insumer-verify 1.3.6 → 1.3.8

package/README.md

@@ -4,7 +4,7 @@ Client-side verifier for [InsumerAPI](https://insumermodel.com/developers/) atte
 
 **In production:** [DJD Agent Score](https://github.com/jacobsd32-cpu/djdagentscore) (Coinbase x402 ecosystem) uses insumer-verify for client-side cryptographic verification in their AI agent wallet trust scoring pipeline. [Case study](https://insumermodel.com/blog/djd-agent-score-insumer-api-integration.html).
 
-Part of the InsumerAPI ecosystem: [REST API](https://insumermodel.com/developers/) (25 endpoints, 32 chains) | [MCP server](https://www.npmjs.com/package/mcp-server-insumer) (npm) | [LangChain](https://pypi.org/project/langchain-insumer/) (PyPI) | [ElizaOS](https://www.npmjs.com/package/eliza-plugin-insumer) (npm) | [OpenAI GPT](https://chatgpt.com/g/g-699c5e43ce2481918b3f1e7f144c8a49-insumerapi-verify) (GPT Store)
+Part of the InsumerAPI ecosystem: [REST API](https://insumermodel.com/developers/) (26 endpoints, 32 chains) | [MCP server](https://www.npmjs.com/package/mcp-server-insumer) (npm) | [LangChain](https://pypi.org/project/langchain-insumer/) (PyPI) | [ElizaOS](https://www.npmjs.com/package/eliza-plugin-insumer) (10 actions, npm) | [OpenAI GPT](https://chatgpt.com/g/g-699c5e43ce2481918b3f1e7f144c8a49-insumerapi-verify) (GPT Store)
 
 ## Install
 
@@ -155,7 +155,7 @@ Because XRPL results have no `blockTimestamp`, the freshness check (`maxAge`) sk
 
 ### Handling `rpc_failure` errors
 
-If the API cannot reach one or more data sources (RPC nodes, Helius, XRPL, Covalent) after retries, it returns `ok: false` with error code `rpc_failure` instead of issuing an attestation. **No signature, no JWT, no credits charged.** This is a retryable error — retry the same request after a short delay (2-5 seconds).
+If the API cannot reach one or more upstream data sources after retries, it returns `ok: false` with error code `rpc_failure` instead of issuing an attestation. **No signature, no JWT, no credits charged.** This is a retryable error — retry the same request after a short delay (2-5 seconds).
 
 ```json
 {
@@ -164,7 +164,7 @@ If the API cannot reach one or more data sources (RPC nodes, Helius, XRPL, Coval
     "code": "rpc_failure",
     "message": "Unable to verify all conditions — data source unavailable after retries",
     "failedConditions": [
-      { "source": "rpcBalanceOf", "chainId": "43114", "message": "Timeout" }
+      { "chainId": "43114", "message": "Timeout" }
     ]
   },
   "meta": { "version": "1.0", "timestamp": "..." }
@@ -211,7 +211,7 @@ const result = await verifyAttestation(apiResponse, { maxAge: 120 });
 // Fails if any blockTimestamp is older than 120 seconds
 ```
 
-Results without `blockTimestamp` (Covalent, Solana, and XRPL chains) are skipped, not treated as failures. XRPL results use `ledgerIndex` and `ledgerHash` instead.
+Results without `blockTimestamp` (certain EVM chains, Solana, and XRPL) are skipped, not treated as failures. XRPL results use `ledgerIndex` and `ledgerHash` instead.
 
 ### JWKS key discovery
 

package/build/index.js

@@ -252,7 +252,7 @@ function checkFreshness(results, maxAge) {
     for (let i = 0; i < results.length; i++) {
         const r = results[i];
         if (!r.blockTimestamp)
-            continue; // Covalent/Solana/XRPL results lack blockTimestamp
+            continue; // some chains lack blockTimestamp
         const age = now - new Date(r.blockTimestamp).getTime();
         if (age > maxAgeMs) {
             return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "insumer-verify",
-  "version": "1.3.6",
+  "version": "1.3.8",
   "description": "Client-side verifier for InsumerAPI attestations. ECDSA P-256 signatures, condition hashes, block freshness, expiry. Zero dependencies. Used by DJD Agent Score (Coinbase x402).",
   "type": "module",
   "main": "build/index.js",