tersign 0.1.7 → 0.1.9

package/README.md

@@ -135,3 +135,5 @@ Full URLs, readable without auth. If you are an agent, start here.
 <p align="center"><sub>MIT · built and published from <a href="https://github.com/tersignhq/tersign-js">tersignhq/tersign-js</a> via trusted-publishing CI, provenance attested · <code>tersign</code> reserved on PyPI</sub></p>
 
 <p align="center"><sub><b>Venues rotate. The transcript endures.</b></sub></p>
+
+- Evidence-record conformance suite (two-sided vectors: independence, completeness, existence, phase): https://github.com/tersignhq/evidence-record-conformance

package/dist/compliance/record.d.ts

@@ -1,7 +1,10 @@
 import type { Account } from 'viem/accounts';
 import type { Adjustment, ComplianceRecordV1, SignedComplianceRecord, SignedReceipt, VerifyLike } from './types.js';
+/** Canonical domain per the compliance-fields extension spec (x402-foundation/x402#2853).
+ * Migrated from the vendor domain 'tersign compliance-record' on 2026-07-14 while ZERO
+ * production compliance records existed — a free change then, a breaking wire change after. */
 export declare const COMPLIANCE_DOMAIN: {
-    readonly name: "tersign compliance-record";
+    readonly name: "compliance-fields";
     readonly version: "1";
     readonly chainId: 1n;
 };
@@ -20,6 +23,10 @@ export declare const COMPLIANCE_TYPES: {
         readonly type: "uint256";
     }];
 };
+/** Pinned digest of the compliance-attestation EIP-712 material (like DISPUTE_WIRE_VECTOR).
+ * No cross-impl twin yet — the ledger does not re-declare this domain — but the pin catches
+ * accidental drift; any change is a breaking protocol change (frozen wire format). */
+export declare const COMPLIANCE_WIRE_VECTOR: `0x${string}`;
 export interface IssuerConfig {
     name: string;
     jurisdiction: string;

package/dist/compliance/record.js

@@ -1,6 +1,9 @@
 import { recoverTypedDataAddress } from 'viem';
 import { digestOf } from '../canonical.js';
-export const COMPLIANCE_DOMAIN = { name: 'tersign compliance-record', version: '1', chainId: 1n };
+/** Canonical domain per the compliance-fields extension spec (x402-foundation/x402#2853).
+ * Migrated from the vendor domain 'tersign compliance-record' on 2026-07-14 while ZERO
+ * production compliance records existed — a free change then, a breaking wire change after. */
+export const COMPLIANCE_DOMAIN = { name: 'compliance-fields', version: '1', chainId: 1n };
 export const COMPLIANCE_TYPES = {
     ComplianceAttestation: [
         { name: 'version', type: 'uint256' },
@@ -9,6 +12,13 @@ export const COMPLIANCE_TYPES = {
         { name: 'issuedAt', type: 'uint256' },
     ],
 };
+/** Pinned digest of the compliance-attestation EIP-712 material (like DISPUTE_WIRE_VECTOR).
+ * No cross-impl twin yet — the ledger does not re-declare this domain — but the pin catches
+ * accidental drift; any change is a breaking protocol change (frozen wire format). */
+export const COMPLIANCE_WIRE_VECTOR = digestOf({
+    domain: { ...COMPLIANCE_DOMAIN, chainId: 1 },
+    types: COMPLIANCE_TYPES,
+});
 /** MINIMAL tier ≈ EU VAT Art 226b simplified-invoice content — legally sufficient for
  * sub-€100 supplies EU-wide, and the default for machine-to-machine micro-receipts. */
 export function buildMinimalRecord(issuer, input) {

