foundation: start native language reality engineering root

parts/HLP-PART-0009/PART.hldp

@@ -0,0 +1,9 @@
+schema: hololake.numbered-part/v1
+id: HLP-PART-0009
+display_name: 线上双签模块商城核
+state: DONOR_BYTES_EXTRACTED
+source_commit: 2e48b7d7686554454b6ee69bcdbd01eb68bff401
+payload_sha256: 171b2a122177ccb43d5ab9683a3b6c86e20f2e8740d53f91602fb418131cbcc0
+payload_files: 3
+native_acceptance: PENDING
+truth_boundary: LIVE_NETWORK_INSTALL_ACCEPTANCE_NOT_YET_PROVEN

parts/HLP-PART-0009/payload/product-source/hololake-native-desktop/contracts/online-marketplace.json

@@ -0,0 +1,61 @@
+{
+  "schema": "hololake.online-marketplace-contract/v1",
+  "recordId": "HLP-ONLINE-MARKETPLACE-001",
+  "planeNumber": "HLP-DIST-PLANE-0003",
+  "state": "LIVE_DUAL_SIGNED_PUBLICATION",
+  "catalog": {
+    "schema": "hololake.marketplace.catalog/v1",
+    "url": "https://guanghu.chat/api/hololake/marketplace/catalog",
+    "signatureUrl": "https://guanghu.chat/api/hololake/marketplace/catalog.sig",
+    "maximumBytes": 1048576,
+    "maximumEntries": 256,
+    "conditionalRequest": "ETAG_IF_NONE_MATCH",
+    "epochMonotonic": true,
+    "sameEpochEquivocationRejected": true,
+    "requiredSignerClasses": [
+      "ZERO_POINT_ORIGIN_PUBLIC_SCOPE_SIGNER",
+      "ENTERPRISE_ZERO_CORE_DISTRIBUTION_SIGNER"
+    ]
+  },
+  "artifactKinds": {
+    "PHYSICAL_MODULE": {
+      "packageSchema": "hololake.module-package/v1",
+      "signature": "MINISIGN_ED25519_RELEASE_TRUST",
+      "installation": "DOWNLOAD_VERIFY_INSTALL_MOUNT_SELF_TEST",
+      "arbitraryNativeCode": false,
+      "arbitraryWebviewJavascript": false,
+      "registeredHostAdapterRequired": true,
+      "permissionExpansionRequiresDirectHumanConfirmation": true,
+      "uninstallPreservesUserData": true,
+      "rollbackSupported": true
+    },
+    "COGNITIVE_SKILL": {
+      "packageSchema": "hololake.cognitive-skill-package/v1",
+      "signature": "DUAL_SIGNED_CATALOG_EXACT_CONTENT_SHA256",
+      "installation": "DOWNLOAD_VERIFY_STORE_ACTIVE_READONLY",
+      "executionAuthority": false,
+      "skillReadonlyGuarantee": true,
+      "systemPermissions": [],
+      "automaticPromptInjection": false,
+      "personaReadsOnDemand": true,
+      "uninstallPreservesPackageAndReceipts": true,
+      "rollbackSupported": true
+    }
+  },
+  "sourceRepositoryBoundary": {
+    "repositoryIsOriginEvidence": true,
+    "clientClonesRepository": false,
+    "clientExecutesRepository": false,
+    "catalogRequiresExactSourceRevision": true,
+    "artifactUrlsAreContentAddressed": true,
+    "clientDownloadsImmutableSignedArtifactOnly": true
+  },
+  "humanExperience": {
+    "oneMarketplaceTwoSections": true,
+    "installButtonDownloadsAndActivates": true,
+    "physicalPermissionExpansionShowsExactConfirmation": true,
+    "skillInstallNeverGrantsRealityAuthority": true,
+    "realStatusAndReceiptsOnly": true
+  },
+  "failurePolicy": "FAIL_CLOSED_KEEP_LAST_VERIFIED_CATALOG_AND_INSTALLED_ITEMS"
+}

parts/HLP-PART-0009/payload/product-source/hololake-native-desktop/scripts/online-marketplace.test.mjs

