release: v0.12.3

A2A v1 compatibility helpers, MCP Registry publication, evaluator
quickstarts, and public-surface cleanup.

Bump all workspace packages to 0.12.3. Update conformance fixture
versions, test assertions, and release metadata.

Author: jithinraj

CHANGELOG.md

@@ -7,7 +7,45 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-## [0.12.2] - 2026-03-16
+## [0.12.3] - 2026-03-17
+
+### A2A v1 Compatibility and Evaluator Onboarding
+
+Adds A2A v1.0.0 dual-version transition support, canonical evaluator quickstarts,
+completed integration kits, MCP Registry publication, and public documentation
+aligned with the current release state.
+
+### Added
+
+- **A2A v1.0.0 transition normalizer** (#537): `normalizeAgentCard()` accepts both v0.3.0 (top-level `url`) and v1.0.0 (`supportedInterfaces[]`); `normalizeTaskState()` maps v0.3.0 kebab-case to v1.0.0 prefixed form; `isV1AgentCard()` shape detector; `selectBestInterface()` picks highest protocolVersion. v0.3.0 inputs emit DeprecationWarning; removal not before v0.13.0.
+- **A2A v1.0.0 enum constants** (#537): `A2A_V1_TASK_STATE`, `A2A_V1_MESSAGE_ROLE`, `TASK_STATE_V03_TO_V1` reference maps
+- **A2A v1.0.0 Agent Card types** (#537): `A2ASupportedInterface`, updated `A2AAgentCard` with optional `url` (deprecated) and `supportedInterfaces[]`
+- **AIPREF version constants** (#537): `AIPREF_VOCAB_VERSION` (`draft-ietf-aipref-vocab-05`), `AIPREF_ATTACH_VERSION` (`draft-ietf-aipref-attach-04`)
+- **Canonical Start Here page** (#536): 4 primary evaluator paths (API, MCP, verify, A2A) plus x402 and compliance paths
+- **API Provider quickstart** (#536): 5-minute Express middleware path from install to verified receipt
+- **Agent Operator quickstart** (#536): 5-minute verify-receipt path with extraction source table
+- **A2A integration kit** (#536): 3 use cases (gateway pattern, consumer extraction, agent card declaration), configuration, troubleshooting
+- **MCP integration kit** (#536): 3 use cases (standalone server, attach to tool responses, extract from responses), configuration, troubleshooting
+- **Common use cases in README** (#536): outcome-first framing (commerce, audit, MCP, A2A)
+- **MCP Registry publication** (#535): `io.github.peacprotocol/peac` published via `mcp-publisher`
+
+### Changed
+
+- Public docs reconciled to v0.12.2 current state (#534): ROADMAP, ARCHITECTURE, INTEROP version headers updated; quickstart rewritten with current Wire 0.2 APIs; integration kit scaffolds replaced with honest status
+- Distribution status corrected (#534, #535): false "MCP Registry: published" claim fixed; SUBMISSIONS.md status model updated to three-state (prepared/published/discoverable)
+- Expanded bare "ACP" to "Agentic Commerce Protocol (ACP)" across docs, comments, test descriptions, and conformance fixtures (#534)
+- Updated AIPREF draft references from vocab-03 to vocab-05 (#534)
+- `discoverAgentCard()` updated for dual-version validation (#537)
+- npm `latest` promoted to 0.12.2 for all 28 packages (#535)
+
+### Deferred
+
+- UCP order-vs-payment semantic separation: v0.12.4
+- ACP checkout-vs-payment split: v0.12.4
+- x402 V2 delta audit: v0.12.4
+- A2A v0.3.0 type removal: v0.13.0
+
+## [0.12.2]
 
 ### Profile-Defined Types and Extension Groups
 

README.md

@@ -128,7 +128,8 @@ PEAC is most useful where logs are not enough: payments, cross-boundary verifica
 - **I run an MCP server**: [MCP Integration Kit](integrator-kits/mcp/README.md) or `npx -y @peac/mcp-server`
 - **I want to verify a receipt**: [Agent Operator Quickstart](docs/guides/quickstart-agent-operator.md) (5 minutes)
 - **I build A2A agents**: [A2A Integration Kit](integrator-kits/a2a/README.md)
-- **Build in Go**: [Go SDK](sdks/go/)
+
+More paths: [Go SDK](sdks/go/) | [x402 Integration Kit](integrator-kits/x402/README.md) | [Governance Mappings](docs/governance/)
 
 ---
 

apps/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peac/app-api",
-  "version": "0.12.2",
+  "version": "0.12.3",
   "description": "PEAC Protocol API server with OpenAPI 3.1, RFC 9457 Problem Details, and content negotiation",
   "type": "module",
   "main": "dist/index.js",

apps/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peac/app-bridge",
-  "version": "0.12.2",
+  "version": "0.12.3",
   "description": "PEAC Protocol Bridge - Local development sidecar",
   "type": "module",
   "main": "dist/server.js",

apps/sandbox-issuer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peac/app-sandbox-issuer",
-  "version": "0.12.2",
+  "version": "0.12.3",
   "description": "PEAC Protocol Sandbox Issuer - Test receipt issuance for development",
   "type": "module",
   "main": "dist/node.js",

apps/verifier/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peac/app-verifier",
-  "version": "0.12.2",
+  "version": "0.12.3",
   "description": "PEAC Protocol Browser Verifier - Client-side receipt verification",
   "type": "module",
   "private": true,

docs/releases/current.json

@@ -1,8 +1,8 @@
 {
   "description": "PEAC release manifest: CI-enforceable source of truth for release state",
-  "version": "0.12.2",
+  "version": "0.12.3",
   "wire_format_version": "0.2",
   "dist_tag": "latest",
   "registries_version": "0.5.0",
-  "errors_version": "0.12.2"
+  "errors_version": "0.12.3"
 }