xytara 3.9.6 → 3.9.8

package/README.md

@@ -14,8 +14,8 @@ Listed on [Smithery](https://smithery.ai/server/naxytra/xytara-mcp-executor) ·
 
 | Hosted surface | URL |
 | --- | --- |
-| Runtime (paid command path, credits, catalog, receipts) | `https://xytara.onrender.com` |
-| Pay-per-call MCP server (Streamable HTTP) | `https://xytara-mcp-executor.onrender.com/mcp` |
+| Runtime (paid command path, credits, catalog, receipts) | `https://api.naxytra.com` |
+| Pay-per-call MCP server (Streamable HTTP) | `https://mcp.naxytra.com/mcp` |
 | Website, agent guide, quickstart | `https://www.naxytra.com` · [/agents](https://www.naxytra.com/agents) · [/quickstart](https://www.naxytra.com/quickstart) |
 
 This package ships:
@@ -49,7 +49,7 @@ xytara run --help
 Quote first, with no wallet material at all:
 
 ```bash
-xytara-run --url https://xytara.onrender.com --account ACCOUNT_REF \
+xytara-run --url https://api.naxytra.com --account ACCOUNT_REF \
   --task adapter.mcp.invoke --command mcp.invoke:summarize \
   --body-json "{\"tool_name\":\"summarize\",\"arguments\":{\"text\":\"Summarize the naxytra first-run path in one sentence.\"}}" \
   --quote-only --pretty
@@ -105,7 +105,7 @@ challenge; pay it once and the response carries a spend credential. Then call
 ## Pay-per-call MCP
 
 ```
-endpoint:   https://xytara-mcp-executor.onrender.com/mcp
+endpoint:   https://mcp.naxytra.com/mcp
 tools/list  -> free
 tools/call  -> 402 Payment Required with a price
             -> sign ONE gasless USDC authorization (x402 / EIP-3009)
@@ -175,7 +175,7 @@ the only algorithms in use.
 ```js
 const { verifyDeliveryReceipt, hashCanonical, verificationRecipe } = require("xytara");
 
-const keys = (await fetch("https://xytara.onrender.com/.well-known/delivery-receipt-keys").then((r) => r.json())).keys;
+const keys = (await fetch("https://api.naxytra.com/.well-known/delivery-receipt-keys").then((r) => r.json())).keys;
 const result = verifyDeliveryReceipt(receipt, keys);      // { valid, signatures: [{ alg, kid, valid }], ... }
 const outputMatches = hashCanonical(outputYouReceived) === receipt.delivery.output_sha256;
 console.log(verificationRecipe("/.well-known/delivery-receipt-keys").steps);
@@ -222,7 +222,7 @@ anchor then commits to `attestation_sha256` = SHA-256 of the JCS form of the who
 ```js
 const { verifyAttestation, hashCanonical, attestationRecipe } = require("xytara");
 
-const keys = (await fetch("https://xytara-mcp-executor.onrender.com/.well-known/delivery-receipt-keys").then((r) => r.json())).keys;
+const keys = (await fetch("https://mcp.naxytra.com/.well-known/delivery-receipt-keys").then((r) => r.json())).keys;
 const check = verifyAttestation(attestation, keys);        // { valid, claim_verified, signatures: [{ alg, kid, valid }], ... }
 const evidenceMatches = hashCanonical({ tool, arguments, output }) === attestation.evidence_sha256;
 console.log(attestationRecipe("/.well-known/delivery-receipt-keys").steps);

package/RELEASE_NOTES.md

@@ -1,6 +1,7 @@
-`xytara` 3.9.6 prepares native BSV settlement for the end of the Teranode-hosted ARC instance (2026-11-30).
+`xytara` 3.9.8 moves the public endpoints to naxytra.com addresses.
 
-- **Keyless broadcast endpoints** — `XYTARA_BSV_ARC_RPC_KEYLESS=1` declares that the broadcast endpoint needs no API key, as with the public BSV Broadcaster instances (ARC's successor, same `POST /tx { rawTx }` request and `202 { txid }` answer). Readiness then reports `settlement_transport_auth: "keyless_endpoint"` instead of a missing-key blocker; without the declaration a missing key in arc mode is still a blocker. Readiness now names the auth state (`api_key`, `keyless_endpoint`, `missing`, `not_applicable`).
-- **Runbook** — the BSV runbook lists what depends on the hosted ARC instance (native BSV settlement submission only; x402 on Base, BOLT and settlement observation do not) and the cutover environment.
-- **Verifiers** — a keyless submission to a mock broadcaster (ARC-shaped body, no auth header, 202 read as submitted) and the three readiness states.
-- Client package (thin): unchanged.
+- **Runtime** — `https://api.naxytra.com` (was `https://xytara.onrender.com`).
+- **Pay-per-call MCP server** — `https://mcp.naxytra.com/mcp` (was `https://xytara-mcp-executor.onrender.com/mcp`); the server card, `/.well-known/x402`, delivery-receipt keys and the MCP registry entry use the new address.
+- The previous addresses still serve the same service, so existing integrations keep working; new integrations should use the naxytra.com addresses.
+- Client package (thin): the default runtime and MCP addresses are the new ones.
+- No change to pricing, payment, routing or the provider ledger.

