tersign 0.1.6 → 0.1.8

package/README.md

@@ -104,7 +104,9 @@ The agent skill `tersign-evidence` ships at [tersignhq/skills](https://github.co
 ## The Live Record
 
 - **Ledger + dashboard** — public verify page: https://tersign.ai/verify
-- **Census** — 1,500+ hash-chained observations across 1,000+ x402 seller endpoints, probed hourly and autonomously. Live counts: https://prober.tersign.ai/v1/prober/stats
+- **Census** — 2,500+ hash-chained observations across 1,100+ x402 seller endpoints, probed hourly and autonomously. Live counts: https://prober.tersign.ai/v1/prober/stats
+- **Conformance** — RFC 8785 (JCS) canonical serialization, keccak256 digests, byte-level cross-implementation vectors published in-repo. Reproduce the bytes and your implementation is conformant — in any language.
+- **Standards** — the `compliance-fields` extension (optional tax/audit records composing with offer-receipt) is proposed upstream: [x402-foundation/x402#2853](https://github.com/x402-foundation/x402/pull/2853)
 
 ## Machine Surfaces
 
@@ -120,6 +122,8 @@ Full URLs, readable without auth. If you are an agent, start here.
 | Ledger stats | `GET https://tersign.ai/v1/stats` |
 | Ledger signer | `GET https://tersign.ai/v1/ledger` |
 | llms.txt | https://raw.githubusercontent.com/tersignhq/tersign-js/main/llms.txt |
+| Conformance vectors (RFC 8785 + keccak256) | https://github.com/tersignhq/tersign-js/blob/main/test/fixtures/canonical-vectors.json |
+| Sample compliance record + digests | https://github.com/tersignhq/tersign-js/blob/main/test/fixtures/compliance-record.json |
 | Genesis verify | `npx tersign verify 0xe5874f1ffe87f0a6dd9eb157730f67b86ee4538b125fe30fcc4e165213dd3fc4 --ledger https://tersign.ai` |
 
 ---

package/dist/compliance/record.d.ts

@@ -1,7 +1,10 @@
 import type { Account } from 'viem/accounts';
 import type { Adjustment, ComplianceRecordV1, SignedComplianceRecord, SignedReceipt, VerifyLike } from './types.js';
+/** Canonical domain per the compliance-fields extension spec (x402-foundation/x402#2853).
+ * Migrated from the vendor domain 'tersign compliance-record' on 2026-07-14 while ZERO
+ * production compliance records existed — a free change then, a breaking wire change after. */
 export declare const COMPLIANCE_DOMAIN: {
-    readonly name: "tersign compliance-record";
+    readonly name: "compliance-fields";
     readonly version: "1";
     readonly chainId: 1n;
 };
@@ -20,6 +23,10 @@ export declare const COMPLIANCE_TYPES: {
         readonly type: "uint256";
     }];
 };
+/** Pinned digest of the compliance-attestation EIP-712 material (like DISPUTE_WIRE_VECTOR).
+ * No cross-impl twin yet — the ledger does not re-declare this domain — but the pin catches
+ * accidental drift; any change is a breaking protocol change (frozen wire format). */
+export declare const COMPLIANCE_WIRE_VECTOR: `0x${string}`;
 export interface IssuerConfig {
     name: string;
     jurisdiction: string;

package/dist/compliance/record.js

@@ -1,6 +1,9 @@
 import { recoverTypedDataAddress } from 'viem';
 import { digestOf } from '../canonical.js';
-export const COMPLIANCE_DOMAIN = { name: 'tersign compliance-record', version: '1', chainId: 1n };
+/** Canonical domain per the compliance-fields extension spec (x402-foundation/x402#2853).
+ * Migrated from the vendor domain 'tersign compliance-record' on 2026-07-14 while ZERO
+ * production compliance records existed — a free change then, a breaking wire change after. */
+export const COMPLIANCE_DOMAIN = { name: 'compliance-fields', version: '1', chainId: 1n };
 export const COMPLIANCE_TYPES = {
     ComplianceAttestation: [
         { name: 'version', type: 'uint256' },
@@ -9,6 +12,13 @@ export const COMPLIANCE_TYPES = {
         { name: 'issuedAt', type: 'uint256' },
     ],
 };
+/** Pinned digest of the compliance-attestation EIP-712 material (like DISPUTE_WIRE_VECTOR).
+ * No cross-impl twin yet — the ledger does not re-declare this domain — but the pin catches
+ * accidental drift; any change is a breaking protocol change (frozen wire format). */
+export const COMPLIANCE_WIRE_VECTOR = digestOf({
+    domain: { ...COMPLIANCE_DOMAIN, chainId: 1 },
+    types: COMPLIANCE_TYPES,
+});
 /** MINIMAL tier ≈ EU VAT Art 226b simplified-invoice content — legally sufficient for
  * sub-€100 supplies EU-wide, and the default for machine-to-machine micro-receipts. */
 export function buildMinimalRecord(issuer, input) {

