promotion_evidence_template: {
-      framework_id: candidate.framework_id,
-      adapter_id: candidate.adapter_id,
-      task_ref: candidate.task_ref,
-      operator_evidence_ref: "ops.framework_provider.<framework_id>.<date>",
-      auth_boundary_ref: "ops.framework_provider.auth_boundary.<framework_id>.<date>",
-      health_check: {
-        status_code: 200,
-        health_ok: true
-      },
-      latency_ms: 250,
-      latency_budget_ms: 2000,
-      failure_behavior_ref: "ops.framework_provider.failure_behavior.<framework_id>.<date>",
-      proof_fact_shape_ref: "ops.framework_provider.proof_facts.<framework_id>.<date>"
-    },
-    required_live_evidence: [
-      "real_external_endpoint",
-      "auth_or_access_boundary",
-      "health_check_response",
-      "bounded_latency_measurement",
-      "failure_behavior_observed",
-      "proof_fact_shape_preserved"
-    ],
-    claim_boundary: liveCheckReady
-      ? "may_run_live_promotion_check_but_must_not_claim_provider_live_until_check_evidence_is_recorded"
-      : "reference_adapter_only_no_live_external_provider_claim"
-  };
-}
-
-function buildFrameworkProviderPromotionPack(options = {}) {
-  const env = options.env || process.env;
-  const candidates = FRAMEWORK_PROVIDER_CANDIDATES.map((candidate) => summarizeCandidate(candidate, env));
-  const liveReadyCandidates = candidates.filter((candidate) => candidate.state === "live_check_ready");
-  const requireLive = boolFromEnv(env.XYTARA_FRAMEWORK_PROMOTION_REQUIRE_LIVE);
-  return {
-    ok: true,
-    product: packageJson.name,
-    category: "machine-commerce-framework-provider-promotion-pack",
-    pack_version: "xytara-framework-provider-promotion-pack-v1",
-    posture: "reference_framework_adapters_promote_only_with_external_endpoint_evidence",
-    promotion_state: liveReadyCandidates.length > 0 ? "live_check_ready" : "no_live_provider_evidence_configured",
-    require_live: requireLive,
-    framework_candidate_count: candidates.length,
-    live_check_ready_count: liveReadyCandidates.length,
-    promoted_provider_count: 0,
-    candidates,
-    promotion_requirements: FRAMEWORK_PROVIDER_PROMOTION_REQUIREMENTS.slice(),
-    deterministic_rejection_codes: FRAMEWORK_PROVIDER_PROMOTION_REJECTION_CODES.slice(),
-    strict_boundaries: [
-      "reference_framework_adapters_do_not_equal_live_provider_integrations",
-      "do_not_claim_langgraph_or_langchain_live_provider_without_endpoint_auth_health_and_latency_evidence",
-      "failed_or_missing_live_checks_keep_frameworks_in_reference_contract_state",
-      "live_provider_promotion_does_not_change_adapter_claims_for_unchecked_frameworks"
-    ],
-    linked_surfaces: {
-      framework_lane_ref: "/v1/frameworks",
-      framework_provider_promotion_ref: "/v1/framework-provider-promotion",
-      framework_provider_promotion_summary_ref: "/v1/framework-provider-promotion/summary",
-      adapter_depth_ref: "/v1/adapter-depth/summary",
-      integrations_ref: "/v1/integrations"
-    }
-  };
-}
-
-function validateFrameworkProviderPromotionEvidence(pack, evidence) {
-  const promotionPack = pack || {};
-  const evidencePacket = evidence || {};
-  const candidates = Array.isArray(promotionPack.candidates) ? promotionPack.candidates : [];
-  const frameworkId = normalizeString(evidencePacket.framework_id);
-  const candidate = candidates.find((entry) => entry && entry.framework_id === frameworkId) || null;
-  const healthCheck = evidencePacket.health_check || null;
-  const latencyValue = evidencePacket.latency_ms;
