xytara 3.1.0 → 3.1.2

package/lib/market_lane_promotion_contract.js

@@ -1,210 +1,210 @@
-"use strict";
-
-const packageJson = require("../package.json");
-const { buildMarketLaneDepthPack } = require("./market_lane_depth_contract");
-const { buildMarketLaneTracePack } = require("./market_lane_trace_contract");
-
-const MARKET_LANE_PROMOTION_REJECTION_CODES = Object.freeze([
-  "market_lane_not_registered",
-  "promotion_not_ready",
-  "operator_evidence_missing",
-  "claim_boundary_ack_missing",
-  "required_gate_assertion_missing",
-  "provider_anchor_evidence_missing",
-  "trace_evidence_missing",
-  "secret_material_forbidden"
-]);
-
-function normalizeString(value) {
-  return typeof value === "string" ? value.trim() : "";
-}
-
-function containsSecretMaterial(value) {
-  if (!value || typeof value !== "object") return false;
-  const secretishKey = /(secret|token|credential|password|private[_-]?key|authorization)/i;
-  const secretishValue = /(bearer\s+[a-z0-9._-]{8,}|sk_live_|npm_[a-z0-9]|ghp_[a-z0-9]|xox[baprs]-)/i;
-  const stack = [value];
-  while (stack.length > 0) {
-    const current = stack.pop();
-    if (!current || typeof current !== "object") continue;
-    for (const [key, entry] of Object.entries(current)) {
-      if (secretishKey.test(String(key))) return true;
-      if (typeof entry === "string" && secretishValue.test(entry)) return true;
-      if (entry && typeof entry === "object") stack.push(entry);
-    }
-  }
-  return false;
-}
-
-function allTrue(record) {
-  return Object.values(record || {}).every((value) => value === true);
-}
-
-function buildMarketLanePromotionPack() {
-  const depthPack = buildMarketLaneDepthPack();
-  const tracePack = buildMarketLaneTracePack();
-  const depthByMarketClass = new Map((depthPack.market_lane_depths || []).map((entry) => [entry.market_class, entry]));
-  const traceByMarketClass = new Map((tracePack.market_lane_traces || []).map((entry) => [entry.market_class, entry]));
-
-  const promotionLanes = ["compute", "messaging", "treasury_payments"].map((marketClass) => {
-    const depth = depthByMarketClass.get(marketClass) || {};
-    const trace = traceByMarketClass.get(marketClass) || {};
-    const providerBound = marketClass === "compute";
-    const gateAssertions = providerBound
-      ? {
-          auth_ready: Boolean(depth.promotion_gates && depth.promotion_gates.auth_ready),
-          health_ready: Boolean(depth.promotion_gates && depth.promotion_gates.health_ready),
-          latency_ready: Boolean(depth.promotion_gates && depth.promotion_gates.latency_ready),
-          proof_fact_ready: Boolean(depth.promotion_gates && depth.promotion_gates.proof_fact_ready),
-          operator_evidence_ready: Boolean(depth.promotion_gates && depth.promotion_gates.operator_evidence_ready),
-          trace_ready: Boolean(trace.activation_ready),
-          provider_live_anchor_ready: Number(depth.provider_live_anchor_count || 0) >= 1
-        }
-      : marketClass === "messaging"
-        ? {
-            negotiate_ready: Boolean(depth.promotion_gates && depth.promotion_gates.negotiate_ready),
-            session_ready: Boolean(depth.promotion_gates && depth.promotion_gates.session_ready),
-            event_mesh_ready: Boolean(depth.promotion_gates && depth.promotion_gates.event_mesh_ready),
-            protocol_depth_ready: Boolean(depth.promotion_gates && depth.promotion_gates.protocol_depth_ready),
-            callable_activation_ready: Boolean(depth.promotion_gates && depth.promotion_gates.callable_activation_ready),
-            trace_ready: Boolean(trace.activation_ready)
-          }
-        : {
-            treasury_connectivity_ready: Boolean(depth.promotion_gates && depth.promotion_gates.treasury_connectivity_ready),
-            settlement_family_ready: Boolean(depth.promotion_gates && depth.promotion_gates.settlement_family_ready),
-            activation_ready: Boolean(depth.promotion_gates && depth.promotion_gates.activation_ready),
-            major_rail_ready: Boolean(depth.promotion_gates && depth.promotion_gates.major_rail_ready),
-            public_boundary_ready: Boolean(depth.promotion_gates && depth.promotion_gates.public_boundary_ready),
-            trace_ready: Boolean(trace.activation_ready)