@@ -0,0 +1,71 @@
+import assert from 'node:assert/strict'
+import { createHash } from 'node:crypto'
+import { readFile } from 'node:fs/promises'
+import { basename, join } from 'node:path'
+import test from 'node:test'
+
+const root = new URL('..', import.meta.url).pathname
+const contract = JSON.parse(await readFile(join(root, 'contracts/online-marketplace.json'), 'utf8'))
+const registry = JSON.parse(await readFile(join(root, 'contracts/numbered-ipc-registry.json'), 'utf8'))
+const frontend = await readFile(join(root, 'src/main.tsx'), 'utf8')
+const runtime = await readFile(join(root, 'src-tauri/src/online_marketplace.rs'), 'utf8')
+
+function canonical(value) {
+  if (Array.isArray(value)) return value.map(canonical)
+  if (value && typeof value === 'object') {
+    return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical(value[key])]))
+  }
+  return value
+}
+
+test('one online marketplace keeps physical modules and cognitive skills on separate trust chains', () => {
+  assert.equal(contract.humanExperience.oneMarketplaceTwoSections, true)
+  assert.equal(contract.artifactKinds.PHYSICAL_MODULE.installation, 'DOWNLOAD_VERIFY_INSTALL_MOUNT_SELF_TEST')
+  assert.equal(contract.artifactKinds.COGNITIVE_SKILL.installation, 'DOWNLOAD_VERIFY_STORE_ACTIVE_READONLY')
+  assert.equal(contract.artifactKinds.COGNITIVE_SKILL.executionAuthority, false)
+  assert.deepEqual(contract.artifactKinds.COGNITIVE_SKILL.systemPermissions, [])
+  assert.equal(contract.sourceRepositoryBoundary.clientClonesRepository, false)
+  assert.equal(contract.sourceRepositoryBoundary.clientExecutesRepository, false)
+  assert.match(runtime, /entry\.artifact_kind == "PHYSICAL_MODULE"/)
+  assert.match(runtime, /install_skill_at/)
+})
+
+test('public five-domain home can open before a private marketplace account exists', () => {
+  assert.match(runtime, /Err\(error\) if error == "HOLOLAKE_AUTHENTICATED_ACCOUNT_REQUIRED" => Ok\(\(\)\)/)
+})
+
+test('marketplace lifecycle is reachable only through exact numbered operations', () => {
+  const aliases = registry.operations.filter((operation) => operation.module_number === 'HLP-NIPC-MOD-0033').map((operation) => operation.alias)
+  assert.deepEqual(aliases, [
+    'get_marketplace_snapshot',
+    'sync_marketplace_catalog',
+    'install_marketplace_item',
+    'uninstall_marketplace_item',
+    'rollback_marketplace_item',
+    'get_active_cognitive_skills',
+  ])
+  for (const alias of aliases.slice(0, 5)) assert.match(frontend, new RegExp(`['"]${alias}['"]`))
+  assert.match(frontend, /只有零点原核与企业发布双签同时通过/)
+})
+
+test('an installed physical marketplace module becomes a directly usable ordinary-channel application', () => {
+  assert.match(frontend, /installMarketplaceItem[\s\S]*await refreshCompositionModule\(\)/)
+  assert.match(frontend, /installMarketplaceItem[\s\S]*await refreshEducationModule\(\)/)
+  assert.match(frontend, /compositionModule\?\.installedState === 'ACTIVE'[\s\S]*title="原生组合视图"[\s\S]*已安装成品模块 · 直接使用/)
+  assert.match(frontend, /educationModule\?\.installedState === 'ACTIVE'[\s\S]*title="教育行业工作台"[\s\S]*已安装成品模块 · 直接使用/)
+})
+
+for (const file of [
+  'HLP-SKILL-OFFICIAL-DELIVERY-VERIFICATION-0001-0.1.0.ghskill',
+  'HLP-SKILL-OFFICIAL-MODULE-BOUNDARY-REVIEW-0001-0.1.0.ghskill',
+]) {
+  test(`${basename(file)} is a read-only skill with an exact canonical payload digest`, async () => {
+    const skill = JSON.parse(await readFile(join(root, 'marketplace/skills', file), 'utf8'))
+    const digest = createHash('sha256').update(JSON.stringify(canonical(skill.payload))).digest('hex')
+    assert.equal(skill.schema, 'hololake.cognitive-skill-package/v1')
+    assert.equal(skill.manifest.executionAuthority, false)
+    assert.equal(skill.manifest.skillReadonlyGuarantee, true)
+    assert.deepEqual(skill.manifest.permissions, [])
+    assert.equal(skill.manifest.contentDigest, digest)
+  })
+}