-  const latencyMs = Number(latencyValue);
-  const latencyBudgetMs = Number(evidencePacket.latency_budget_ms || 2000);
-  const rejectionCodes = [];
-
-  if (!candidate) {
-    rejectionCodes.push("framework_not_registered");
-  } else {
-    if (candidate.state !== "live_check_ready" || !candidate.endpoint_configured || !candidate.auth_configured) {
-      rejectionCodes.push("candidate_not_live_check_ready");
-    }
-    if (normalizeString(evidencePacket.adapter_id) && normalizeString(evidencePacket.adapter_id) !== candidate.adapter_id) {
-      rejectionCodes.push("adapter_id_mismatch");
-    }
-    if (normalizeString(evidencePacket.task_ref) && normalizeString(evidencePacket.task_ref) !== candidate.task_ref) {
-      rejectionCodes.push("task_ref_mismatch");
-    }
-  }
-  if (!normalizeString(evidencePacket.operator_evidence_ref)) rejectionCodes.push("operator_evidence_missing");
-  if (!normalizeString(evidencePacket.auth_boundary_ref)) rejectionCodes.push("auth_boundary_evidence_missing");
-  if (!healthCheck || typeof healthCheck !== "object") {
-    rejectionCodes.push("health_check_missing");
-  } else if (healthCheck.health_ok !== true || Number(healthCheck.status_code || 0) < 200 || Number(healthCheck.status_code || 0) >= 300) {
-    rejectionCodes.push("health_check_failed");
-  }
-  if (latencyValue === null || latencyValue === undefined || latencyValue === "" || !Number.isFinite(latencyMs) || latencyMs < 0) {
-    rejectionCodes.push("latency_measurement_missing");
-  } else if (Number.isFinite(latencyBudgetMs) && latencyBudgetMs > 0 && latencyMs > latencyBudgetMs) {
-    rejectionCodes.push("latency_budget_exceeded");
-  }
-  if (!normalizeString(evidencePacket.failure_behavior_ref)) rejectionCodes.push("failure_behavior_evidence_missing");
-  if (!normalizeString(evidencePacket.proof_fact_shape_ref)) rejectionCodes.push("proof_fact_shape_evidence_missing");
-  if (containsSecretMaterial(evidencePacket)) rejectionCodes.push("secret_material_forbidden");
-
-  return {
-    validation_version: "xytara-framework-provider-promotion-evidence-validation-v1",
-    promotion_allowed: rejectionCodes.length === 0,
-    framework_id: frameworkId || null,
-    rejection_codes: Array.from(new Set(rejectionCodes)),
-    required_requirements: FRAMEWORK_PROVIDER_PROMOTION_REQUIREMENTS.slice(),
-    boundary: "framework_provider_promotion_requires_endpoint_auth_health_latency_failure_and_proof_fact_evidence_without_secret_material"
-  };
-}
-
-function summarizeFrameworkProviderPromotionPack(options = {}) {
-  const pack = buildFrameworkProviderPromotionPack(options);
-  return {
-    ok: true,
-    product: pack.product,
-    category: "machine-commerce-framework-provider-promotion-summary",
-    summary_version: "xytara-framework-provider-promotion-summary-v1",
-    posture: pack.posture,
-    promotion_state: pack.promotion_state,
-    require_live: pack.require_live,
-    framework_candidate_count: pack.framework_candidate_count,
-    live_check_ready_count: pack.live_check_ready_count,
-    promoted_provider_count: pack.promoted_provider_count,
-    promotion_requirement_count: pack.promotion_requirements.length,
-    deterministic_rejection_code_count: pack.deterministic_rejection_codes.length,
-    boundary_count: pack.strict_boundaries.length,
-    linked_surfaces: pack.linked_surfaces
-  };
-}
-
-module.exports = {
-  FRAMEWORK_PROVIDER_CANDIDATES,
-  FRAMEWORK_PROVIDER_PROMOTION_REJECTION_CODES,
-  buildFrameworkProviderPromotionPack,
