tersign 0.1.4 → 0.1.6

package/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <a href="https://tersign-ledger.kevinn-zhang.workers.dev"><img src="https://raw.githubusercontent.com/tersignhq/.github/main/assets/banner.svg" alt="Tersign — the evidence layer for the agent economy" width="760"></a>
+  <a href="https://tersign.ai"><img src="https://raw.githubusercontent.com/tersignhq/.github/main/assets/banner.svg" alt="Tersign — the evidence layer for the agent economy" width="760"></a>
 </p>
 
 <p align="center">
@@ -20,7 +20,7 @@
 No account. No API key. This is the genesis receipt, `seq 1` on the production chain:
 
 ```sh
-npx tersign verify 0xe5874f1ffe87f0a6dd9eb157730f67b86ee4538b125fe30fcc4e165213dd3fc4 --ledger https://tersign-ledger.kevinn-zhang.workers.dev
+npx tersign verify 0xe5874f1ffe87f0a6dd9eb157730f67b86ee4538b125fe30fcc4e165213dd3fc4 --ledger https://tersign.ai
 ```
 
 ```text
@@ -30,7 +30,7 @@ ledger: counter-signed OK (seller tersign-first, seq 1 …) VALID
 `npx tersign verify <receipt.json | 0xdigest> [--ledger url]` recovers the EIP-712 signature **locally**, then checks the entry against the public chain — yours or anyone's. Prefer raw HTTP? The same proof, no CLI:
 
