yakmesh 1.0.0 → 1.0.2

package/CONTRIBUTING.md

@@ -0,0 +1,120 @@
+<![CDATA[# Contributing to YAKMESH 🏔️
+
+![YAKMESH](https://img.shields.io/badge/YAKMESH-Sturdy%20%26%20Secure-2D5A27?style=for-the-badge)
+![Post-Quantum](https://img.shields.io/badge/Security-Quantum--Resistant-blueviolet?style=flat-square)
+![Timing](https://img.shields.io/badge/Timing-Atomic%20Clock%20Compatible-yellow?style=flat-square)
+![License](https://img.shields.io/badge/License-MIT-green?style=flat-square)
+
+Thank you for your interest in contributing to **YAKMESH** — the **Yielding Atomic Kernel Modular Encryption Secured Hub**.
+
+We are building a "Sturdy & Secure" foundation for the post-quantum era.
+
+---
+
+## 📋 Before You Contribute
+
+1. **Read the documentation** at [yakmesh.dev](https://yakmesh.dev)
+2. **Check existing issues** to avoid duplicates
+3. **Follow our code of conduct** — be respectful and constructive
+
+---
+
+## 🔐 Engineering Standards
+
+### Cryptographic Requirements
+
+All contributions involving cryptographic primitives **MUST**:
+
+- ✅ Use **NIST-standardized Post-Quantum Cryptography** (ML-DSA-65 / FIPS 204)
+- ✅ Use libraries from the `@noble` family (`@noble/hashes`, `@noble/post-quantum`)
+- ❌ **NO legacy ECDSA/RSA** in security-critical paths
+- ❌ **NO `Math.random()`** for security-sensitive operations (use `randomBytes()`)
+
+### Timing & Synchronization
+
+Changes to the timing/oracle layer must:
+
+- Support precision hardware timestamps (PCIe atomic clocks, PTP, GPS)
+- Maintain backward compatibility with NTP-only deployments
+- Include tests for phase epoch calculations
+
+### Code Quality
+
+- All PRs must pass existing tests (`npm test`)
+- Include tests for new functionality
+- Follow existing code style (ES modules, async/await)
+- Document public APIs with JSDoc comments
+
+---
+
+## 🏷️ Branding & Trademark
+
+**YAKMESH** is a trademark of the YAKMESH Project (PeerQuanta).
+
+### If You Fork This Project
+
+| ❌ You MUST | ✅ You MAY |
+|-------------|------------|
+| Remove the official YAKMESH logo | State "Based on YAKMESH technology" |
+| Remove YAKMESH branding | State "Powered by YAKMESH" |
+| Rename your software | Use the "Powered by" badge below |
+
+### "Powered by YAKMESH" Badge
+
+```markdown
+![Powered by YAKMESH](https://img.shields.io/badge/Powered%20by-YAKMESH-2D5A27?style=for-the-badge)
+```
+
+Full policy: [yakmesh.dev/docs/trademark-policy.html](https://yakmesh.dev/docs/trademark-policy.html)
+
+---
+
+## 🚨 Security Vulnerabilities
+
+**Please do NOT open public issues for security flaws.**
+
+Instead, email **security@peerquanta.com** directly so we can coordinate a responsible disclosure and hardened patch.
+
+We follow a 90-day disclosure policy and will credit researchers in our security acknowledgments.
+
+---
+
+## 📝 Pull Request Process
+
+1. **Fork** the repository
+2. **Create a branch** (`git checkout -b feature/my-feature`)
+3. **Make your changes** following the standards above
+4. **Test** your changes (`npm test`)
+5. **Commit** with clear messages
+6. **Push** and open a Pull Request
+
+### PR Title Format
+
+```
+[category] Brief description
+
+Examples:
+[oracle] Add GPS time source detection
+[mesh] Fix WebSocket reconnection logic
+[docs] Update API reference
+[security] Patch hash exposure in /status endpoint
+```
+
+---
+
+## 💬 Questions?
+
+- **General:** Open a GitHub Discussion
+- **Security:** security@peerquanta.com
+- **Legal/Trademark:** legal@peerquanta.com
+
+---
+
+<div align="center">
+  <sub>Built with quantum principles. Secured by math.</sub>
+  <br><br>
+  <strong><a href="https://yakmesh.dev">yakmesh.dev</a></strong>
+  <br><br>
+  <sub>© 2026 YAKMESH Project. Sturdy & Secure.</sub>
+</div>
+]]>