-  summarizeFrameworkProviderPromotionPack,
-  validateFrameworkProviderPromotionEvidence
-};
+"use strict";
+
+const packageJson = require("../package.json");
+
+const FRAMEWORK_PROVIDER_CANDIDATES = Object.freeze([
+  Object.freeze({
+    framework_id: "langgraph",
+    adapter_id: "reference.framework.langgraph",
+    task_ref: "framework.langgraph.execute",
+    endpoint_env: "XYTARA_LANGGRAPH_PROVIDER_URL",
+    auth_env: "XYTARA_LANGGRAPH_PROVIDER_TOKEN",
+    health_path_env: "XYTARA_LANGGRAPH_PROVIDER_HEALTH_PATH"
+  }),
+  Object.freeze({
+    framework_id: "langchain",
+    adapter_id: "reference.framework.langchain",
+    task_ref: "framework.langchain.execute",
+    endpoint_env: "XYTARA_LANGCHAIN_PROVIDER_URL",
+    auth_env: "XYTARA_LANGCHAIN_PROVIDER_TOKEN",
+    health_path_env: "XYTARA_LANGCHAIN_PROVIDER_HEALTH_PATH"
+  })
+]);
+
+const FRAMEWORK_PROVIDER_PROMOTION_REQUIREMENTS = Object.freeze([
+  "endpoint_configured",
+  "auth_configured",
+  "health_check_passes",
+  "latency_observed",
+  "failure_behavior_bounded",
+  "proof_fact_shape_preserved",
+  "operator_evidence_recorded"
+]);
+
+const FRAMEWORK_PROVIDER_PROMOTION_REJECTION_CODES = Object.freeze([
+  "framework_not_registered",
+  "candidate_not_live_check_ready",
+  "adapter_id_mismatch",
+  "task_ref_mismatch",
+  "operator_evidence_missing",
+  "auth_boundary_evidence_missing",
+  "health_check_missing",
+  "health_check_failed",
+  "latency_measurement_missing",
+  "latency_budget_exceeded",
+  "failure_behavior_evidence_missing",
+  "proof_fact_shape_evidence_missing",
+  "secret_material_forbidden"
+]);
+
+function normalizeString(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+
+function containsSecretMaterial(value) {
+  if (!value || typeof value !== "object") return false;
+  const secretishKey = /(secret|token|credential|password|private[_-]?key|authorization)/i;
+  const secretishValue = /(bearer\s+[a-z0-9._-]{8,}|sk_live_|npm_[a-z0-9]|ghp_[a-z0-9]|xox[baprs]-)/i;
+  const stack = [value];
+  while (stack.length > 0) {
+    const current = stack.pop();
+    if (!current || typeof current !== "object") continue;
+    for (const [key, entry] of Object.entries(current)) {
+      if (secretishKey.test(String(key))) return true;
+      if (typeof entry === "string" && secretishValue.test(entry)) return true;
+      if (entry && typeof entry === "object") stack.push(entry);
+    }
+  }
+  return false;
+}
+
+function boolFromEnv(value) {
+  const normalized = normalizeString(value).toLowerCase();
+  return ["1", "true", "yes", "on"].includes(normalized);
+}
+
+function summarizeCandidate(candidate, env = process.env) {
+  const endpoint = normalizeString(env[candidate.endpoint_env]);
+  const authToken = normalizeString(env[candidate.auth_env]);
+  const healthPath = normalizeString(env[candidate.health_path_env]) || "/health";
+  const endpointConfigured = Boolean(endpoint);
+  const authConfigured = Boolean(authToken);
+  const liveCheckReady = endpointConfigured && authConfigured;
+  return {
+    framework_id: candidate.framework_id,
+    adapter_id: candidate.adapter_id,
+    task_ref: candidate.task_ref,
+    state: liveCheckReady ? "live_check_ready" : "reference_contract_only",
+    endpoint_configured: endpointConfigured,
+    auth_configured: authConfigured,
+    health_path: healthPath,
+    endpoint_env: candidate.endpoint_env,
+    auth_env: candidate.auth_env,
+    health_path_env: candidate.health_path_env,
+    promotion_evidence_template: {
