xytara 3.1.0 → 3.1.2

package/lib/http_transport.js

@@ -1,73 +1,73 @@
-"use strict";
-
-function sendJson(res, statusCode, payload, headers) {
-  const body = JSON.stringify(payload);
-  res.writeHead(statusCode, {
-    "content-type": "application/json; charset=utf-8",
-    "content-length": Buffer.byteLength(body),
-    ...(headers && typeof headers === "object" ? headers : {})
-  });
-  res.end(body);
-}
-
-function readJsonBody(req) {
-  return new Promise((resolve, reject) => {
-    let body = "";
-    req.on("data", (chunk) => {
-      body += chunk;
-      if (body.length > 1024 * 1024) {
-        reject(new Error("request body too large"));
-        req.destroy();
-      }
-    });
-    req.on("end", () => {
-      if (!body) {
-        resolve({});
-        return;
-      }
-      try {
-        resolve(JSON.parse(body));
-      } catch (error) {
-        reject(new Error("body must be valid JSON"));
-      }
-    });
-    req.on("error", reject);
-  });
-}
-
-function readJsonBodyWithRaw(req) {
-  return new Promise((resolve, reject) => {
-    let body = "";
-    req.on("data", (chunk) => {
-      body += chunk;
-      if (body.length > 1024 * 1024) {
-        reject(new Error("request body too large"));
-        req.destroy();
-      }
-    });
-    req.on("end", () => {
-      if (!body) {
-        resolve({
-          body: {},
-          raw_body: ""
-        });
-        return;
-      }
-      try {
-        resolve({
-          body: JSON.parse(body),
-          raw_body: body
-        });
-      } catch (error) {
-        reject(new Error("body must be valid JSON"));
-      }
-    });
-    req.on("error", reject);
-  });
-}
-
-module.exports = {
-  readJsonBody,
-  readJsonBodyWithRaw,
-  sendJson
-};
+"use strict";
+
+function sendJson(res, statusCode, payload, headers) {
+  const body = JSON.stringify(payload);
+  res.writeHead(statusCode, {
+    "content-type": "application/json; charset=utf-8",
+    "content-length": Buffer.byteLength(body),
+    ...(headers && typeof headers === "object" ? headers : {})
+  });
+  res.end(body);
+}
+
+function readJsonBody(req) {
+  return new Promise((resolve, reject) => {
+    let body = "";
+    req.on("data", (chunk) => {
+      body += chunk;
+      if (body.length > 1024 * 1024) {
+        reject(new Error("request body too large"));
+        req.destroy();
+      }
+    });
+    req.on("end", () => {
+      if (!body) {
+        resolve({});
+        return;
+      }
+      try {
+        resolve(JSON.parse(body));
+      } catch (error) {
+        reject(new Error("body must be valid JSON"));
+      }
+    });
+    req.on("error", reject);
+  });
+}
+
+function readJsonBodyWithRaw(req) {
+  return new Promise((resolve, reject) => {
+    let body = "";
+    req.on("data", (chunk) => {
+      body += chunk;
+      if (body.length > 1024 * 1024) {
+        reject(new Error("request body too large"));
+        req.destroy();
+      }
+    });
+    req.on("end", () => {
+      if (!body) {
+        resolve({
+          body: {},
+          raw_body: ""
+        });
+        return;
+      }
+      try {
+        resolve({
+          body: JSON.parse(body),
+          raw_body: body
+        });
+      } catch (error) {
+        reject(new Error("body must be valid JSON"));
+      }
+    });
+    req.on("error", reject);
+  });
+}
+
+module.exports = {
+  readJsonBody,
+  readJsonBodyWithRaw,
+  sendJson
+};

package/lib/identity_auth.js

@@ -1,175 +1,175 @@
-"use strict";
-
-function normalizeString(value, fallback = null) {
-  const trimmed = typeof value === "string" ? value.trim() : "";
-  return trimmed || fallback;
-}
-
-function ensureArray(value) {
-  return Array.isArray(value) ? value : [];
-}
-
-function nowIso() {
-  return new Date().toISOString();
-}
-
-function buildIdentityBindingPublicView(binding) {
-  if (!binding) return null;
-  return {
-    binding_id: binding.binding_id,
-    account_id: binding.account_id,
-    status: binding.status,
-    identity_kind: binding.identity_kind,
-    identity_ref: binding.identity_ref,
-    registry_scope: binding.registry_scope || null,
-    attached_agent_account_id: binding.attached_agent_account_id || null,
-    source_transaction_id: binding.source_transaction_id || null,
-    expires_at_iso: binding.expires_at_iso || null,
-    rotated_from_binding_id: binding.rotated_from_binding_id || null,
-    replaced_by_binding_id: binding.replaced_by_binding_id || null,
-    created_at_iso: binding.created_at_iso,
-    updated_at_iso: binding.updated_at_iso,
-    revoked_at_iso: binding.revoked_at_iso || null,
-    revoke_reason: binding.revoke_reason || null,
-    labels: ensureArray(binding.labels),