package/LICENSE

@@ -0,0 +1,54 @@
+<![CDATA[MIT License
+
+Copyright (c) 2026 PeerQuanta
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+## Trademark Notice
+
+**YAKMESH™** and the YAKMESH logo (the "Climbing Yak") are trademarks of 
+PeerQuanta, subject to USPTO Application Serial No. 99594620.
+
+The MIT License granted above pertains solely to the software's source code 
+and documentation. This license **does not** include any rights to use the 
+YAKMESH™ name, logos, taglines ("Sturdy & Secure"), or brand identity.
+
+### Permitted Use
+
+✅ You may factually state that your project is "based on YAKMESH™ technology"  
+✅ You may state your project is "compatible with YAKMESH™"  
+✅ You may use the "Powered by YAKMESH™" badge in your documentation  
+✅ You may use the name in internal documentation or private development  
+
+### Prohibited Use
+
+❌ You may not use the YAKMESH™ name or logo in a way that suggests official 
+   endorsement or affiliation without prior written consent  
+❌ You may not use YAKMESH™ in your product name (e.g., "YAKMESH Pro", "YAKMESH Cloud")  
+❌ If you fork this repository, you **must** remove the YAKMESH™ branding and 
+   rename your version of the software before public distribution  
+
+### Questions
+
+For trademark licensing inquiries: legal@peerquanta.com
+
+See [TRADEMARK.md](TRADEMARK.md) for the full trademark policy.
+]]>

package/README.md

@@ -1,14 +1,16 @@
-<![CDATA[<div align="center">
-  <img src="https://yakmesh.dev/assets/yakmesh-logo2.png" alt="Yakmesh" width="200">
+<div align="center">
+  <img src="https://yakmesh.dev/assets/yakmesh-logo2.png" alt="YAKMESH" width="200">
 
-  # 🏔️ YAKMESH: Sturdy & Secure
+  <h1>🏔️ YAKMESH™: Sturdy & Secure</h1>
 
-  **Yielding Atomic Kernel Modular Encryption Secured Hub**
+  <p><strong>Yielding Atomic Kernel Modular Encryption Secured Hub</strong></p>
 
-  [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-  [![Node.js](https://img.shields.io/badge/Node.js-18+-green.svg)](https://nodejs.org)
-  [![Post-Quantum](https://img.shields.io/badge/Crypto-Post--Quantum-blue.svg)](https://csrc.nist.gov/projects/post-quantum-cryptography)
-  [![npm version](https://img.shields.io/npm/v/yakmesh.svg)](https://www.npmjs.com/package/yakmesh)
+  <p>
+    <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
+    <a href="https://nodejs.org"><img src="https://img.shields.io/badge/Node.js-18+-green.svg" alt="Node.js"></a>
+    <a href="https://csrc.nist.gov/projects/post-quantum-cryptography"><img src="https://img.shields.io/badge/Crypto-Post--Quantum-blue.svg" alt="Post-Quantum"></a>
+    <a href="https://www.npmjs.com/package/yakmesh"><img src="https://img.shields.io/npm/v/yakmesh.svg" alt="npm version"></a>
+  </p>
 </div>
 