package/START_HERE.md

@@ -24,13 +24,13 @@ quote -> pay/credits -> execute -> prove
 ## 2. Hosted endpoints
 
 ```text
-runtime:  https://xytara.onrender.com
+runtime:  https://api.naxytra.com
           POST /x402/commands/execute      paid command path (402 challenge -> paid 200)
           POST /x402/credits/topup         buy credits once, spend them per call
           GET  /v1/catalog                 discover tasks
           GET  /.well-known/delivery-receipt-keys
           POST /v1/delivery-receipts/verify
-mcp:      https://xytara-mcp-executor.onrender.com/mcp
+mcp:      https://mcp.naxytra.com/mcp
 website:  https://www.naxytra.com  (/agents, /quickstart, /v1/first-run-path, /v1/first-run-kit)
 ```
 
@@ -54,7 +54,7 @@ xytara first-run --run-quote --account ACCOUNT_REF --pretty
 which runs:
 
 ```bash
-xytara-run --url https://xytara.onrender.com --account ACCOUNT_REF --task adapter.mcp.invoke --command mcp.invoke:summarize --body-json "{\"tool_name\":\"summarize\",\"arguments\":{\"text\":\"Summarize the naxytra first-run path in one sentence.\"}}" --quote-only --pretty
+xytara-run --url https://api.naxytra.com --account ACCOUNT_REF --task adapter.mcp.invoke --command mcp.invoke:summarize --body-json "{\"tool_name\":\"summarize\",\"arguments\":{\"text\":\"Summarize the naxytra first-run path in one sentence.\"}}" --quote-only --pretty
 ```
 
 Then execute with a signed x402 payment (see the `CommerceClient` example in README.md) or

package/bin/xytara-first-run.js

@@ -4,7 +4,7 @@
 const path = require("path");
 const { spawnSync } = require("child_process");
 
-const DEFAULT_SERVICE_URL = "https://xytara.onrender.com";
+const DEFAULT_SERVICE_URL = "https://api.naxytra.com";
 const DEFAULT_KIT_URL = "https://www.naxytra.com/v1/first-run-kit";
 const DEFAULT_TEXT = "Summarize the naxytra first-run path in one sentence.";
 const ACCOUNT_PLACEHOLDER = "ACCOUNT_REF";

package/bin/xytara.js

@@ -24,7 +24,7 @@ function printUsage() {
     "  xytara first-run --execute-with-credits --account ACCOUNT_REF --pretty",
     "  xytara run --help",
     "",
-    "The runtime is a hosted service (https://xytara.onrender.com); this package is the client."
+    "The runtime is a hosted service (https://api.naxytra.com); this package is the client."
   ].join("\n"));
 }
 
@@ -43,7 +43,7 @@ function printStartHere() {
     "1. Open https://www.naxytra.com/v1/first-run-path",
     "2. Open https://www.naxytra.com/v1/first-run-kit for copyable commands.",
     "3. Quote safely first:",
-    "   xytara-run --url https://xytara.onrender.com --account ACCOUNT_REF --task adapter.mcp.invoke --command mcp.invoke:summarize --body-json \"{\\\"tool_name\\\":\\\"summarize\\\",\\\"arguments\\\":{\\\"text\\\":\\\"Summarize the naxytra first-run path in one sentence.\\\"}}\" --quote-only --pretty",
+    "   xytara-run --url https://api.naxytra.com --account ACCOUNT_REF --task adapter.mcp.invoke --command mcp.invoke:summarize --body-json \"{\\\"tool_name\\\":\\\"summarize\\\",\\\"arguments\\\":{\\\"text\\\":\\\"Summarize the naxytra first-run path in one sentence.\\\"}}\" --quote-only --pretty",
     "4. Execute with direct signed payment or credits-first on a funded account.",
     "5. Hand the result into xoonya for proof review and verification.",
     "",

package/client.js

@@ -27,8 +27,8 @@ const { version } = require("./package.json");
 // and receipt verification (GET /.well-known/delivery-receipt-keys, POST /v1/delivery-receipts/verify).
 // `mcp` is the pay-per-call MCP server (Streamable HTTP).
 const endpoints = Object.freeze({
-  runtime: "https://xytara.onrender.com",
-  mcp: "https://xytara-mcp-executor.onrender.com/mcp",
+  runtime: "https://api.naxytra.com",
+  mcp: "https://mcp.naxytra.com/mcp",
   website: "https://www.naxytra.com"
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xytara",
-  "version": "3.9.6",
+  "version": "3.9.8",
   "description": "Client for the hosted naxytra runtime: discover a capability, pay per call with x402 (gasless USDC on Base) or credits, get the deliverable and a signed delivery receipt you can verify offline. The runtime is a hosted service; this package is the client.",
   "main": "client.js",
   "exports": {

package/scripts/verify_client.js

@@ -257,8 +257,8 @@ async function main() {
     }
     assert.strictEqual(RECEIPT_VERSION, "naxytra-delivery-receipt/1", "receipt version mismatch");
     assert.strictEqual(ATTESTATION_VERSION, "naxytra-attestation/1", "attestation version mismatch");
-    assert.strictEqual(endpoints.runtime, "https://xytara.onrender.com", "runtime endpoint mismatch");
-    assert.strictEqual(endpoints.mcp, "https://xytara-mcp-executor.onrender.com/mcp", "mcp endpoint mismatch");
+    assert.strictEqual(endpoints.runtime, "https://api.naxytra.com", "runtime endpoint mismatch");
+    assert.strictEqual(endpoints.mcp, "https://mcp.naxytra.com/mcp", "mcp endpoint mismatch");
     assert.strictEqual(endpoints.website, "https://www.naxytra.com", "website endpoint mismatch");
     assert.strictEqual(version, packageJson.version, "version export must come from package.json");
     assert.strictEqual(require(path.join(PACKAGE_DIR, "client.js")), client, "client entry is a stable singleton");