-    issued_by: binding.issued_by || null
-  };
-}
-
-function createIdentityBinding(state, body) {
-  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-  const createdAtIso = nowIso();
-  const binding = {
-    binding_id: normalizeString(payload.binding_id, `identity_binding_${state.machineIdentityBindings.size + 1}`),
-    account_id: normalizeString(payload.account_id, "acct_demo"),
-    status: normalizeString(payload.status, "active"),
-    identity_kind: normalizeString(payload.identity_kind, "registry_anchor_identity"),
-    identity_ref: normalizeString(payload.identity_ref, `identity_ref_${state.machineIdentityBindings.size + 1}`),
-    registry_scope: normalizeString(payload.registry_scope, null),
-    attached_agent_account_id: normalizeString(payload.attached_agent_account_id, null),
-    source_transaction_id: normalizeString(payload.source_transaction_id, null),
-    expires_at_iso: normalizeString(payload.expires_at_iso, null),
-    labels: ensureArray(payload.labels).map((value) => String(value || "").trim()).filter(Boolean),
-    issued_by: normalizeString(payload.issued_by, "operator"),
-    rotated_from_binding_id: normalizeString(payload.rotated_from_binding_id, null),
-    replaced_by_binding_id: normalizeString(payload.replaced_by_binding_id, null),
-    created_at_iso: createdAtIso,
-    updated_at_iso: createdAtIso,
-    revoked_at_iso: null,
-    revoke_reason: null
-  };
-  state.machineIdentityBindings.set(binding.binding_id, binding);
-  return buildIdentityBindingPublicView(binding);
-}
-
-function listIdentityBindings(state, filters) {
-  const payload = filters && typeof filters === "object" && !Array.isArray(filters) ? filters : {};
-  const accountId = normalizeString(payload.account_id, null);
-  const status = normalizeString(payload.status, null);
-  return Array.from(state.machineIdentityBindings.values())
-    .filter((binding) => {
-      if (accountId && binding.account_id !== accountId) return false;
-      if (status && binding.status !== status) return false;
-      return true;
-    })
-    .map((binding) => buildIdentityBindingPublicView(binding));
-}
-
-function getIdentityBinding(state, bindingId) {
-  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
-  return buildIdentityBindingPublicView(state.machineIdentityBindings.get(bindingId));
-}
-
-function revokeIdentityBinding(state, bindingId, body) {
-  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
-  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-  const current = state.machineIdentityBindings.get(bindingId);
-  const next = {
-    ...current,
-    status: "revoked",
-    revoked_at_iso: nowIso(),
-    revoke_reason: normalizeString(payload.reason, "operator_revoked"),
-    updated_at_iso: nowIso()
-  };
-  state.machineIdentityBindings.set(bindingId, next);
-  return buildIdentityBindingPublicView(next);
-}
-
-function getIdentityBindingRotationSummary(state, bindingId) {
-  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
-  const binding = state.machineIdentityBindings.get(bindingId);
-  return {
-    summary_version: "xytara-identity-binding-rotation-summary-v1",
-    binding_id: binding.binding_id,
-    account_id: binding.account_id,
-    status: binding.status,
-    predecessor_binding_id: binding.rotated_from_binding_id || null,
-    successor_binding_id: binding.replaced_by_binding_id || null,
-    expires_at_iso: binding.expires_at_iso || null,
-    rotation_state: binding.rotated_from_binding_id || binding.replaced_by_binding_id
-      ? "lineage_present"
-      : "standalone",
-    linked_surfaces: {
-      identity_binding_ref: `/v1/identity/bindings/${encodeURIComponent(binding.binding_id)}`
-    },
-    generated_at_iso: nowIso()
-  };
-}
-
-function renewIdentityBinding(state, bindingId, body) {
-  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
-  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-  const current = state.machineIdentityBindings.get(bindingId);
-  const next = {
-    ...current,
-    expires_at_iso: normalizeString(payload.expires_at_iso, current.expires_at_iso || null),
-    updated_at_iso: nowIso()
-  };
-  state.machineIdentityBindings.set(bindingId, next);
-  return buildIdentityBindingPublicView(next);
-}
-
-function rotateIdentityBinding(state, bindingId, body) {
-  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
-  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-  const current = state.machineIdentityBindings.get(bindingId);
-  const successorBindingId = normalizeString(payload.successor_binding_id, `${bindingId}_rotated`);
-  const successor = createIdentityBinding(state, {