-          };
-    const promotionReady = allTrue(gateAssertions);
-    const promotionRequirements = Object.keys(gateAssertions);
-    return {
-      market_class: marketClass,
-      market_label: depth.market_label || trace.market_label || marketClass,
-      promotion_state: providerBound
-        ? (promotionReady ? "provider_live_promotion_ready" : "provider_live_promotion_gated")
-        : (promotionReady ? "bounded_live_promotion_ready" : "bounded_live_promotion_gated"),
-      claim_status: depth.claim_status || trace.claim_status || "bounded_live",
-      provider_live_anchor_required: providerBound,
-      provider_live_anchor_ready: Number(depth.provider_live_anchor_count || 0) >= 1,
-      trace_ready: Boolean(trace.activation_ready),
-      activation_ready: Boolean(trace.activation_ready),
-      promotion_gate_pass_count: promotionRequirements.filter((key) => gateAssertions[key]).length,
-      promotion_gate_count: promotionRequirements.length,
-      promotion_requirements: promotionRequirements,
-      gate_assertions: gateAssertions,
-      promotion_evidence_template: {
-        market_class: marketClass,
-        operator_evidence_ref: `ops.market_lane.${marketClass}.promotion.<date>`,
-        claim_boundary_ack: depth.claim_boundary || trace.claim_boundary || "claim_boundary_ack_required",
-        gate_assertions: Object.fromEntries(promotionRequirements.map((requirement) => [requirement, true])),
-        provider_live_anchor_ref: providerBound ? "ops.market_lane.compute.provider_anchor.<date>" : null,
-        trace_evidence_ref: `ops.market_lane.${marketClass}.trace.<date>`
-      },
-      supporting_refs: Array.from(new Set(
-        []
-          .concat(depth.supporting_depth_refs || [])
-          .concat(trace.primary_call_surfaces || [])
-          .concat(trace.supporting_surfaces || [])
-      )).sort(),
-      claim_boundary: depth.claim_boundary || trace.claim_boundary || "claim_market_lane_promotion_only_for_listed_surfaces"
-    };
-  });
-
-  return {
-    ok: true,
-    product: packageJson.name,
-    category: "machine-commerce-market-lane-promotion-pack",
-    pack_version: "xytara-market-lane-promotion-pack-v1",
-    posture: "bounded_market_lane_promotion_requires_depth_trace_and_operator_evidence_alignment",
-    doctrine: "promotion_tracks_stronger_market_lane_claims_without_implying_unbounded_provider_or_venue_breadth",
-    market_lane_promotion_count: promotionLanes.length,
-    provider_live_ready_count: promotionLanes.filter((entry) => entry.promotion_state === "provider_live_promotion_ready").length,
-    bounded_live_ready_count: promotionLanes.filter((entry) => entry.promotion_state === "bounded_live_promotion_ready").length,
-    deterministic_rejection_codes: MARKET_LANE_PROMOTION_REJECTION_CODES.slice(),
-    promotion_lanes: promotionLanes,
-    linked_surfaces: {
-      full_catalog_ref: "/v1/full-catalog",
-      market_lanes_ref: "/v1/full-catalog/market-lanes",
-      market_lane_depth_ref: "/v1/full-catalog/market-lanes/depth",
-      market_lane_depth_summary_ref: "/v1/full-catalog/market-lanes/depth/summary",
-      market_lane_trace_ref: "/v1/full-catalog/market-lanes/traces",
-      market_lane_trace_summary_ref: "/v1/full-catalog/market-lanes/traces/summary",
-      adapter_depth_summary_ref: "/v1/adapter-depth/summary"
-    }
-  };
-}
-
-function getMarketLanePromotionDetail(marketClass) {
-  const normalized = String(marketClass || "").trim().toLowerCase();
-  return (buildMarketLanePromotionPack().promotion_lanes || []).find((entry) => entry.market_class === normalized) || null;
-}
-
-function validateMarketLanePromotionEvidence(pack, evidence) {
-  const promotionPack = pack || buildMarketLanePromotionPack();
-  const evidencePacket = evidence || {};
-  const marketClass = normalizeString(evidencePacket.market_class);
-  const lane = (promotionPack.promotion_lanes || []).find((entry) => entry.market_class === marketClass) || null;
-  const rejectionCodes = [];
-
-  if (!lane) {
-    rejectionCodes.push("market_lane_not_registered");
-  } else {
-    if (!String(lane.promotion_state || "").endsWith("_ready")) {
-      rejectionCodes.push("promotion_not_ready");
-    }
-    if (!normalizeString(evidencePacket.operator_evidence_ref)) {
