tersign 0.1.5 → 0.1.7

package/README.md

@@ -104,7 +104,9 @@ The agent skill `tersign-evidence` ships at [tersignhq/skills](https://github.co
 ## The Live Record
 
 - **Ledger + dashboard** — public verify page: https://tersign.ai/verify
-- **Census** — 1,500+ hash-chained observations across 1,000+ x402 seller endpoints, probed hourly and autonomously. Live counts: https://prober.tersign.ai/v1/prober/stats
+- **Census** — 2,500+ hash-chained observations across 1,100+ x402 seller endpoints, probed hourly and autonomously. Live counts: https://prober.tersign.ai/v1/prober/stats
+- **Conformance** — RFC 8785 (JCS) canonical serialization, keccak256 digests, byte-level cross-implementation vectors published in-repo. Reproduce the bytes and your implementation is conformant — in any language.
+- **Standards** — the `compliance-fields` extension (optional tax/audit records composing with offer-receipt) is proposed upstream: [x402-foundation/x402#2853](https://github.com/x402-foundation/x402/pull/2853)
 
 ## Machine Surfaces
 
@@ -120,6 +122,8 @@ Full URLs, readable without auth. If you are an agent, start here.
 | Ledger stats | `GET https://tersign.ai/v1/stats` |
 | Ledger signer | `GET https://tersign.ai/v1/ledger` |
 | llms.txt | https://raw.githubusercontent.com/tersignhq/tersign-js/main/llms.txt |
+| Conformance vectors (RFC 8785 + keccak256) | https://github.com/tersignhq/tersign-js/blob/main/test/fixtures/canonical-vectors.json |
+| Sample compliance record + digests | https://github.com/tersignhq/tersign-js/blob/main/test/fixtures/compliance-record.json |
 | Genesis verify | `npx tersign verify 0xe5874f1ffe87f0a6dd9eb157730f67b86ee4538b125fe30fcc4e165213dd3fc4 --ledger https://tersign.ai` |
 
 ---

package/dist/canonical.d.ts

@@ -1,4 +1,11 @@
-/** Deterministic JSON: recursively key-sorted, no whitespace. Arrays keep order.
- * undefined properties are dropped (matches JSON.stringify semantics). */
+/** Deterministic JSON — RFC 8785 (JCS) conformant for JSON-domain inputs: keys sorted by
+ * UTF-16 code units, no whitespace, JSON.stringify scalar/escape semantics. Arrays keep
+ * order; undefined properties are dropped (matches JSON.stringify semantics).
+ *
+ * The string is built directly, never via an object rebuild: JS engines hoist integer-like
+ * keys ("1","2","10") into numeric order on insertion, which silently defeats a
+ * sort-then-stringify round-trip (JCS orders them "1","10","2"). Byte-identical to the old
+ * serializer for every shape without integer-like or control-char keys — the genesis receipt
+ * digest and all pinned wire vectors are unchanged. */
 export declare function canonicalStringify(value: unknown): string;
 export declare function digestOf(value: unknown): `0x${string}`;

package/dist/canonical.js

@@ -1,22 +1,34 @@
 import { keccak256, toBytes } from 'viem';
-/** Deterministic JSON: recursively key-sorted, no whitespace. Arrays keep order.
- * undefined properties are dropped (matches JSON.stringify semantics). */
+/** Deterministic JSON — RFC 8785 (JCS) conformant for JSON-domain inputs: keys sorted by
+ * UTF-16 code units, no whitespace, JSON.stringify scalar/escape semantics. Arrays keep
+ * order; undefined properties are dropped (matches JSON.stringify semantics).
+ *
+ * The string is built directly, never via an object rebuild: JS engines hoist integer-like
+ * keys ("1","2","10") into numeric order on insertion, which silently defeats a
+ * sort-then-stringify round-trip (JCS orders them "1","10","2"). Byte-identical to the old
+ * serializer for every shape without integer-like or control-char keys — the genesis receipt
+ * digest and all pinned wire vectors are unchanged. */
 export function canonicalStringify(value) {
-    return JSON.stringify(sortValue(value));
+    return serialize(value);
 }
-function sortValue(value) {
-    if (Array.isArray(value))
-        return value.map(sortValue);
-    if (value !== null && typeof value === 'object') {
-        const out = {};
-        for (const key of Object.keys(value).sort()) {
-            const v = value[key];
-            if (v !== undefined)
-                out[key] = sortValue(v);
+function serialize(value) {
+    if (value === null)
+        return 'null';
+    if (Array.isArray(value)) {
+        return '[' + Array.from(value, (v) => serialize(v) ?? 'null').join(',') + ']';
+    }
+    if (typeof value === 'object') {
+        const obj = value;
+        const parts = [];
+        for (const key of Object.keys(obj).sort()) {
+            const s = serialize(obj[key]);
+            if (s !== undefined)
+                parts.push(JSON.stringify(key) + ':' + s);
         }
-        return out;
+        return '{' + parts.join(',') + '}';
     }
-    return value;
+    // string/number/boolean serialize per JCS; undefined/function/symbol yield undefined (dropped)
+    return JSON.stringify(value);
 }
 export function digestOf(value) {
     return keccak256(toBytes(canonicalStringify(value)));

package/dist/mcp/server.d.ts

@@ -8,6 +8,6 @@ export declare function envDeps(env?: Record<string, string | undefined>): McpDe
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
 export declare const MCP_SERVER_IDENTITY: {
     readonly name: "tersign";
-    readonly version: "0.1.5";
+    readonly version: "0.1.7";
 };
 export declare function buildServer(deps: McpDeps): McpServer;

package/dist/mcp/server.js

@@ -45,7 +45,7 @@ function json(value) {
 }
 /** MUST match package.json name/version — the MCP handshake self-reports this identity to
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
-export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.1.5' };
+export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.1.7' };
 export function buildServer(deps) {
     const server = new McpServer(MCP_SERVER_IDENTITY);
     server.registerTool('issue_receipt', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tersign",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "Tersign \u2014 the evidence layer for the agent economy. Counter-signed receipts, agent action records, idempotency enforcement, refunds, disputes, and jury-ready evidence envelopes for x402/agent-commerce sellers.",
   "license": "MIT",
   "type": "module",
@@ -49,14 +49,20 @@
   "keywords": [
     "x402",
     "agent-economy",
+    "agentic-commerce",
     "evidence",
     "receipts",
     "eip-712",
+    "rfc-8785",
+    "hash-chain",
     "compliance",
+    "eu-ai-act",
+    "audit-trail",
     "disputes",
+    "refunds",
+    "idempotency",
     "ai-agents",
-    "mcp",
-    "audit-trail"
+    "mcp"
   ],
   "mcpName": "io.github.tersignhq/evidence"
 }