xytara 3.6.1 → 3.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/RELEASE_NOTES.md +5 -4
  2. package/package.json +1 -1
package/RELEASE_NOTES.md CHANGED
@@ -1,6 +1,7 @@
1
- `xytara` 3.6.1 fixes the delegation log not surviving a runtime restart.
1
+ `xytara` 3.8.0 lets a provider prove its endpoint before asking for traffic, and ships the server it can copy.
2
2
 
3
- - **Fix: delegation log restored from the durable snapshot** — the initial runtime state now declares `delegationEventLog`, so a restored snapshot carries the log over (the restore copies only collections the initial state already has; the log was being re-created empty on every restart). Events recorded on the live runtime between a restart and this fix were lost from memory; the hash chain restarts from genesis on the live log, which the public head reports honestly.
4
- - **Fix: buyer event log restored too** — the same gap applied to the buyer event log and its per-day counters (`buyerEventLog`, `buyerEventDaily`): they were lost on every deploy, so the daily buyer-journey report only ever saw events since the last restart. Both are now declared in the initial state and carried over.
5
- - The state-guard verifier now asserts every durable collection — provider registry, payouts, settlement ledger, delegation log, buyer event log — is declared in the initial state and survives a restore.
3
+ - **Provider self-test** — `POST /v1/provider-network/providers/:id/self-test` (the provider with its `owner_secret`, or the operator): the runtime POSTs a synthetic, unpaid job (`command: provider.self_test`, `body.self_test: true`, zero quote) to the registered endpoint exactly the way a paid job travels — same endpoint policy, same bearer, same deliverable rule — and records the outcome on the provider (`last_self_test`: ok, reason, latency, time), visible on the public record. An empty 2xx or an error fails it; nothing is quoted, charged or attributed. The daily report's pending-provider table shows the self-test outcome next to the payout-address check.
4
+ - **Reference `/execute` server** — `services/mcp-execution-target/buyer-demo/provider-execute-reference.mjs` (Node 20+, no dependencies): bearer check, `GET /health`, the self-test answer, idempotency per `quote.quote_id`, the `{ result: { output } }` deliverable shape, 429 + Retry-After when overloaded, 4xx for bad input. The verifier runs it. Published at `https://www.naxytra.com/providers/execute-reference.mjs`; the walkthrough is `https://www.naxytra.com/providers/quickstart`.
5
+ - **Anchoring record** — `scripts/record_delegation_checkpoint.js` appends the live delegation-log checkpoint (id, `attestation_sha256`, head, binding tag) as one JSONL line to the chronology drop directory, only when the checkpoint carries a `ctp/1` binding.
6
+ - The provider contract documents the self-test.
6
7
  - Client package (thin): unchanged.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "xytara",
3
- "version": "3.6.1",
3
+ "version": "3.8.0",
4
4
  "description": "Client for the hosted naxytra runtime: discover a capability, pay per call with x402 (gasless USDC on Base) or credits, get the deliverable and a signed delivery receipt you can verify offline. The runtime is a hosted service; this package is the client.",
5
5
  "main": "client.js",
6
6
  "exports": {