-      rejectionCodes.push("operator_evidence_missing");
-    }
-    if (!normalizeString(evidencePacket.claim_boundary_ack)) {
-      rejectionCodes.push("claim_boundary_ack_missing");
-    }
-    const gateAssertions = evidencePacket.gate_assertions || {};
-    const missingGateAssertion = (lane.promotion_requirements || []).some((requirement) => gateAssertions[requirement] !== true);
-    if (missingGateAssertion) {
-      rejectionCodes.push("required_gate_assertion_missing");
-    }
-    if (lane.provider_live_anchor_required && !normalizeString(evidencePacket.provider_live_anchor_ref)) {
-      rejectionCodes.push("provider_anchor_evidence_missing");
-    }
-    if (!normalizeString(evidencePacket.trace_evidence_ref)) {
-      rejectionCodes.push("trace_evidence_missing");
-    }
-  }
-  if (containsSecretMaterial(evidencePacket)) {
-    rejectionCodes.push("secret_material_forbidden");
-  }
-
-  return {
-    validation_version: "xytara-market-lane-promotion-evidence-validation-v1",
-    promotion_allowed: rejectionCodes.length === 0,
-    market_class: marketClass || null,
-    rejection_codes: Array.from(new Set(rejectionCodes)),
-    required_requirements: lane ? lane.promotion_requirements.slice() : [],
-    boundary: "market_lane_promotion_requires_depth_trace_gate_assertions_and_operator_evidence_without_secret_material"
-  };
-}
-
-function summarizeMarketLanePromotionPack() {
-  const pack = buildMarketLanePromotionPack();
-  return {
-    ok: true,
-    product: pack.product,
-    category: "machine-commerce-market-lane-promotion-summary",
-    summary_version: "xytara-market-lane-promotion-summary-v1",
-    market_lane_promotion_count: pack.market_lane_promotion_count,
-    provider_live_ready_count: pack.provider_live_ready_count,
-    bounded_live_ready_count: pack.bounded_live_ready_count,
-    deterministic_rejection_code_count: pack.deterministic_rejection_codes.length,
-    linked_surfaces: pack.linked_surfaces
-  };
-}
-
-module.exports = {
-  MARKET_LANE_PROMOTION_REJECTION_CODES,
-  buildMarketLanePromotionPack,
-  getMarketLanePromotionDetail,
-  summarizeMarketLanePromotionPack,
-  validateMarketLanePromotionEvidence
-};
+"use strict";
+
+const packageJson = require("../package.json");
+const { buildMarketLaneDepthPack } = require("./market_lane_depth_contract");
+const { buildMarketLaneTracePack } = require("./market_lane_trace_contract");
+
+const MARKET_LANE_PROMOTION_REJECTION_CODES = Object.freeze([
+  "market_lane_not_registered",
+  "promotion_not_ready",
+  "operator_evidence_missing",
+  "claim_boundary_ack_missing",
+  "required_gate_assertion_missing",
+  "provider_anchor_evidence_missing",
+  "trace_evidence_missing",
+  "secret_material_forbidden"
+]);
+
+function normalizeString(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+
+function containsSecretMaterial(value) {
+  if (!value || typeof value !== "object") return false;
+  const secretishKey = /(secret|token|credential|password|private[_-]?key|authorization)/i;
+  const secretishValue = /(bearer\s+[a-z0-9._-]{8,}|sk_live_|npm_[a-z0-9]|ghp_[a-z0-9]|xox[baprs]-)/i;
+  const stack = [value];
+  while (stack.length > 0) {
+    const current = stack.pop();
+    if (!current || typeof current !== "object") continue;
+    for (const [key, entry] of Object.entries(current)) {
+      if (secretishKey.test(String(key))) return true;
+      if (typeof entry === "string" && secretishValue.test(entry)) return true;
+      if (entry && typeof entry === "object") stack.push(entry);
+    }
+  }
+  return false;
+}
+
+function allTrue(record) {
+  return Object.values(record || {}).every((value) => value === true);
+}
+
+function buildMarketLanePromotionPack() {
+  const depthPack = buildMarketLaneDepthPack();
+  const tracePack = buildMarketLaneTracePack();
+  const depthByMarketClass = new Map((depthPack.market_lane_depths || []).map((entry) => [entry.market_class, entry]));
+  const traceByMarketClass = new Map((tracePack.market_lane_traces || []).map((entry) => [entry.market_class, entry]));
+
+  const promotionLanes = ["compute", "messaging", "treasury_payments"].map((marketClass) => {
+    const depth = depthByMarketClass.get(marketClass) || {};