 ---
@@ -94,7 +96,6 @@ yakmesh/
 ├── identity/         # Post-quantum key management
 ├── database/         # SQLite replication engine
 ├── adapters/         # Platform integration plugins
-├── security/         # Pro authentication & encryption
 ├── webserver/        # Embedded Caddy web server
 └── server/           # HTTP/WS server
 ```
@@ -166,9 +167,11 @@ YAKMESH Pro includes additional security features:
 
 ## License
 
-- **Community Edition**: MIT License
+- **Community Edition**: MIT License (see [LICENSE](LICENSE))
 - **Pro Edition**: Proprietary License
 
+See [TRADEMARK.md](TRADEMARK.md) for trademark usage policy.
+
 ---
 
 <div align="center">
@@ -176,6 +179,7 @@ YAKMESH Pro includes additional security features:
   <br><br>
   <strong><a href="https://yakmesh.dev">yakmesh.dev</a></strong>
   <br><br>
-  <sub>© 2026 YAKMESH Project. Sturdy & Secure.</sub>
+  <sub>© 2026 YAKMESH™ Project. Sturdy & Secure.</sub>
+  <br>
+  <sub>YAKMESH™ is a trademark of PeerQuanta, application pending (Serial No. 99594620).</sub>
 </div>
-]]>

package/TRADEMARK.md

@@ -0,0 +1,103 @@
+<![CDATA[# YAKMESH™ Trademark Policy
+
+![YAKMESH](https://img.shields.io/badge/YAKMESH™-Sturdy%20%26%20Secure-2D5A27?style=for-the-badge)
+
+## Trademark Information
+
+| Property | Value |
+|----------|-------|
+| **Mark** | YAKMESH™ |
+| **Owner** | PeerQuanta |
+| **Status** | Application Pending |
+| **USPTO Serial No.** | 99594620 |
+| **Filing Date** | January 14, 2026 |
+
+## Protected Assets
+
+The following are trademarks of PeerQuanta:
+
+- **YAKMESH™** — the word mark
+- **The "Climbing Yak" Logo** — the mountain yak emblem
+- **"Sturdy & Secure"** — the tagline
+- **"Yielding Atomic Kernel Modular Encryption Secured Hub"** — the backronym
+
+## License Separation
+
+The YAKMESH™ software is released under the **MIT License**, which grants broad 
+rights to use, modify, and distribute the source code.
+
+**However**, the MIT License does **not** grant any rights to use the YAKMESH™ 
+trademarks. The code and the brand are separate:
+
+| Asset | License | Rights Granted |
+|-------|---------|----------------|
+| Source code | MIT | Use, modify, distribute, sublicense |
+| YAKMESH™ name | Trademark | None (requires permission) |
+| Logo/branding | Trademark | None (requires permission) |
+
+## Usage Guidelines
+
+### ✅ Permitted Uses
+
+You **may** use YAKMESH™ trademarks in the following ways:
+
+1. **Attribution**: "Built on YAKMESH™ technology"
+2. **Compatibility**: "Compatible with YAKMESH™ networks"
+3. **Powered By Badge**: Use this badge in your documentation:
+   ```markdown
+   ![Powered by YAKMESH](https://img.shields.io/badge/Powered%20by-YAKMESH™-2D5A27?style=for-the-badge)
+   ```
+4. **Academic/Editorial**: Discussing YAKMESH™ in articles, papers, or reviews
+5. **Internal Use**: Private development and internal documentation
+
+### ❌ Prohibited Uses
+
+You may **not** use YAKMESH™ trademarks in the following ways:
+
+1. **Product Names**: Naming your software "YAKMESH [Anything]"
+2. **Impersonation**: Suggesting your project is the official YAKMESH™
+3. **Domain Names**: Registering domains containing "yakmesh" (e.g., yakmesh-cloud.com)
+4. **Forked Projects**: If you fork this repository, you **must**:
+   - Remove the YAKMESH™ name from all files
+   - Remove the official logo and branding
+   - Rename your project before public distribution
+5. **Modified Logo**: Creating variations of the YAKMESH™ logo
+6. **Merchandise**: Selling products bearing the YAKMESH™ mark without permission
+
+## Fork Requirements
+
+If you fork the YAKMESH™ repository:
+
+| Before Distributing | Required Action |
+|---------------------|-----------------|
+| Project name | Rename to something other than YAKMESH™ |
+| Logo files | Delete `assets/yakmesh-logo*.png` |
+| README badges | Remove YAKMESH™ shields |
+| Package name | Change in `package.json` |
+| CLI name | Rename the CLI command |
+
+You are welcome to state: *"This project is based on YAKMESH™ technology"*
+
+## Enforcement
+
+We actively monitor for trademark misuse. Violations may result in:
+
+1. DMCA takedown requests
+2. npm package name disputes
+3. Domain name disputes (UDRP)
+4. Legal action for willful infringement
+
+## Contact
+
+| Purpose | Contact |
+|---------|---------|
+| Trademark licensing | legal@peerquanta.com |
+| Brand partnerships | partnerships@peerquanta.com |
+| Report misuse | legal@peerquanta.com |
+
+---
+
+**YAKMESH™** is a trademark of PeerQuanta, application pending (Serial No. 99594620).
+
+© 2026 PeerQuanta. Sturdy & Secure.
+]]>