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export * from './types.js';
 export { canonicalStringify, digestOf } from './canonical.js';
 export { RECEIPT_DOMAIN, RECEIPT_TYPES, OFFER_DOMAIN, OFFER_TYPES, signReceipt, signOffer, verifyReceipt, type VerifyResult, } from './receipt/eip712.js';
-export { COMPLIANCE_DOMAIN, COMPLIANCE_TYPES, buildMinimalRecord, recordDigest, signComplianceRecord, verifyComplianceRecord, type IssuerConfig, type MinimalRecordInput, } from './compliance/record.js';
+export { COMPLIANCE_DOMAIN, COMPLIANCE_TYPES, COMPLIANCE_WIRE_VECTOR, buildMinimalRecord, recordDigest, signComplianceRecord, verifyComplianceRecord, type IssuerConfig, type MinimalRecordInput, } from './compliance/record.js';
 export { MemoryIdempotencyStore, checkIdempotency, extractPaymentId, fingerprint, REPLAY_HEADER, type IdempotencyStore, type IdempotencyOutcome, type IdempotencyOptions, type CachedResponse, type FingerprintParts, } from './idempotency/middleware.js';
 export { D1IdempotencyStore, D1_IDEMPOTENCY_DDL, type D1Like } from './idempotency/d1.js';
 export type { DisputeReason, DisputeVerdict, DisputeStatus, DisputePayloadV1, CriterionV1, AcceptanceCriteriaV1, EvidenceArtifactRef, EvidencePayloadV1, DisputeAttestationPayload, EvidenceAttestationPayload, CriteriaAttestationPayload, SignedDispute, SignedEvidence, SignedCriteria, } from './dispute/types.js';

package/dist/index.js

@@ -1,7 +1,7 @@
 export * from './types.js';
 export { canonicalStringify, digestOf } from './canonical.js';
 export { RECEIPT_DOMAIN, RECEIPT_TYPES, OFFER_DOMAIN, OFFER_TYPES, signReceipt, signOffer, verifyReceipt, } from './receipt/eip712.js';
-export { COMPLIANCE_DOMAIN, COMPLIANCE_TYPES, buildMinimalRecord, recordDigest, signComplianceRecord, verifyComplianceRecord, } from './compliance/record.js';
+export { COMPLIANCE_DOMAIN, COMPLIANCE_TYPES, COMPLIANCE_WIRE_VECTOR, buildMinimalRecord, recordDigest, signComplianceRecord, verifyComplianceRecord, } from './compliance/record.js';
 export { MemoryIdempotencyStore, checkIdempotency, extractPaymentId, fingerprint, REPLAY_HEADER, } from './idempotency/middleware.js';
 export { D1IdempotencyStore, D1_IDEMPOTENCY_DDL } from './idempotency/d1.js';
 export { DISPUTE_DOMAIN, EVIDENCE_DOMAIN, CRITERIA_DOMAIN, DISPUTE_TYPES, EVIDENCE_TYPES, CRITERIA_TYPES, DISPUTE_WIRE_VECTOR, disputeDigest, evidenceDigest, criteriaDigest, signDispute, verifyDispute, signEvidence, verifyEvidence, signCriteria, verifyCriteria, } from './dispute/sign.js';

package/dist/mcp/server.d.ts

@@ -8,6 +8,6 @@ export declare function envDeps(env?: Record<string, string | undefined>): McpDe
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
 export declare const MCP_SERVER_IDENTITY: {
     readonly name: "tersign";
-    readonly version: "0.1.6";
+    readonly version: "0.1.8";
 };
 export declare function buildServer(deps: McpDeps): McpServer;

package/dist/mcp/server.js

@@ -45,7 +45,7 @@ function json(value) {
 }
 /** MUST match package.json name/version — the MCP handshake self-reports this identity to
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
-export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.1.6' };
+export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.1.8' };
 export function buildServer(deps) {
     const server = new McpServer(MCP_SERVER_IDENTITY);
     server.registerTool('issue_receipt', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tersign",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Tersign \u2014 the evidence layer for the agent economy. Counter-signed receipts, agent action records, idempotency enforcement, refunds, disputes, and jury-ready evidence envelopes for x402/agent-commerce sellers.",
   "license": "MIT",
   "type": "module",
@@ -49,14 +49,20 @@
   "keywords": [
     "x402",
     "agent-economy",
+    "agentic-commerce",
     "evidence",
     "receipts",
     "eip-712",
+    "rfc-8785",
+    "hash-chain",
     "compliance",
+    "eu-ai-act",
+    "audit-trail",
     "disputes",
+    "refunds",
+    "idempotency",
     "ai-agents",
-    "mcp",
-    "audit-trail"
+    "mcp"
   ],
   "mcpName": "io.github.tersignhq/evidence"
 }