+    const trace = traceByMarketClass.get(marketClass) || {};
+    const providerBound = marketClass === "compute";
+    const gateAssertions = providerBound
+      ? {
+          auth_ready: Boolean(depth.promotion_gates && depth.promotion_gates.auth_ready),
+          health_ready: Boolean(depth.promotion_gates && depth.promotion_gates.health_ready),
+          latency_ready: Boolean(depth.promotion_gates && depth.promotion_gates.latency_ready),
+          proof_fact_ready: Boolean(depth.promotion_gates && depth.promotion_gates.proof_fact_ready),
+          operator_evidence_ready: Boolean(depth.promotion_gates && depth.promotion_gates.operator_evidence_ready),
+          trace_ready: Boolean(trace.activation_ready),
+          provider_live_anchor_ready: Number(depth.provider_live_anchor_count || 0) >= 1
+        }
+      : marketClass === "messaging"
+        ? {
+            negotiate_ready: Boolean(depth.promotion_gates && depth.promotion_gates.negotiate_ready),
+            session_ready: Boolean(depth.promotion_gates && depth.promotion_gates.session_ready),
+            event_mesh_ready: Boolean(depth.promotion_gates && depth.promotion_gates.event_mesh_ready),
+            protocol_depth_ready: Boolean(depth.promotion_gates && depth.promotion_gates.protocol_depth_ready),
+            callable_activation_ready: Boolean(depth.promotion_gates && depth.promotion_gates.callable_activation_ready),
+            trace_ready: Boolean(trace.activation_ready)
+          }
+        : {
+            treasury_connectivity_ready: Boolean(depth.promotion_gates && depth.promotion_gates.treasury_connectivity_ready),
+            settlement_family_ready: Boolean(depth.promotion_gates && depth.promotion_gates.settlement_family_ready),
+            activation_ready: Boolean(depth.promotion_gates && depth.promotion_gates.activation_ready),
+            major_rail_ready: Boolean(depth.promotion_gates && depth.promotion_gates.major_rail_ready),
+            public_boundary_ready: Boolean(depth.promotion_gates && depth.promotion_gates.public_boundary_ready),
+            trace_ready: Boolean(trace.activation_ready)
+          };
+    const promotionReady = allTrue(gateAssertions);
+    const promotionRequirements = Object.keys(gateAssertions);
+    return {
+      market_class: marketClass,
+      market_label: depth.market_label || trace.market_label || marketClass,
+      promotion_state: providerBound
+        ? (promotionReady ? "provider_live_promotion_ready" : "provider_live_promotion_gated")
+        : (promotionReady ? "bounded_live_promotion_ready" : "bounded_live_promotion_gated"),
+      claim_status: depth.claim_status || trace.claim_status || "bounded_live",
+      provider_live_anchor_required: providerBound,
+      provider_live_anchor_ready: Number(depth.provider_live_anchor_count || 0) >= 1,
+      trace_ready: Boolean(trace.activation_ready),
+      activation_ready: Boolean(trace.activation_ready),
+      promotion_gate_pass_count: promotionRequirements.filter((key) => gateAssertions[key]).length,
+      promotion_gate_count: promotionRequirements.length,
+      promotion_requirements: promotionRequirements,
+      gate_assertions: gateAssertions,
+      promotion_evidence_template: {
+        market_class: marketClass,
+        operator_evidence_ref: `ops.market_lane.${marketClass}.promotion.<date>`,
+        claim_boundary_ack: depth.claim_boundary || trace.claim_boundary || "claim_boundary_ack_required",
+        gate_assertions: Object.fromEntries(promotionRequirements.map((requirement) => [requirement, true])),
+        provider_live_anchor_ref: providerBound ? "ops.market_lane.compute.provider_anchor.<date>" : null,
+        trace_evidence_ref: `ops.market_lane.${marketClass}.trace.<date>`
+      },
+      supporting_refs: Array.from(new Set(
+        []
+          .concat(depth.supporting_depth_refs || [])
+          .concat(trace.primary_call_surfaces || [])
+          .concat(trace.supporting_surfaces || [])
+      )).sort(),
+      claim_boundary: depth.claim_boundary || trace.claim_boundary || "claim_market_lane_promotion_only_for_listed_surfaces"
+    };
+  });
+
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "machine-commerce-market-lane-promotion-pack",
+    pack_version: "xytara-market-lane-promotion-pack-v1",
