@integraledger/lcp-placements 0.10.1 → 0.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +83 -0
- package/package.json +11 -11
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,88 @@
|
|
|
1
1
|
# @integraledger/lcp-placements
|
|
2
2
|
|
|
3
|
+
## 0.12.0
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- @integraledger/lcp-binding-core@0.12.0
|
|
8
|
+
- @integraledger/lcp-placement-a2a@0.12.0
|
|
9
|
+
- @integraledger/lcp-placement-ack@0.12.0
|
|
10
|
+
- @integraledger/lcp-placement-acp@0.12.0
|
|
11
|
+
- @integraledger/lcp-placement-ap2@0.12.0
|
|
12
|
+
- @integraledger/lcp-placement-mastercard-vi@0.12.0
|
|
13
|
+
- @integraledger/lcp-placement-mpp@0.12.0
|
|
14
|
+
- @integraledger/lcp-placement-ucp@0.12.0
|
|
15
|
+
- @integraledger/lcp-placement-visa-tap@0.12.0
|
|
16
|
+
- @integraledger/lcp-placement-x402@0.12.0
|
|
17
|
+
|
|
18
|
+
## 0.11.0
|
|
19
|
+
|
|
20
|
+
### Minor Changes
|
|
21
|
+
|
|
22
|
+
- 822190a: Give the terms URL the write path the published set never had, and certify the composition that broke
|
|
23
|
+
without it (integra-protocol#8).
|
|
24
|
+
|
|
25
|
+
A third party assembling a seller from published parts emitted a 402 the published buyer refuses: every
|
|
26
|
+
published reader demanded `legalContextUrl` and no published writer placed it, and the schema
|
|
27
|
+
`placement-x402` inlined onto the wire (`required: ["type","value"]`, closed) contradicted the authority
|
|
28
|
+
document integraledger.com serves (`required: ["type","value","legalContextUrl"]`, closed) — two
|
|
29
|
+
definitions of one `info`, no document valid against both, each package self-consistent. Three structural
|
|
30
|
+
gaps let it ship: the manifest's `termsUrlField` was singular and read-only (declared, hygiene-checked,
|
|
31
|
+
never written — and x402's wire carries the URL in two slots, so one path could not even name the shape),
|
|
32
|
+
nothing compared the inlined schema to the authority document, and the corpus certified `place` and
|
|
33
|
+
`extract` separately but never fed one to the other.
|
|
34
|
+
|
|
35
|
+
`binding-core` — the placement seam now moves an ADVERTISEMENT, not a bare reference. `place` takes
|
|
36
|
+
`{ ref, termsUrl? }` and writes the URL at every slot the manifest's new `termsUrlFields` (plural,
|
|
37
|
+
replacing `termsUrlField`) declares; it REFUSES an integrity-bearing advertisement with no URL where slots
|
|
38
|
+
are declared (a hash no counterparty can resolve is unverifiable by construction), a URL where no slot
|
|
39
|
+
exists (silent dropping is fail-open), and a non-https URL on either side of the seam. `extract` returns
|
|
40
|
+
`{ ref, termsUrl }` with absence as a typed value — `no-field-declared` is a fact about the protocol,
|
|
41
|
+
`declared-fields-empty` a fact about the document, and the gate decides what an absence means — while two
|
|
42
|
+
slots that disagree, or a malformed value in either, refuse. The object-path writer learned to descend
|
|
43
|
+
into an EXISTING array element (never minting one, never extending a list, refusing an index segment it
|
|
44
|
+
would have to create), which is what lets x402's `accepts[0].extra` mirrors land.
|
|
45
|
+
|
|
46
|
+
`placement-x402` — the inlined wire schema now IS the authority document minus `$id` and `$defs`
|
|
47
|
+
(Bazaar forbids both on the wire), drift-gated in `lcp-conformance` where the two packages meet.
|
|
48
|
+
`termsUrlFields` declares both slots the wire carries; the bare-hash alias is written (`extra` stopped
|
|
49
|
+
being wholly scheme-private when x402 §6.1 reserved names inside it, and LCP v1.38 §C.4's own Tier A
|
|
50
|
+
illustration carries the pair there); the `url` carrier admission is withdrawn (`carrierTypes` is
|
|
51
|
+
`sha256` alone — the schema on the wire is `const: "sha256"`, and no shipped reader ever accepted a url
|
|
52
|
+
in this slot). The `place` override shrinks to composition: the kit performs the whole placement and the
|
|
53
|
+
override adds only the `{info, schema}` wrapper.
|
|
54
|
+
|
|
55
|
+
`placement-mpp` / `placement-acp` — the singular member becomes the one-entry `termsUrlFields`; the kit
|
|
56
|
+
now writes the slot their buyer parsers always demanded and refuses first at the seller.