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export * from './types.js';
 export { canonicalStringify, digestOf } from './canonical.js';
 export { RECEIPT_DOMAIN, RECEIPT_TYPES, OFFER_DOMAIN, OFFER_TYPES, signReceipt, signOffer, verifyReceipt, type VerifyResult, } from './receipt/eip712.js';
-export { COMPLIANCE_DOMAIN, COMPLIANCE_TYPES, buildMinimalRecord, recordDigest, signComplianceRecord, verifyComplianceRecord, type IssuerConfig, type MinimalRecordInput, } from './compliance/record.js';
+export { COMPLIANCE_DOMAIN, COMPLIANCE_TYPES, COMPLIANCE_WIRE_VECTOR, buildMinimalRecord, recordDigest, signComplianceRecord, verifyComplianceRecord, type IssuerConfig, type MinimalRecordInput, } from './compliance/record.js';
 export { MemoryIdempotencyStore, checkIdempotency, extractPaymentId, fingerprint, REPLAY_HEADER, type IdempotencyStore, type IdempotencyOutcome, type IdempotencyOptions, type CachedResponse, type FingerprintParts, } from './idempotency/middleware.js';
 export { D1IdempotencyStore, D1_IDEMPOTENCY_DDL, type D1Like } from './idempotency/d1.js';
 export type { DisputeReason, DisputeVerdict, DisputeStatus, DisputePayloadV1, CriterionV1, AcceptanceCriteriaV1, EvidenceArtifactRef, EvidencePayloadV1, DisputeAttestationPayload, EvidenceAttestationPayload, CriteriaAttestationPayload, SignedDispute, SignedEvidence, SignedCriteria, } from './dispute/types.js';

package/dist/index.js

@@ -1,7 +1,7 @@
 export * from './types.js';
 export { canonicalStringify, digestOf } from './canonical.js';
 export { RECEIPT_DOMAIN, RECEIPT_TYPES, OFFER_DOMAIN, OFFER_TYPES, signReceipt, signOffer, verifyReceipt, } from './receipt/eip712.js';
-export { COMPLIANCE_DOMAIN, COMPLIANCE_TYPES, buildMinimalRecord, recordDigest, signComplianceRecord, verifyComplianceRecord, } from './compliance/record.js';
+export { COMPLIANCE_DOMAIN, COMPLIANCE_TYPES, COMPLIANCE_WIRE_VECTOR, buildMinimalRecord, recordDigest, signComplianceRecord, verifyComplianceRecord, } from './compliance/record.js';
 export { MemoryIdempotencyStore, checkIdempotency, extractPaymentId, fingerprint, REPLAY_HEADER, } from './idempotency/middleware.js';
 export { D1IdempotencyStore, D1_IDEMPOTENCY_DDL } from './idempotency/d1.js';
 export { DISPUTE_DOMAIN, EVIDENCE_DOMAIN, CRITERIA_DOMAIN, DISPUTE_TYPES, EVIDENCE_TYPES, CRITERIA_TYPES, DISPUTE_WIRE_VECTOR, disputeDigest, evidenceDigest, criteriaDigest, signDispute, verifyDispute, signEvidence, verifyEvidence, signCriteria, verifyCriteria, } from './dispute/sign.js';

package/dist/mcp/server.d.ts

@@ -8,6 +8,6 @@ export declare function envDeps(env?: Record<string, string | undefined>): McpDe
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
 export declare const MCP_SERVER_IDENTITY: {
     readonly name: "tersign";
-    readonly version: "0.1.7";
+    readonly version: "0.1.9";
 };
 export declare function buildServer(deps: McpDeps): McpServer;

package/dist/mcp/server.js

@@ -45,7 +45,7 @@ function json(value) {
 }
 /** MUST match package.json name/version — the MCP handshake self-reports this identity to
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
-export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.1.7' };
+export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.1.9' };
 export function buildServer(deps) {
     const server = new McpServer(MCP_SERVER_IDENTITY);
     server.registerTool('issue_receipt', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tersign",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Tersign \u2014 the evidence layer for the agent economy. Counter-signed receipts, agent action records, idempotency enforcement, refunds, disputes, and jury-ready evidence envelopes for x402/agent-commerce sellers.",
   "license": "MIT",
   "type": "module",