tersign 0.4.6 → 0.4.8

package/README.md

@@ -127,8 +127,8 @@ when that stabilizes. It makes no conformance claim to that draft.
 | `TERSIGN_LEDGER_URL` | no | hosted ledger for counter-signing + chain checks |
 | `TERSIGN_LEDGER_API_KEY` | no | your seller API key on that ledger |
 | `TERSIGN_LEDGER_SELLER_ID` | no | your seller id on that ledger |
-| `TERSIGN_ISSUER_NAME` | no | issuer name stamped on compliance records |
-| `TERSIGN_ISSUER_JURISDICTION` | no | issuer jurisdiction stamped on compliance records |
+| `TERSIGN_ISSUER_NAME` | no | issuer name stamped on action records |
+| `TERSIGN_ISSUER_JURISDICTION` | no | issuer jurisdiction stamped on action records |
 
 Cold to counter-signed in one session: call `issue_receipt`, then check the issued receipt's digest with `npx tersign verify <digest> --ledger <url>`.
 
@@ -148,12 +148,13 @@ Full URLs, readable without auth. If you are an agent, start here.
 | Surface | Address |
 |---|---|
 | npm package | `tersign` — https://www.npmjs.com/package/tersign |
-| MCP registry | `io.github.tersignhq/evidence` |
+| MCP registry | `io.github.tersignhq/evidence` — `npx tersign` needs no configuration; the first call self-provisions a signer-keyed account |
 | ARD catalog (Agentic Resource Discovery) | https://tersign.ai/.well-known/ai-catalog.json |
 | Verify API | `GET https://tersign.ai/v1/receipts/{digest}/verify` |
 | Envelope API | `GET https://tersign.ai/v1/receipts/{digest}/envelope?venue={internet-court\|kleros\|uma\|generic}` |
 | Ledger stats | `GET https://tersign.ai/v1/stats` |
 | Ledger signer | `GET https://tersign.ai/v1/ledger` |
+| Bundle verifier, out-of-band | https://tersign.ai/verify/v1/ — `verify_bundle.py` · `keccak.py` · `secp256k1.py` · `SHA256SUMS`. A bundle ships its own checker; for evidence from an interested party fetch this copy and diff the two. |
 | llms.txt | https://raw.githubusercontent.com/tersignhq/tersign-js/main/llms.txt |
 | Conformance vectors (RFC 8785 + keccak256) | https://github.com/tersignhq/tersign-js/blob/main/test/fixtures/canonical-vectors.json |
 | Sample compliance record + digests | https://github.com/tersignhq/tersign-js/blob/main/test/fixtures/compliance-record.json |

package/dist/cli.js

@@ -3,13 +3,21 @@ const sub = process.argv[2];
 if (sub === undefined || sub === 'mcp') {
     if (sub === 'mcp')
         process.argv.splice(2, 1);
-    // Bare `npx tersign` with no config is almost always a curious human, not an MCP client —
-    // greet them with the wiring instructions instead of a stack trace.
-    if (!process.env.TERSIGN_SELLER_KEY) {
-        console.error('tersign: this command starts the MCP server, which needs TERSIGN_SELLER_KEY set.\n\n' +
-            'Wire it into your MCP client config:\n' +
-            '  { "mcpServers": { "tersign": { "command": "npx", "args": ["tersign"],\n' +
-            '      "env": { "TERSIGN_SELLER_KEY": "0x<your-seller-key>" } } } }\n\n' +
+    // Bare `npx tersign` at a prompt is almost always a curious human, not an MCP client — greet
+    // them rather than sitting mute on a stdio transport they are not speaking. The discriminator
+    // is the TTY, NOT the presence of a key: an MCP client, a directory's sandbox and a CI probe
+    // all arrive with stdin piped, and until 2026-08-29 every one of them hit a hard exit here.
+    // That made `npx tersign` fail on first run for anyone who had not already exported a key,
+    // left the server impossible to introspect or demonstrate anywhere, and contradicted
+    // record_disclosure's own published promise that the first call self-provisions. The key is
+    // no longer required — envDeps resolves through the shared keystore — so the greeting is now
+    // a courtesy for humans instead of a gate on everyone.
+    if (process.stdin.isTTY && !process.env.TERSIGN_SELLER_KEY) {
+        console.error('tersign: this starts the MCP server, which speaks JSON-RPC over stdin — nothing to see\n' +
+            'at a prompt. Wire it into your MCP client config:\n\n' +
+            '  { "mcpServers": { "tersign": { "command": "npx", "args": ["tersign"] } } }\n\n' +
+            'No key needed: the first call self-provisions a signer-keyed account (OS keychain,\n' +
+            'else ~/.tersign/signer.key). Set TERSIGN_SELLER_KEY to use your own.\n\n' +
             "Just exploring? Try:  tersign help   ·   tersign verify <receipt.json | 0xdigest> [--ledger url]");
         process.exit(1);
     }

package/dist/mcp/server.d.ts

@@ -8,6 +8,6 @@ export declare function envDeps(env?: Record<string, string | undefined>): McpDe
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
 export declare const MCP_SERVER_IDENTITY: {
     readonly name: "tersign";
-    readonly version: "0.4.6";
+    readonly version: "0.4.8";
 };
 export declare function buildServer(deps: McpDeps): McpServer;

package/dist/mcp/server.js

@@ -49,7 +49,7 @@ function json(value) {
 }
 /** MUST match package.json name/version — the MCP handshake self-reports this identity to
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
-export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.4.6' };
+export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.4.8' };
 export function buildServer(deps) {
     const server = new McpServer(MCP_SERVER_IDENTITY);
     server.registerTool('issue_receipt', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tersign",
-  "version": "0.4.6",
+  "version": "0.4.8",
   "description": "Tersign \u2014 the evidence layer for the agent economy. Counter-signed receipts, agent action records, idempotency enforcement, refunds, disputes, and jury-ready evidence envelopes for x402/agent-commerce sellers.",
   "license": "MIT",
   "type": "module",