|
|
57
|
+
|
|
58
|
+
`lcp-conformance` — the corpus grows 812 → 844: a `roundtrip` op (place then extract in one case, the
|
|
59
|
+
composition certification whose absence let two separately-conformant halves ship jointly broken),
|
|
60
|
+
advertisement-rule refusals for every manifest, and the authority↔wire drift gate. Extract expectations
|
|
61
|
+
across every placement area become the extracted advertisement.
|
|
62
|
+
|
|
63
|
+
`lcp-verify` — `referencePlacementStep` reads the advertisement (`extracted.ref.value`) and deliberately
|
|
64
|
+
ignores `termsUrl`: where the terms live is the gate's fetch concern, not a fact the record can
|
|
65
|
+
contradict.
|
|
66
|
+
|
|
67
|
+
`lcp-discovery` — the x402 authority document restates the atrHash pattern inline in both definitions
|
|
68
|
+
(no `$defs` indirection the wire copy would have to rewrite) and moves the two-definitions rationale into
|
|
69
|
+
`$defs.receipt`, so the challenge-time root is byte-derivable for the wire.
|
|
70
|
+
|
|
71
|
+
### Patch Changes
|
|
72
|
+
|
|
73
|
+
- Updated dependencies [b2ffecc]
|
|
74
|
+
- Updated dependencies [822190a]
|
|
75
|
+
- @integraledger/lcp-binding-core@0.11.0
|
|
76
|
+
- @integraledger/lcp-placement-ucp@0.11.0
|
|
77
|
+
- @integraledger/lcp-placement-x402@0.11.0
|
|
78
|
+
- @integraledger/lcp-placement-mastercard-vi@0.11.0
|
|
79
|
+
- @integraledger/lcp-placement-mpp@0.11.0
|
|
80
|
+
- @integraledger/lcp-placement-acp@0.11.0
|
|
81
|
+
- @integraledger/lcp-placement-a2a@0.11.0
|
|
82
|
+
- @integraledger/lcp-placement-ack@0.11.0
|
|
83
|
+
- @integraledger/lcp-placement-ap2@0.11.0
|
|
84
|
+
- @integraledger/lcp-placement-visa-tap@0.11.0
|
|
85
|
+
|
|
3
86
|
## 0.10.1
|
|
4
87
|
|
|
5
88
|
**0.10.0 was staged and withdrawn before approval; this is that release, re-cut.** The conformance corpus
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@integraledger/lcp-placements",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.12.0",
|
|
4
4
|
"description": "The LCP placement registry — the one place a protocol is registered.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"lcp",
|
|
@@ -40,16 +40,16 @@
|
|
|
40
40
|
},
|
|
41
41
|
"homepage": "https://github.com/IntegraLedger/integra-protocol/tree/main/packages/placements#readme",
|
|
42
42
|
"dependencies": {
|
|
43
|
-
"@integraledger/lcp-binding-core": "0.
|
|
44
|
-
"@integraledger/lcp-placement-a2a": "0.
|
|
45
|
-
"@integraledger/lcp-placement-ack": "0.
|
|
46
|
-
"@integraledger/lcp-placement-acp": "0.
|
|
47
|
-
"@integraledger/lcp-placement-
|
|
48
|
-
"@integraledger/lcp-placement-
|
|
49
|
-
"@integraledger/lcp-placement-mpp": "0.
|
|
50
|
-
"@integraledger/lcp-placement-ucp": "0.
|
|
51
|
-
"@integraledger/lcp-placement-visa-tap": "0.
|
|
52
|
-
"@integraledger/lcp-placement-x402": "0.
|
|
43
|
+
"@integraledger/lcp-binding-core": "0.12.0",
|
|
44
|
+
"@integraledger/lcp-placement-a2a": "0.12.0",
|
|
45
|
+
"@integraledger/lcp-placement-ack": "0.12.0",
|
|
46
|
+
"@integraledger/lcp-placement-acp": "0.12.0",
|
|
47
|
+
"@integraledger/lcp-placement-ap2": "0.12.0",
|
|
48
|
+
"@integraledger/lcp-placement-mastercard-vi": "0.12.0",
|
|
49
|
+
"@integraledger/lcp-placement-mpp": "0.12.0",
|
|
50
|
+
"@integraledger/lcp-placement-ucp": "0.12.0",
|
|
51
|
+
"@integraledger/lcp-placement-visa-tap": "0.12.0",
|
|
52
|
+
"@integraledger/lcp-placement-x402": "0.12.0"
|
|
53
53
|
},
|
|
54
54
|
"devDependencies": {
|
|
55
55
|
"@types/node": "24.13.3",
|