-    binding_id: successorBindingId,
-    account_id: current.account_id,
-    identity_kind: normalizeString(payload.identity_kind, current.identity_kind),
-    identity_ref: normalizeString(payload.identity_ref, current.identity_ref),
-    registry_scope: normalizeString(payload.registry_scope, current.registry_scope),
-    attached_agent_account_id: normalizeString(payload.attached_agent_account_id, current.attached_agent_account_id),
-    source_transaction_id: normalizeString(payload.source_transaction_id, current.source_transaction_id),
-    expires_at_iso: normalizeString(payload.expires_at_iso, current.expires_at_iso || null),
-    labels: ensureArray(payload.labels).length > 0 ? ensureArray(payload.labels) : ensureArray(current.labels),
-    issued_by: normalizeString(payload.issued_by, current.issued_by || "operator"),
-    rotated_from_binding_id: current.binding_id
-  });
-  revokeIdentityBinding(state, bindingId, {
-    reason: normalizeString(payload.reason, "rotated_to_successor")
-  });
-  state.machineIdentityBindings.set(successor.binding_id, {
-    ...state.machineIdentityBindings.get(successor.binding_id),
-    rotated_from_binding_id: current.binding_id
-  });
-  state.machineIdentityBindings.set(bindingId, {
-    ...state.machineIdentityBindings.get(bindingId),
-    replaced_by_binding_id: successor.binding_id
-  });
-  return {
-    rotated_binding: buildIdentityBindingPublicView(state.machineIdentityBindings.get(bindingId)),
-    successor_identity_binding: buildIdentityBindingPublicView(state.machineIdentityBindings.get(successor.binding_id))
-  };
-}
-
-module.exports = {
-  createIdentityBinding,
-  listIdentityBindings,
-  getIdentityBinding,
-  getIdentityBindingRotationSummary,
-  renewIdentityBinding,
-  revokeIdentityBinding,
-  rotateIdentityBinding
-};
+"use strict";
+
+function normalizeString(value, fallback = null) {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  return trimmed || fallback;
+}
+
+function ensureArray(value) {
+  return Array.isArray(value) ? value : [];
+}
+
+function nowIso() {
+  return new Date().toISOString();
+}
+
+function buildIdentityBindingPublicView(binding) {
+  if (!binding) return null;
+  return {
+    binding_id: binding.binding_id,
+    account_id: binding.account_id,
+    status: binding.status,
+    identity_kind: binding.identity_kind,
+    identity_ref: binding.identity_ref,
+    registry_scope: binding.registry_scope || null,
+    attached_agent_account_id: binding.attached_agent_account_id || null,
+    source_transaction_id: binding.source_transaction_id || null,
+    expires_at_iso: binding.expires_at_iso || null,
+    rotated_from_binding_id: binding.rotated_from_binding_id || null,
+    replaced_by_binding_id: binding.replaced_by_binding_id || null,
+    created_at_iso: binding.created_at_iso,
+    updated_at_iso: binding.updated_at_iso,
+    revoked_at_iso: binding.revoked_at_iso || null,
+    revoke_reason: binding.revoke_reason || null,
+    labels: ensureArray(binding.labels),
+    issued_by: binding.issued_by || null
+  };
+}
+
+function createIdentityBinding(state, body) {
+  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+  const createdAtIso = nowIso();
+  const binding = {
+    binding_id: normalizeString(payload.binding_id, `identity_binding_${state.machineIdentityBindings.size + 1}`),
+    account_id: normalizeString(payload.account_id, "acct_demo"),
+    status: normalizeString(payload.status, "active"),
+    identity_kind: normalizeString(payload.identity_kind, "registry_anchor_identity"),
+    identity_ref: normalizeString(payload.identity_ref, `identity_ref_${state.machineIdentityBindings.size + 1}`),
+    registry_scope: normalizeString(payload.registry_scope, null),
+    attached_agent_account_id: normalizeString(payload.attached_agent_account_id, null),
+    source_transaction_id: normalizeString(payload.source_transaction_id, null),
+    expires_at_iso: normalizeString(payload.expires_at_iso, null),
+    labels: ensureArray(payload.labels).map((value) => String(value || "").trim()).filter(Boolean),
+    issued_by: normalizeString(payload.issued_by, "operator"),
+    rotated_from_binding_id: normalizeString(payload.rotated_from_binding_id, null),
+    replaced_by_binding_id: normalizeString(payload.replaced_by_binding_id, null),
+    created_at_iso: createdAtIso,
+    updated_at_iso: createdAtIso,
+    revoked_at_iso: null,
+    revoke_reason: null
+  };
+  state.machineIdentityBindings.set(binding.binding_id, binding);
+  return buildIdentityBindingPublicView(binding);
+}
+
+function listIdentityBindings(state, filters) {
+  const payload = filters && typeof filters === "object" && !Array.isArray(filters) ? filters : {};