+      framework_id: candidate.framework_id,
+      adapter_id: candidate.adapter_id,
+      task_ref: candidate.task_ref,
+      operator_evidence_ref: "ops.framework_provider.<framework_id>.<date>",
+      auth_boundary_ref: "ops.framework_provider.auth_boundary.<framework_id>.<date>",
+      health_check: {
+        status_code: 200,
+        health_ok: true
+      },
+      latency_ms: 250,
+      latency_budget_ms: 2000,
+      failure_behavior_ref: "ops.framework_provider.failure_behavior.<framework_id>.<date>",
+      proof_fact_shape_ref: "ops.framework_provider.proof_facts.<framework_id>.<date>"
+    },
+    required_live_evidence: [
+      "real_external_endpoint",
+      "auth_or_access_boundary",
+      "health_check_response",
+      "bounded_latency_measurement",
+      "failure_behavior_observed",
+      "proof_fact_shape_preserved"
+    ],
+    claim_boundary: liveCheckReady
+      ? "may_run_live_promotion_check_but_must_not_claim_provider_live_until_check_evidence_is_recorded"
+      : "reference_adapter_only_no_live_external_provider_claim"
+  };
+}
+
+function buildFrameworkProviderPromotionPack(options = {}) {
+  const env = options.env || process.env;
+  const candidates = FRAMEWORK_PROVIDER_CANDIDATES.map((candidate) => summarizeCandidate(candidate, env));
+  const liveReadyCandidates = candidates.filter((candidate) => candidate.state === "live_check_ready");
+  const requireLive = boolFromEnv(env.XYTARA_FRAMEWORK_PROMOTION_REQUIRE_LIVE);
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-framework-provider-promotion-pack",
+    pack_version: "xytara-framework-provider-promotion-pack-v1",
+    posture: "reference_framework_adapters_promote_only_with_external_endpoint_evidence",
+    promotion_state: liveReadyCandidates.length > 0 ? "live_check_ready" : "no_live_provider_evidence_configured",
+    require_live: requireLive,
+    framework_candidate_count: candidates.length,
+    live_check_ready_count: liveReadyCandidates.length,
+    promoted_provider_count: 0,
+    candidates,
+    promotion_requirements: FRAMEWORK_PROVIDER_PROMOTION_REQUIREMENTS.slice(),
+    deterministic_rejection_codes: FRAMEWORK_PROVIDER_PROMOTION_REJECTION_CODES.slice(),
+    strict_boundaries: [
+      "reference_framework_adapters_do_not_equal_live_provider_integrations",
+      "do_not_claim_langgraph_or_langchain_live_provider_without_endpoint_auth_health_and_latency_evidence",
+      "failed_or_missing_live_checks_keep_frameworks_in_reference_contract_state",
+      "live_provider_promotion_does_not_change_adapter_claims_for_unchecked_frameworks"
+    ],
+    linked_surfaces: {
+      framework_lane_ref: "/v1/frameworks",
+      framework_provider_promotion_ref: "/v1/framework-provider-promotion",
+      framework_provider_promotion_summary_ref: "/v1/framework-provider-promotion/summary",
+      adapter_depth_ref: "/v1/adapter-depth/summary",
+      integrations_ref: "/v1/integrations"
+    }
+  };
+}
+
+function validateFrameworkProviderPromotionEvidence(pack, evidence) {
+  const promotionPack = pack || {};
+  const evidencePacket = evidence || {};
+  const candidates = Array.isArray(promotionPack.candidates) ? promotionPack.candidates : [];
+  const frameworkId = normalizeString(evidencePacket.framework_id);
+  const candidate = candidates.find((entry) => entry && entry.framework_id === frameworkId) || null;
+  const healthCheck = evidencePacket.health_check || null;
+  const latencyValue = evidencePacket.latency_ms;
+  const latencyMs = Number(latencyValue);
