@charter-agreement-protocol/signer 0.2.0 → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -3,6 +3,18 @@
3
3
  All notable public changes to `@charter-agreement-protocol/signer` are
4
4
  documented here.
5
5
 
6
+ ## [0.2.1] — 2026-09-24
7
+
8
+ Dependency-line release: this package now tracks the published verify
9
+ line - `@charter-agreement-protocol/verifier` `^0.5.0` (resolved 0.5.0).
10
+ No API change: verifier 0.5.0 added consumer-side surface only (the
11
+ capability probe, the signature registry identity, the descriptor
12
+ timestamp floor, the 104-case corpus); the producer surface this package
13
+ delegates to is unchanged. Typecheck strict, 18/18 tests against the
14
+ resolved 0.5.0. The producer-side capability alignment (mirrored
15
+ `capabilities()` with refuse-before-mint, declared minting metadata,
16
+ profile-bound signing) is the next feature release on this line.
17
+
6
18
  ## [0.2.0] — 2026-09-17
7
19
 
8
20
  ### Changed
package/README.md CHANGED
@@ -126,6 +126,15 @@ against the published version immediately after.
126
126
  [@charter-agreement-protocol/verifier](https://www.npmjs.com/package/@charter-agreement-protocol/verifier)
127
127
  package — the certified dual-implementation-verified verifier.
128
128
 
129
+ ## The verify side
130
+
131
+ This package tracks the published verify line: it depends on
132
+ `@charter-agreement-protocol/verifier` `^0.5.0`. Verifier 0.5.0 added
133
+ consumer-side surface only; the producer surface this package uses is
134
+ unchanged. The producer-side capability alignment (mirrored
135
+ `capabilities()` with refuse-before-mint, declared minting metadata,
136
+ profile-bound signing) is the next feature release on this line.
137
+
129
138
  ## SemVer
130
139
 
131
140
  Package SemVer decoupled from the protocol's `protocol_revision`. While the
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@charter-agreement-protocol/signer",
3
- "version": "0.2.0",
3
+ "version": "0.2.1",
4
4
  "description": "Holder-side companion signer for the Charter Agreement Protocol (CAP) in TypeScript - key custody only: an atomic key snapshot, the sign callback, the wrong-key guard, and post-sign verification, with framing, the claims gate, the R1-R3 honest-signer refusals, and assembly all delegated to the @charter-agreement-protocol/verifier producer surface. CAP verifies; it never authorizes; this signer signs, it never verifies third-party artifacts or takes custody.",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",
@@ -27,13 +27,19 @@
27
27
  "build": "tsc -p tsconfig.build.json",
28
28
  "typecheck": "tsc --noEmit",
29
29
  "test": "node --test --experimental-strip-types --no-warnings signer.test.ts",
30
- "prepack": "npm run build"
30
+ "prepack": "npm run build",
31
+ "typecheck:web": "tsc -p tsconfig.web.json",
32
+ "build:site": "node web/build.mjs && esbuild web/main.ts --bundle --minify --format=iife --target=es2022 --outfile=site-dist/app.js --alias:node:crypto=./web/shim/node-crypto.ts --alias:node:fs=./web/shim/node-fs.ts --alias:node:path=./web/shim/node-path.ts --inject:./web/shim/buffer-global.ts"
31
33
  },
32
34
  "dependencies": {
33
- "@charter-agreement-protocol/verifier": "^0.4.0"
35
+ "@charter-agreement-protocol/verifier": "^0.5.0"
34
36
  },
35
37
  "devDependencies": {
38
+ "@noble/ed25519": "^3.2.0",
39
+ "@noble/hashes": "^2.4.0",
36
40
  "@types/node": "^26.5.1",
41
+ "buffer": "^6.0.3",
42
+ "esbuild": "^0.28.2",
37
43
  "typescript": "~5.9.0"
38
44
  },
39
45
  "repository": {