From 36895ca7d49b62c52c8d15cfc203aefe406c3b8c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 8 Sep 2026 21:53:42 +0000 Subject: [PATCH 1/2] chore(deps): bump vitest from 4.1.10 to 4.1.11 Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.10 to 4.1.11. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) --- updated-dependencies: - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development ... Signed-off-by: dependabot[bot] --- apps/lch-reference/package.json | 2 +- packages/helpers/fund-wallet/package.json | 2 +- packages/middleware/402-pay/package.json | 2 +- .../wallet/wallet-toolbox/client/package.json | 2 +- .../wallet/wallet-toolbox/mobile/package.json | 2 +- pnpm-lock.yaml | 201 ++++++++++-------- 6 files changed, 122 insertions(+), 89 deletions(-) diff --git a/apps/lch-reference/package.json b/apps/lch-reference/package.json index 19fc8eb21..818216e96 100644 --- a/apps/lch-reference/package.json +++ b/apps/lch-reference/package.json @@ -23,7 +23,7 @@ "oxlint": "^1.76.0", "typescript": "npm:@typescript/typescript6@6.0.2", "vite": "^8.1.5", - "vitest": "^4.1.10" + "vitest": "^4.1.11" }, "license": "SEE LICENSE IN LICENSE.txt" } diff --git a/packages/helpers/fund-wallet/package.json b/packages/helpers/fund-wallet/package.json index 5bae554a0..bc5837aac 100644 --- a/packages/helpers/fund-wallet/package.json +++ b/packages/helpers/fund-wallet/package.json @@ -50,7 +50,7 @@ "oxlint": "^1.76.0", "tsdown": "0.22.14", "typescript": "npm:@typescript/typescript6@6.0.2", - "vitest": "^4.1.10" + "vitest": "^4.1.11" }, "files": [ "dist", diff --git a/packages/middleware/402-pay/package.json b/packages/middleware/402-pay/package.json index e5409a83d..ab3cb909a 100644 --- a/packages/middleware/402-pay/package.json +++ b/packages/middleware/402-pay/package.json @@ -102,7 +102,7 @@ "oxlint": "^1.76.0", "tsdown": "0.22.14", "typescript": "npm:@typescript/typescript6@6.0.2", - "vitest": "^4.1.10" + "vitest": "^4.1.11" }, "bugs": { "url": "https://github.com/bsv-blockchain/ts-stack/issues" diff --git a/packages/wallet/wallet-toolbox/client/package.json b/packages/wallet/wallet-toolbox/client/package.json index a004687ff..14d819401 100644 --- a/packages/wallet/wallet-toolbox/client/package.json +++ b/packages/wallet/wallet-toolbox/client/package.json @@ -89,6 +89,6 @@ "tsdown": "0.22.14", "typescript": "npm:@typescript/typescript6@6.0.2", "vite": "8.1.5", - "vitest": "^4.1.10" + "vitest": "^4.1.11" } } diff --git a/packages/wallet/wallet-toolbox/mobile/package.json b/packages/wallet/wallet-toolbox/mobile/package.json index 6e7e72cc8..0903bc2a2 100644 --- a/packages/wallet/wallet-toolbox/mobile/package.json +++ b/packages/wallet/wallet-toolbox/mobile/package.json @@ -93,6 +93,6 @@ "oxlint": "^1.76.0", "tsdown": "0.22.14", "typescript": "npm:@typescript/typescript6@6.0.2", - "vitest": "^4.1.10" + "vitest": "^4.1.11" } } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 32cc1896c..fa0de1258 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -30,7 +30,7 @@ importers: version: 