+  const latencyBudgetMs = Number(evidencePacket.latency_budget_ms || 2000);
+  const rejectionCodes = [];
+
+  if (!candidate) {
+    rejectionCodes.push("framework_not_registered");
+  } else {
+    if (candidate.state !== "live_check_ready" || !candidate.endpoint_configured || !candidate.auth_configured) {
+      rejectionCodes.push("candidate_not_live_check_ready");
+    }
+    if (normalizeString(evidencePacket.adapter_id) && normalizeString(evidencePacket.adapter_id) !== candidate.adapter_id) {
+      rejectionCodes.push("adapter_id_mismatch");
+    }
+    if (normalizeString(evidencePacket.task_ref) && normalizeString(evidencePacket.task_ref) !== candidate.task_ref) {
+      rejectionCodes.push("task_ref_mismatch");
+    }
+  }
+  if (!normalizeString(evidencePacket.operator_evidence_ref)) rejectionCodes.push("operator_evidence_missing");
+  if (!normalizeString(evidencePacket.auth_boundary_ref)) rejectionCodes.push("auth_boundary_evidence_missing");
+  if (!healthCheck || typeof healthCheck !== "object") {
+    rejectionCodes.push("health_check_missing");
+  } else if (healthCheck.health_ok !== true || Number(healthCheck.status_code || 0) < 200 || Number(healthCheck.status_code || 0) >= 300) {
+    rejectionCodes.push("health_check_failed");
+  }
+  if (latencyValue === null || latencyValue === undefined || latencyValue === "" || !Number.isFinite(latencyMs) || latencyMs < 0) {
+    rejectionCodes.push("latency_measurement_missing");
+  } else if (Number.isFinite(latencyBudgetMs) && latencyBudgetMs > 0 && latencyMs > latencyBudgetMs) {
+    rejectionCodes.push("latency_budget_exceeded");
+  }
+  if (!normalizeString(evidencePacket.failure_behavior_ref)) rejectionCodes.push("failure_behavior_evidence_missing");
+  if (!normalizeString(evidencePacket.proof_fact_shape_ref)) rejectionCodes.push("proof_fact_shape_evidence_missing");
+  if (containsSecretMaterial(evidencePacket)) rejectionCodes.push("secret_material_forbidden");
+
+  return {
+    validation_version: "xytara-framework-provider-promotion-evidence-validation-v1",
+    promotion_allowed: rejectionCodes.length === 0,
+    framework_id: frameworkId || null,
+    rejection_codes: Array.from(new Set(rejectionCodes)),
+    required_requirements: FRAMEWORK_PROVIDER_PROMOTION_REQUIREMENTS.slice(),
+    boundary: "framework_provider_promotion_requires_endpoint_auth_health_latency_failure_and_proof_fact_evidence_without_secret_material"
+  };
+}
+
+function summarizeFrameworkProviderPromotionPack(options = {}) {
+  const pack = buildFrameworkProviderPromotionPack(options);
+  return {
+    ok: true,
+    product: pack.product,
+    category: "machine-commerce-framework-provider-promotion-summary",
+    summary_version: "xytara-framework-provider-promotion-summary-v1",
+    posture: pack.posture,
+    promotion_state: pack.promotion_state,
+    require_live: pack.require_live,
+    framework_candidate_count: pack.framework_candidate_count,
+    live_check_ready_count: pack.live_check_ready_count,
+    promoted_provider_count: pack.promoted_provider_count,
+    promotion_requirement_count: pack.promotion_requirements.length,
+    deterministic_rejection_code_count: pack.deterministic_rejection_codes.length,
+    boundary_count: pack.strict_boundaries.length,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+module.exports = {
+  FRAMEWORK_PROVIDER_CANDIDATES,
+  FRAMEWORK_PROVIDER_PROMOTION_REJECTION_CODES,
+  buildFrameworkProviderPromotionPack,
+  summarizeFrameworkProviderPromotionPack,
+  validateFrameworkProviderPromotionEvidence
+};