insumer-verify 1.3.7 → 1.3.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -155,7 +155,7 @@ Because XRPL results have no `blockTimestamp`, the freshness check (`maxAge`) sk
155
155
 
156
156
  ### Handling `rpc_failure` errors
157
157
 
158
- If the API cannot reach one or more data sources (RPC nodes, Helius, XRPL, Covalent) after retries, it returns `ok: false` with error code `rpc_failure` instead of issuing an attestation. **No signature, no JWT, no credits charged.** This is a retryable error — retry the same request after a short delay (2-5 seconds).
158
+ If the API cannot reach one or more upstream data sources after retries, it returns `ok: false` with error code `rpc_failure` instead of issuing an attestation. **No signature, no JWT, no credits charged.** This is a retryable error — retry the same request after a short delay (2-5 seconds).
159
159
 
160
160
  ```json
161
161
  {
@@ -164,7 +164,7 @@ If the API cannot reach one or more data sources (RPC nodes, Helius, XRPL, Coval
164
164
  "code": "rpc_failure",
165
165
  "message": "Unable to verify all conditions — data source unavailable after retries",
166
166
  "failedConditions": [
167
- { "source": "rpcBalanceOf", "chainId": "43114", "message": "Timeout" }
167
+ { "chainId": "43114", "message": "Timeout" }
168
168
  ]
169
169
  },
170
170
  "meta": { "version": "1.0", "timestamp": "..." }
@@ -211,7 +211,7 @@ const result = await verifyAttestation(apiResponse, { maxAge: 120 });
211
211
  // Fails if any blockTimestamp is older than 120 seconds
212
212
  ```
213
213
 
214
- Results without `blockTimestamp` (Covalent, Solana, and XRPL chains) are skipped, not treated as failures. XRPL results use `ledgerIndex` and `ledgerHash` instead.
214
+ Results without `blockTimestamp` (certain EVM chains, Solana, and XRPL) are skipped, not treated as failures. XRPL results use `ledgerIndex` and `ledgerHash` instead.
215
215
 
216
216
  ### JWKS key discovery
217
217
 
package/build/index.js CHANGED
@@ -252,7 +252,7 @@ function checkFreshness(results, maxAge) {
252
252
  for (let i = 0; i < results.length; i++) {
253
253
  const r = results[i];
254
254
  if (!r.blockTimestamp)
255
- continue; // Covalent/Solana/XRPL results lack blockTimestamp
255
+ continue; // some chains lack blockTimestamp
256
256
  const age = now - new Date(r.blockTimestamp).getTime();
257
257
  if (age > maxAgeMs) {
258
258
  return {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "insumer-verify",
3
- "version": "1.3.7",
3
+ "version": "1.3.8",
4
4
  "description": "Client-side verifier for InsumerAPI attestations. ECDSA P-256 signatures, condition hashes, block freshness, expiry. Zero dependencies. Used by DJD Agent Score (Coinbase x402).",
5
5
  "type": "module",
6
6
  "main": "build/index.js",