+    posture: "bounded_market_lane_promotion_requires_depth_trace_and_operator_evidence_alignment",
+    doctrine: "promotion_tracks_stronger_market_lane_claims_without_implying_unbounded_provider_or_venue_breadth",
+    market_lane_promotion_count: promotionLanes.length,
+    provider_live_ready_count: promotionLanes.filter((entry) => entry.promotion_state === "provider_live_promotion_ready").length,
+    bounded_live_ready_count: promotionLanes.filter((entry) => entry.promotion_state === "bounded_live_promotion_ready").length,
+    deterministic_rejection_codes: MARKET_LANE_PROMOTION_REJECTION_CODES.slice(),
+    promotion_lanes: promotionLanes,
+    linked_surfaces: {
+      full_catalog_ref: "/v1/full-catalog",
+      market_lanes_ref: "/v1/full-catalog/market-lanes",
+      market_lane_depth_ref: "/v1/full-catalog/market-lanes/depth",
+      market_lane_depth_summary_ref: "/v1/full-catalog/market-lanes/depth/summary",
+      market_lane_trace_ref: "/v1/full-catalog/market-lanes/traces",
+      market_lane_trace_summary_ref: "/v1/full-catalog/market-lanes/traces/summary",
+      adapter_depth_summary_ref: "/v1/adapter-depth/summary"
+    }
+  };
+}
+
+function getMarketLanePromotionDetail(marketClass) {
+  const normalized = String(marketClass || "").trim().toLowerCase();
+  return (buildMarketLanePromotionPack().promotion_lanes || []).find((entry) => entry.market_class === normalized) || null;
+}
+
+function validateMarketLanePromotionEvidence(pack, evidence) {
+  const promotionPack = pack || buildMarketLanePromotionPack();
+  const evidencePacket = evidence || {};
+  const marketClass = normalizeString(evidencePacket.market_class);
+  const lane = (promotionPack.promotion_lanes || []).find((entry) => entry.market_class === marketClass) || null;
+  const rejectionCodes = [];
+
+  if (!lane) {
+    rejectionCodes.push("market_lane_not_registered");
+  } else {
+    if (!String(lane.promotion_state || "").endsWith("_ready")) {
+      rejectionCodes.push("promotion_not_ready");
+    }
+    if (!normalizeString(evidencePacket.operator_evidence_ref)) {
+      rejectionCodes.push("operator_evidence_missing");
+    }
+    if (!normalizeString(evidencePacket.claim_boundary_ack)) {
+      rejectionCodes.push("claim_boundary_ack_missing");
+    }
+    const gateAssertions = evidencePacket.gate_assertions || {};
+    const missingGateAssertion = (lane.promotion_requirements || []).some((requirement) => gateAssertions[requirement] !== true);
+    if (missingGateAssertion) {
+      rejectionCodes.push("required_gate_assertion_missing");
+    }
+    if (lane.provider_live_anchor_required && !normalizeString(evidencePacket.provider_live_anchor_ref)) {
+      rejectionCodes.push("provider_anchor_evidence_missing");
+    }
+    if (!normalizeString(evidencePacket.trace_evidence_ref)) {
+      rejectionCodes.push("trace_evidence_missing");
+    }
+  }
+  if (containsSecretMaterial(evidencePacket)) {
+    rejectionCodes.push("secret_material_forbidden");
+  }
+
+  return {
+    validation_version: "xytara-market-lane-promotion-evidence-validation-v1",
+    promotion_allowed: rejectionCodes.length === 0,
+    market_class: marketClass || null,
+    rejection_codes: Array.from(new Set(rejectionCodes)),
+    required_requirements: lane ? lane.promotion_requirements.slice() : [],
+    boundary: "market_lane_promotion_requires_depth_trace_gate_assertions_and_operator_evidence_without_secret_material"
+  };
+}
+
+function summarizeMarketLanePromotionPack() {
+  const pack = buildMarketLanePromotionPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: "machine-commerce-market-lane-promotion-summary",
+    summary_version: "xytara-market-lane-promotion-summary-v1",
+    market_lane_promotion_count: pack.market_lane_promotion_count,
+    provider_live_ready_count: pack.provider_live_ready_count,
+    bounded_live_ready_count: pack.bounded_live_ready_count,
+    deterministic_rejection_code_count: pack.deterministic_rejection_codes.length,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+module.exports = {
+  MARKET_LANE_PROMOTION_REJECTION_CODES,
+  buildMarketLanePromotionPack,
+  getMarketLanePromotionDetail,
+  summarizeMarketLanePromotionPack,
+  validateMarketLanePromotionEvidence
+};