+  const accountId = normalizeString(payload.account_id, null);
+  const status = normalizeString(payload.status, null);
+  return Array.from(state.machineIdentityBindings.values())
+    .filter((binding) => {
+      if (accountId && binding.account_id !== accountId) return false;
+      if (status && binding.status !== status) return false;
+      return true;
+    })
+    .map((binding) => buildIdentityBindingPublicView(binding));
+}
+
+function getIdentityBinding(state, bindingId) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  return buildIdentityBindingPublicView(state.machineIdentityBindings.get(bindingId));
+}
+
+function revokeIdentityBinding(state, bindingId, body) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+  const current = state.machineIdentityBindings.get(bindingId);
+  const next = {
+    ...current,
+    status: "revoked",
+    revoked_at_iso: nowIso(),
+    revoke_reason: normalizeString(payload.reason, "operator_revoked"),
+    updated_at_iso: nowIso()
+  };
+  state.machineIdentityBindings.set(bindingId, next);
+  return buildIdentityBindingPublicView(next);
+}
+
+function getIdentityBindingRotationSummary(state, bindingId) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  const binding = state.machineIdentityBindings.get(bindingId);
+  return {
+    summary_version: "xytara-identity-binding-rotation-summary-v1",
+    binding_id: binding.binding_id,
+    account_id: binding.account_id,
+    status: binding.status,
+    predecessor_binding_id: binding.rotated_from_binding_id || null,
+    successor_binding_id: binding.replaced_by_binding_id || null,
+    expires_at_iso: binding.expires_at_iso || null,
+    rotation_state: binding.rotated_from_binding_id || binding.replaced_by_binding_id
+      ? "lineage_present"
+      : "standalone",
+    linked_surfaces: {
+      identity_binding_ref: `/v1/identity/bindings/${encodeURIComponent(binding.binding_id)}`
+    },
+    generated_at_iso: nowIso()
+  };
+}
+
+function renewIdentityBinding(state, bindingId, body) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+  const current = state.machineIdentityBindings.get(bindingId);
+  const next = {
+    ...current,
+    expires_at_iso: normalizeString(payload.expires_at_iso, current.expires_at_iso || null),
+    updated_at_iso: nowIso()
+  };
+  state.machineIdentityBindings.set(bindingId, next);
+  return buildIdentityBindingPublicView(next);
+}
+
+function rotateIdentityBinding(state, bindingId, body) {
+  if (!bindingId || !state.machineIdentityBindings.has(bindingId)) return null;
+  const payload = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+  const current = state.machineIdentityBindings.get(bindingId);
+  const successorBindingId = normalizeString(payload.successor_binding_id, `${bindingId}_rotated`);
+  const successor = createIdentityBinding(state, {
+    binding_id: successorBindingId,
+    account_id: current.account_id,
+    identity_kind: normalizeString(payload.identity_kind, current.identity_kind),
+    identity_ref: normalizeString(payload.identity_ref, current.identity_ref),
+    registry_scope: normalizeString(payload.registry_scope, current.registry_scope),
+    attached_agent_account_id: normalizeString(payload.attached_agent_account_id, current.attached_agent_account_id),
+    source_transaction_id: normalizeString(payload.source_transaction_id, current.source_transaction_id),
+    expires_at_iso: normalizeString(payload.expires_at_iso, current.expires_at_iso || null),
+    labels: ensureArray(payload.labels).length > 0 ? ensureArray(payload.labels) : ensureArray(current.labels),
+    issued_by: normalizeString(payload.issued_by, current.issued_by || "operator"),
+    rotated_from_binding_id: current.binding_id
+  });
+  revokeIdentityBinding(state, bindingId, {
+    reason: normalizeString(payload.reason, "rotated_to_successor")
+  });
+  state.machineIdentityBindings.set(successor.binding_id, {
+    ...state.machineIdentityBindings.get(successor.binding_id),
+    rotated_from_binding_id: current.binding_id
+  });
+  state.machineIdentityBindings.set(bindingId, {
+    ...state.machineIdentityBindings.get(bindingId),
+    replaced_by_binding_id: successor.binding_id
+  });
+  return {
+    rotated_binding: buildIdentityBindingPublicView(state.machineIdentityBindings.get(bindingId)),
+    successor_identity_binding: buildIdentityBindingPublicView(state.machineIdentityBindings.get(successor.binding_id))
+  };
+}
+
+module.exports = {
+  createIdentityBinding,
+  listIdentityBindings,
+  getIdentityBinding,
+  getIdentityBindingRotationSummary,
+  renewIdentityBinding,
+  revokeIdentityBinding,
+  rotateIdentityBinding
+};