xytara 3.5.0 → 3.6.0

package/RELEASE_NOTES.md

@@ -1,7 +1,6 @@
-`xytara` 3.5.0 makes delegated authority provable at a point in time: the delegation log.
+`xytara` 3.6.0 lets open-network providers price what they sell.
 
-- **Delegation log (`naxytra-delegation-log/1`)** — every agent-key mint (delegatee, key fingerprint, caps, expiry) and revoke (stated time, reason) is an append-only, hash-chained event: `event_sha256 = sha256(JCS(event))`, `chain_hash = sha256(previous chain_hash + event_sha256)`. Mint and revoke responses return the event reference (`delegation_event`).
-- **Public, key-less surface** — `GET /v1/delegation-log/head` (count, head hash, chain continuity), `GET /v1/delegation-log/feed?since_seq=&limit=` (seq, type, time and hashes only — never an account, a key or a label), `GET /v1/delegation-log/checkpoint` (a `naxytra-attestation/1` over the head, signed with the delivery-receipt keys; `POST /v1/delegation-log/checkpoint/verify` is a free check). The keys endpoint announces the log.
-- **Owner and agent views** — `GET /v1/credits/agents/log` (owner key: the account's full events; agent key: its own) and `GET /v1/credits/agents/:id/proof`: the key's events, the hash-only chain from its first event to the head, the current checkpoint and its digest, plus the verification recipe. A relying party holding a proof and a checkpoint establishes, without asking the runtime, that a key was minted with these caps before T and not revoked before a head anchored after T.
-- **Chronology binding on checkpoints** — `XYTARA_EXTERNAL_BINDING_JSON` (the `{scheme, system_id, tag}` object or the bare 64-hex tag, scheme `ctp/1`, system id `NAXYTRA-DELEGATION-LOG/1`) is carried inside every checkpoint's signed bytes while an anchoring session is open; `attestation_sha256` of the checkpoint is the digest an external anchor commits to.
+- **Provider offers** — a provider registers `offers: [{ tool_name | task_ref, title, description?, price_usd }]` (whole cents, $0.01–$100.00, up to 50, selectors it declared). A call routed to that provider for an offered capability is quoted at the offer: the x402 challenge advertises the offer amount on every configured network (`acceptsForQuote`), the payment is verified against it (a base-price payment is `payment_requirements_mismatch` before the facilitator), a `credits_first` call is debited the offer's credits equivalent (price ÷ credit value, rounded up), and the provider's revenue share accrues on its own price. Offers are metadata: repricing never reverts an active provider to pending; omitting `offers` on an update keeps them, `[]` clears them. An operator-pinned execution target for a call disables offer pricing for it (the registry would not route it).
+- **Catalog** — `GET /v1/catalog` gains `provider_offers`: every active provider's offers with `purchase.x402_per_call` (re-priced amounts) and `credits_per_call`. Quotes carry `price_source` (`provider_offer` | `catalog`), `provider_offer` and `catalog_amount_minor`.
+- **Contract** — `/v1/provider-network/contract` documents `offers` and the pricing rule; the public provider view includes `offers`; `register-provider.sh` takes `OFFERS_JSON` and `PAYOUT_ADDRESS`.
 - Client package (thin): unchanged.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xytara",
-  "version": "3.5.0",
+  "version": "3.6.0",
   "description": "Client for the hosted naxytra runtime: discover a capability, pay per call with x402 (gasless USDC on Base) or credits, get the deliverable and a signed delivery receipt you can verify offline. The runtime is a hosted service; this package is the client.",
   "main": "client.js",
   "exports": {