tersign 0.6.1 → 0.6.2

package/dist/mcp/server.d.ts

@@ -8,6 +8,6 @@ export declare function envDeps(env?: Record<string, string | undefined>): McpDe
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
 export declare const MCP_SERVER_IDENTITY: {
     readonly name: "tersign";
-    readonly version: "0.6.1";
+    readonly version: "0.6.2";
 };
 export declare function buildServer(deps: McpDeps): McpServer;

package/dist/mcp/server.js

@@ -53,7 +53,7 @@ function json(value) {
 }
 /** MUST match package.json name/version — the MCP handshake self-reports this identity to
  * every client; mcp.test.ts pins it against package.json so a release bump can't drift it. */
-export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.6.1' };
+export const MCP_SERVER_IDENTITY = { name: 'tersign', version: '0.6.2' };
 export function buildServer(deps) {
     const server = new McpServer(MCP_SERVER_IDENTITY);
     server.registerTool('issue_receipt', {

package/dist/receipt/binding.d.ts

@@ -51,7 +51,7 @@ export declare function bindSigner(signer: `0x${string}`, expected: string | und
  *
  * Scope: verifyReceipt, verifyComplianceRecord and the CLI and MCP tools built on them. The
  * action-record, dispute and evidence verifiers (evidence/action.ts, dispute/sign.ts) do NOT call
- * this and still accept what viem accepts (PUNT-REGISTER R8). Neither does the ledger's ingest
+ * this and still accept what viem accepts. Neither does the ledger's ingest
  * (SECURITY-AUDIT A8), so a receipt the ledger counter-signed with a non-canonical signature is
  * refused here. The reasons are package text only: nothing from the file is echoed. */
 export declare function signatureError(sig: unknown): string | undefined;

package/dist/receipt/binding.js

@@ -2,7 +2,7 @@
  * verifyComplianceRecord, the `tersign verify` CLI and the MCP verify tools, so those four
  * surfaces cannot drift apart on the one question a verify result is read for. verifyActionRecord,
  * verifyDispute and verifyEvidence do NOT use it: they have no signer binding and no canonical
- * signature check (PUNT-REGISTER R8).
+ * signature check.
  *
  * ECDSA recovery yields an address for ANY payload and ANY well-formed signature. An edited
  * receipt therefore still "verifies" — it recovers a different address. A recovered signer is
@@ -67,7 +67,7 @@ const SECP256K1_N = 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0
  *
  * Scope: verifyReceipt, verifyComplianceRecord and the CLI and MCP tools built on them. The
  * action-record, dispute and evidence verifiers (evidence/action.ts, dispute/sign.ts) do NOT call
- * this and still accept what viem accepts (PUNT-REGISTER R8). Neither does the ledger's ingest
+ * this and still accept what viem accepts. Neither does the ledger's ingest
  * (SECURITY-AUDIT A8), so a receipt the ledger counter-signed with a non-canonical signature is
  * refused here. The reasons are package text only: nothing from the file is echoed. */
 export function signatureError(sig) {

package/dist/receipt/eip712.js

@@ -118,6 +118,17 @@ function signedFieldError(p) {
     }
     return undefined;
 }
+/** x402 offer-and-receipt §5.5 step 2: payload.version selects the EIP-712 types, and "currently
+ * only version 1 is defined". Without this a version-2 payload recovered under the version-1
+ * types and verified valid. Runs after signedFieldError, so version is already a JSON integer
+ * (a string "1" is refused there with its own reason); the comparison is strict anyway, so it
+ * does not lean on that order. The Python twin raises the same text. */
+function receiptVersionError(p) {
+    const v = p.version;
+    if (v === 1 || v === 1n)
+        return undefined;
+    return `payload.version ${String(v)} is not supported: version 1 is the only receipt version the x402 offer-and-receipt extension defines`;
+}
 /** Verify an EIP-712 receipt. `expectedSigner` implements the spec's payTo-key authorization
  * model; pass the seller's payTo address (or a registry-resolved key), obtained out-of-band,
  * to enforce it. Without it the recovered signer is UNAUTHENTICATED (signerBound:false). */
@@ -136,6 +147,9 @@ export async function verifyReceipt(artifact, expectedSigner) {
     const badField = signedFieldError(artifact.payload);
     if (badField)
         return { valid: false, signerBound: false, reason: badField };
+    const badVersion = receiptVersionError(artifact.payload);
+    if (badVersion)
+        return { valid: false, signerBound: false, reason: badVersion };
     const badSig = signatureError(artifact.signature);
     if (badSig)
         return { valid: false, signerBound: false, reason: badSig };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tersign",
-  "version": "0.6.1",
+  "version": "0.6.2",
   "description": "Tersign \u2014 the evidence layer for the agent economy. Counter-signed receipts, agent action records, idempotency enforcement, refunds, disputes, and jury-ready evidence envelopes for x402/agent-commerce sellers.",
   "license": "Apache-2.0",
   "type": "module",