 ```sh
-curl https://tersign-ledger.kevinn-zhang.workers.dev/v1/receipts/0xe5874f1ffe87f0a6dd9eb157730f67b86ee4538b125fe30fcc4e165213dd3fc4/verify
+curl https://tersign.ai/v1/receipts/0xe5874f1ffe87f0a6dd9eb157730f67b86ee4538b125fe30fcc4e165213dd3fc4/verify
 ```
 
 ## Chain of Custody
@@ -103,8 +103,8 @@ The agent skill `tersign-evidence` ships at [tersignhq/skills](https://github.co
 
 ## The Live Record
 
-- **Ledger + dashboard** — public verify page: https://tersign-ledger.kevinn-zhang.workers.dev/verify
-- **Census** — 1,500+ hash-chained observations across 1,000+ x402 seller endpoints, probed hourly and autonomously. Live counts: https://tersign-prober.kevinn-zhang.workers.dev/v1/prober/stats
+- **Ledger + dashboard** — public verify page: https://tersign.ai/verify
+- **Census** — 1,500+ hash-chained observations across 1,000+ x402 seller endpoints, probed hourly and autonomously. Live counts: https://prober.tersign.ai/v1/prober/stats
 
 ## Machine Surfaces
 
@@ -114,13 +114,13 @@ Full URLs, readable without auth. If you are an agent, start here.
 |---|---|
 | npm package | `tersign` — https://www.npmjs.com/package/tersign |
 | MCP registry | `io.github.tersignhq/evidence` |
-| ARD catalog (Agentic Resource Discovery) | https://tersign-ledger.kevinn-zhang.workers.dev/.well-known/ai-catalog.json |
-| Verify API | `GET https://tersign-ledger.kevinn-zhang.workers.dev/v1/receipts/{digest}/verify` |
-| Envelope API | `GET https://tersign-ledger.kevinn-zhang.workers.dev/v1/receipts/{digest}/envelope?venue={internet-court\|kleros\|uma\|generic}` |
-| Ledger stats | `GET https://tersign-ledger.kevinn-zhang.workers.dev/v1/stats` |
-| Ledger signer | `GET https://tersign-ledger.kevinn-zhang.workers.dev/v1/ledger` |
+| ARD catalog (Agentic Resource Discovery) | https://tersign.ai/.well-known/ai-catalog.json |
+| Verify API | `GET https://tersign.ai/v1/receipts/{digest}/verify` |
+| Envelope API | `GET https://tersign.ai/v1/receipts/{digest}/envelope?venue={internet-court\|kleros\|uma\|generic}` |
+| Ledger stats | `GET https://tersign.ai/v1/stats` |
+| Ledger signer | `GET https://tersign.ai/v1/ledger` |
 | llms.txt | https://raw.githubusercontent.com/tersignhq/tersign-js/main/llms.txt |
-| Genesis verify | `npx tersign verify 0xe5874f1ffe87f0a6dd9eb157730f67b86ee4538b125fe30fcc4e165213dd3fc4 --ledger https://tersign-ledger.kevinn-zhang.workers.dev` |
+| Genesis verify | `npx tersign verify 0xe5874f1ffe87f0a6dd9eb157730f67b86ee4538b125fe30fcc4e165213dd3fc4 --ledger https://tersign.ai` |
 
 ---
 

package/dist/canonical.d.ts

@@ -1,4 +1,11 @@
-/** Deterministic JSON: recursively key-sorted, no whitespace. Arrays keep order.
- * undefined properties are dropped (matches JSON.stringify semantics). */
+/** Deterministic JSON — RFC 8785 (JCS) conformant for JSON-domain inputs: keys sorted by
+ * UTF-16 code units, no whitespace, JSON.stringify scalar/escape semantics. Arrays keep
+ * order; undefined properties are dropped (matches JSON.stringify semantics).
+ *
+ * The string is built directly, never via an object rebuild: JS engines hoist integer-like
+ * keys ("1","2","10") into numeric order on insertion, which silently defeats a
+ * sort-then-stringify round-trip (JCS orders them "1","10","2"). Byte-identical to the old
+ * serializer for every shape without integer-like or control-char keys — the genesis receipt
+ * digest and all pinned wire vectors are unchanged. */
 export declare function canonicalStringify(value: unknown): string;
 export declare function digestOf(value: unknown): `0x${string}`;

package/dist/canonical.js

@@ -1,22 +1,34 @@
 import { keccak256, toBytes } from 'viem';
-/** Deterministic JSON: recursively key-sorted, no whitespace. Arrays keep order.
- * undefined properties are dropped (matches JSON.stringify semantics). */
+/** Deterministic JSON — RFC 8785 (JCS) conformant for JSON-domain inputs: keys sorted by
+ * UTF-16 code units, no whitespace, JSON.stringify scalar/escape semantics. Arrays keep
+ * order; undefined properties are dropped (matches JSON.stringify semantics).
+ *
+ * The string is built directly, never via an object rebuild: JS engines hoist integer-like
+ * keys ("1","2","10") into numeric order on insertion, which silently defeats a
+ * sort-then-stringify round-trip (JCS orders them "1","10","2"). Byte-identical to the old
+ * serializer for every shape without integer-like or control-char keys — the genesis receipt
+ * digest and all pinned wire vectors are unchanged. */
 export function canonicalStringify(value) {
-    return JSON.stringify(sortValue(value));
+    return serialize(value);
 }
-function sortValue(value) {
-    if (Array.isArray(value))
-        return value.map(sortValue);
-    if (value !== null && typeof value === 'object') {
-        const out = {};
-        for (const key of Object.keys(value).sort()) {
-            const v = value[key];
-            if (v !== undefined)
-                out[key] = sortValue(v);
+function serialize(value) {
+    if (value === null)
+        return 'null';
+    if (Array.isArray(value)) {
+        return '[' + Array.from(value, (v) => serialize(v) ?? 'null').join(',') + ']';
+    }
+    if (typeof value === 'object') {
+        const obj = value;
+        const parts = [];
+        for (const key of Object.keys(obj).sort()) {
+            const s = serialize(obj[key]);
+            if (s !== undefined)
+                parts.push(JSON.stringify(key) + ':' + s);
         }
-        return out;
+        return '{' + parts.join(',') + '}';
     }
-    return value;
+    // string/number/boolean serialize per JCS; undefined/function/symbol yield undefined (dropped)
+    return JSON.stringify(value);
 }
 export function digestOf(value) {
     return keccak256(toBytes(canonicalStringify(value)));

package/dist/mcp/server.d.ts

@@ -8,6 +8,6 @@ export declare function envDeps(env?: Record<string, string | undefined>): McpDe
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
 export declare const MCP_SERVER_IDENTITY: {
     readonly name: "tersign";
-    readonly version: "0.1.4";
+    readonly version: "0.1.6";
 };
 export declare function buildServer(deps: McpDeps): McpServer;

package/dist/mcp/server.js

@@ -45,7 +45,7 @@ function json(value) {
 }
 /** MUST match package.json name/version — the MCP handshake self-reports this identity to
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
-export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.1.4' };
+export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.1.6' };
 export function buildServer(deps) {
     const server = new McpServer(MCP_SERVER_IDENTITY);
     server.registerTool('issue_receipt', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tersign",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Tersign \u2014 the evidence layer for the agent economy. Counter-signed receipts, agent action records, idempotency enforcement, refunds, disputes, and jury-ready evidence envelopes for x402/agent-commerce sellers.",
   "license": "MIT",
   "type": "module",
@@ -45,7 +45,7 @@
     "type": "git",
     "url": "git+https://github.com/tersignhq/tersign-js.git"
   },
-  "homepage": "https://tersign-ledger.kevinn-zhang.workers.dev",
+  "homepage": "https://tersign.ai",
   "keywords": [
     "x402",
     "agent-economy",