9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2)) '@stryker-mutator/vitest-runner': specifier: 9.6.1 - version: 9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2))(vitest@4.1.10) + version: 9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2))(vitest@4.1.11(@types/node@26.1.2)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0))) esbuild: specifier: 0.28.1 version: 0.28.1 @@ -78,8 +78,8 @@ importers: specifier: ^8.1.5 version: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0) vitest: - specifier: ^4.1.10 - version: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + specifier: ^4.1.11 + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) conformance/runner: dependencies: @@ -507,7 +507,7 @@ importers: version: typescript@7.0.2 '@vitest/coverage-v8': specifier: 4.1.10 - version: 4.1.10(vitest@4.1.10) + version: 4.1.10(vitest@4.1.11) fast-check: specifier: ^4.9.0 version: 4.9.0 @@ -521,8 +521,8 @@ importers: specifier: npm:@typescript/typescript6@6.0.2 version: '@typescript/typescript6@6.0.2' vitest: - specifier: ^4.1.10 - version: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + specifier: ^4.1.11 + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) packages/helpers/simple: dependencies: @@ -837,7 +837,7 @@ importers: version: typescript@7.0.2 '@vitest/coverage-v8': specifier: 4.1.10 - version: 4.1.10(vitest@4.1.10) + version: 4.1.10(vitest@4.1.11) fast-check: specifier: ^4.9.0 version: 4.9.0 @@ -851,8 +851,8 @@ importers: specifier: npm:@typescript/typescript6@6.0.2 version: '@typescript/typescript6@6.0.2' vitest: - specifier: ^4.1.10 - version: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + specifier: ^4.1.11 + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) packages/middleware/auth: devDependencies: @@ -1898,7 +1898,7 @@ importers: version: typescript@7.0.2 '@vitest/coverage-v8': specifier: 4.1.10 - version: 4.1.10(vitest@4.1.10) + version: 4.1.10(vitest@4.1.11) esbuild: specifier: 0.28.1 version: 0.28.1 @@ -1915,8 +1915,8 @@ importers: specifier: 8.1.5 version: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0) vitest: - specifier: ^4.1.10 - version: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + specifier: ^4.1.11 + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) packages/wallet/wallet-toolbox/mobile: dependencies: @@ -1950,7 +1950,7 @@ importers: version: typescript@7.0.2 '@vitest/coverage-v8': specifier: 4.1.10 - version: 4.1.10(vitest@4.1.10) + version: 4.1.10(vitest@4.1.11) hermes-compiler: specifier: 260318099.0.1 version: 260318099.0.1 @@ -1970,8 +1970,8 @@ importers: specifier: npm:@typescript/typescript6@6.0.2 version: '@typescript/typescript6@6.0.2' vitest: - specifier: ^4.1.10 - version: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + specifier: ^4.1.11 + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) packages: @@ -2946,8 +2946,8 @@ packages: '@jridgewell/source-map@0.3.11': resolution: {integrity: sha512-ZMp1V8ZFcPG5dIWnQLr3NSI1MiCU7UETdS/A0G8V/XWHvJv3ZsFqutJn1Y5RPmAPX6F3BiE397OqveU/9NCuIA==} - '@jridgewell/sourcemap-codec@1.5.5': - resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==} + '@jridgewell/sourcemap-codec@1.6.0': + resolution: {integrity: sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw==} '@jridgewell/trace-mapping@0.3.31': resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==} @@ -4405,11 +4405,11 @@ packages: '@vitest/browser': optional: true - '@vitest/expect@4.1.10': - resolution: {integrity: sha512-YsCn+qAk1GWjQOWFEsEcL2gNQ0zmVmQu3T03qP6UyjhtmdtwtbuI+DASn/7iQB3HGTXkdBwGddzxPlmiql5vlA==} + '@vitest/expect@4.1.11': + resolution: {integrity: sha512-VX2x5vNJXET47KAFzwERI+KRMtTTCSWTfSMKsW7JsUsXV4psq++e3DvZpuTDOpHcxytiDs6p2nhVb2tVDiiUYw==} - '@vitest/mocker@4.1.10': - resolution: {integrity: sha512-v0xaezt+DKEmKfaxg133ldzADrwLGd7Ze1MfQQTYfvs8OqZIwbxyxaYURivwV7sWy5fqn3rH5uOrSp07bp44Ow==} + '@vitest/mocker@4.1.11': + resolution: {integrity: sha512-2XJVD55d1o5AZous5CCGKS74g/riOj9odEt2bQpCVZeblHyHdnMeFl4jl0XjU21stf4mbjUkew2eXQZt65g5CQ==} peerDependencies: msw: ^2.4.9 vite: ^6.0.0 || ^7.0.0 || ^8.0.0 @@ -4422,18 +4422,24 @@ packages: '@vitest/pretty-format@4.1.10': resolution: {integrity: sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==} - '@vitest/runner@4.1.10': - resolution: {integrity: sha512-IKI6kpIH+LmpROplyLwBBaCfMgOZOMsygVa6BARD6ahA04VRuJSa6OaVG7kRvSEMD870Vd91rSSw0eegtWyLGg==} + '@vitest/pretty-format@4.1.11': + resolution: {integrity: sha512-yiZzPbGTS9Sr/JpFl8zHrcIkAofNbFV6k21vIgQN/cY/oxZeXhJv5sc/MBJ5jFKWmWs+oJHw0UXLZjmf931+Vw==} - '@vitest/snapshot@4.1.10': - resolution: {integrity: sha512-xRkfOT1qpTAi/Ti4Y1LtfRc3kEuqxGw59eN2jN9pRWMtS/XDevekhcFSqvQqjUNGksfjMJu3Y+oJ+4Ypn2OaJw==} + '@vitest/runner@4.1.11': + resolution: {integrity: sha512-LztvUgdwMNJMIkj3hQnnxiC2Xy1zNxq928W/xhjCLaNCzqTZOudjwbQf6v9IntZGPw132i2Lq2rgTRZHD3JHNw==} - '@vitest/spy@4.1.10': - resolution: {integrity: sha512-PLf/Ugvoq5wO/b4rwYCR1h2PSIdXz7wnkQFMiUpLdtM7l6pqVFcQIBEHyT1+l+cj7mNwAfZHzqXqDyjvOuwbDw==} + '@vitest/snapshot@4.1.11': + resolution: {integrity: sha512-pN7ikn1ON7h8ee4gIAp4AzyK+zBtJPzVbqOgu5LCEh4VaJVbPQcgYQYJIMGQPXVeJJq1fnfazis7a5pFNPahog==} + + '@vitest/spy@4.1.11': + resolution: {integrity: sha512-apNa/prQy2qCeywhnixOHPRCgGNhvg7T4Dapfl1GahLp/R+uhBm5cPyFoNVyqsNd2h1nJxL6BqqdIjiABL60YA==} '@vitest/utils@4.1.10': resolution: {integrity: sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==} + '@vitest/utils@4.1.11': + resolution: {integrity: sha512-zTCVGpyFsGWBhllOyKlTw/vnr6D9qxsfSDyfbyZmTyjHw5N/VuvzHpHoQjm2ZJzn4RJgx5w4r7V0er69CmLgPQ==} + '@webassemblyjs/ast@1.14.1': resolution: {integrity: sha512-nuBEDgQfm1ccRp/8bCQrx1frohyufl4JlbMMZ4P1wpeOfDhF6FQkxZJ1b/e+PLwr6X1Nhw6OLme5usuBWYBvuQ==} @@ -5531,6 +5537,9 @@ packages: es-module-lexer@2.3.1: resolution: {integrity: sha512-shc1dbU90Yl/xq1QrC7QRtfcwURZuVRfPhZbDoldJ1cn1gzDvBaBWlv0eFolj5+0znnPJz5TXLxsN77X/12KTA==} + es-module-lexer@2.3.2: + resolution: {integrity: sha512-poHGpORABojJJucnV9KbOavETW8lBVnphkW77ER5/BQ5Fz7oXSoCNek7IH3vR5nRjdsEz926ibFYX8KtLQmdyw==} + es-object-atoms@1.1.2: resolution: {integrity: sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==} engines: {node: '>= 0.4'} @@ -7394,6 +7403,10 @@ packages: resolution: {integrity: sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==} engines: {node: '>=12'} + picomatch@4.0.7: + resolution: {integrity: sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==} + engines: {node: '>=12'} + pirates@4.0.7: resolution: {integrity: sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==} engines: {node: '>= 6'} @@ -8074,8 +8087,8 @@ packages: resolution: {integrity: sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==} engines: {node: '>=18'} - tinyexec@1.3.0: - resolution: {integrity: sha512-QKAl9m8gWWGHV8jZcPeym6j+XULi6tOf1mT83WYJ4Lk2ytW/uwAWkrP0uFsdoYMdueVJ0qs26wZ+23xeB4ibNQ==} + tinyexec@1.3.1: + resolution: {integrity: sha512-GCvB3aoys96IuDFBMcTB46JOR6mdMtAToqwiW8JlWhsoh1mhHi/xn9ss/Dg7N555GiJyEt2qzoG/NHCwM6h1EA==} engines: {node: '>=18'} tinyglobby@0.2.17: @@ -8086,6 +8099,10 @@ packages: resolution: {integrity: sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==} engines: {node: '>=14.0.0'} + tinyrainbow@3.1.1: + resolution: {integrity: sha512-yau8yJdTt989Mm0Bd/236QnzEiPf2xLLTqUZRUJOo/3CB078LSwzei343DgtJVmfJKJE3TMINY1u42SQsP6mXw==} + engines: {node: '>=14.0.0'} + tldts-core@6.1.86: resolution: {integrity: sha512-Je6p7pkk+KMzMv2XXKmAE3McmolOQFdxkKw0R8EYNr7sELW46JqnNeTX8ybPiQgvg1ymCoF8LXs5fzFaZvJPTA==} @@ -8475,20 +8492,20 @@ packages: yaml: optional: true - vitest@4.1.10: - resolution: {integrity: sha512-R9jUTe5S4Qb0HCd4TNqpC7oGcrMssMRGXLW80ubjWsW9VH5GF8y1Y0SFLY9AbqSk6nt0PnOx4H4WNJYZ13GUPw==} + vitest@4.1.11: + resolution: {integrity: sha512-fhACrNXUidIbGSBr5FlbuBkO7VWC1ZyLl0DO4CU2DrQoAPxX84Ysxs+HeGQpii5lZWV1Q4gBZTTu49mF+A6Edw==} engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0} hasBin: true peerDependencies: '@edge-runtime/vm': '*' '@opentelemetry/api': ^1.9.0 '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0 - '@vitest/browser-playwright': 4.1.10 - '@vitest/browser-preview': 4.1.10 - '@vitest/browser-webdriverio': 4.1.10 - '@vitest/coverage-istanbul': 4.1.10 - '@vitest/coverage-v8': 4.1.10 - '@vitest/ui': 4.1.10 + '@vitest/browser-playwright': 4.1.11 + '@vitest/browser-preview': 4.1.11 + '@vitest/browser-webdriverio': 4.1.11 + '@vitest/coverage-istanbul': 4.1.11 + '@vitest/coverage-v8': 4.1.11 + '@vitest/ui': 4.1.11 happy-dom: '*' jsdom: '*' vite: ^6.0.0 || ^7.0.0 || ^8.0.0 @@ -8778,7 +8795,7 @@ snapshots: '@antfu/install-pkg@1.1.0': dependencies: package-manager-detector: 1.8.0 - tinyexec: 1.3.0 + tinyexec: 1.3.1 '@arethetypeswrong/core@0.18.5': dependencies: @@ -9888,7 +9905,7 @@ snapshots: '@jridgewell/gen-mapping@0.3.13': dependencies: - '@jridgewell/sourcemap-codec': 1.5.5 + '@jridgewell/sourcemap-codec': 1.6.0 '@jridgewell/trace-mapping': 0.3.31 '@jridgewell/remapping@2.3.5': @@ -9903,17 +9920,17 @@ snapshots: '@jridgewell/gen-mapping': 0.3.13 '@jridgewell/trace-mapping': 0.3.31 - '@jridgewell/sourcemap-codec@1.5.5': {} + '@jridgewell/sourcemap-codec@1.6.0': {} '@jridgewell/trace-mapping@0.3.31': dependencies: '@jridgewell/resolve-uri': 3.1.2 - '@jridgewell/sourcemap-codec': 1.5.5 + '@jridgewell/sourcemap-codec': 1.6.0 '@jridgewell/trace-mapping@0.3.9': dependencies: '@jridgewell/resolve-uri': 3.1.2 - '@jridgewell/sourcemap-codec': 1.5.5 + '@jridgewell/sourcemap-codec': 1.6.0 '@leichtgewicht/ip-codec@2.0.5': {} @@ -10482,7 +10499,7 @@ snapshots: '@publint/pack@0.1.6': dependencies: - tinyexec: 1.2.4 + tinyexec: 1.3.1 '@puppeteer/browsers@3.0.6(yauzl@3.4.0)': dependencies: @@ -10655,7 +10672,7 @@ snapshots: dependencies: '@types/estree': 1.0.9 estree-walker: 2.0.2 - picomatch: 4.0.5 + picomatch: 4.0.7 optionalDependencies: rollup: 4.62.3 @@ -10934,14 +10951,14 @@ snapshots: '@stryker-mutator/util@9.6.1': {} - '@stryker-mutator/vitest-runner@9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2))(vitest@4.1.10)': + '@stryker-mutator/vitest-runner@9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2))(vitest@4.1.11(@types/node@26.1.2)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)))': dependencies: '@stryker-mutator/api': 9.6.1 '@stryker-mutator/core': 9.6.1(@types/node@26.1.2) '@stryker-mutator/util': 9.6.1 semver: 7.8.5 tslib: 2.8.1 - vitest: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + vitest: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) '@testing-library/dom@10.4.1': dependencies: @@ -11443,7 +11460,7 @@ snapshots: '@rolldown/pluginutils': 1.0.1 vite: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0) - '@vitest/coverage-v8@4.1.10(vitest@4.1.10)': + '@vitest/coverage-v8@4.1.10(vitest@4.1.11)': dependencies: '@bcoe/v8-coverage': 1.0.2 '@vitest/utils': 4.1.10 @@ -11455,20 +11472,20 @@ snapshots: obug: 2.1.4 std-env: 4.2.0 tinyrainbow: 3.1.0 - vitest: 4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + vitest: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) - '@vitest/expect@4.1.10': + '@vitest/expect@4.1.11': dependencies: '@standard-schema/spec': 1.1.0 '@types/chai': 5.2.3 - '@vitest/spy': 4.1.10 - '@vitest/utils': 4.1.10 + '@vitest/spy': 4.1.11 + '@vitest/utils': 4.1.11 chai: 6.2.2 - tinyrainbow: 3.1.0 + tinyrainbow: 3.1.1 - '@vitest/mocker@4.1.10(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0))': + '@vitest/mocker@4.1.11(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0))': dependencies: - '@vitest/spy': 4.1.10 + '@vitest/spy': 4.1.11 estree-walker: 3.0.3 magic-string: 0.30.21 optionalDependencies: @@ -11476,27 +11493,37 @@ snapshots: '@vitest/pretty-format@4.1.10': dependencies: - tinyrainbow: 3.1.0 + tinyrainbow: 3.1.1 - '@vitest/runner@4.1.10': + '@vitest/pretty-format@4.1.11': dependencies: - '@vitest/utils': 4.1.10 + tinyrainbow: 3.1.1 + + '@vitest/runner@4.1.11': + dependencies: + '@vitest/utils': 4.1.11 pathe: 2.0.3 - '@vitest/snapshot@4.1.10': + '@vitest/snapshot@4.1.11': dependencies: - '@vitest/pretty-format': 4.1.10 - '@vitest/utils': 4.1.10 + '@vitest/pretty-format': 4.1.11 + '@vitest/utils': 4.1.11 magic-string: 0.30.21 pathe: 2.0.3 - '@vitest/spy@4.1.10': {} + '@vitest/spy@4.1.11': {} '@vitest/utils@4.1.10': dependencies: '@vitest/pretty-format': 4.1.10 convert-source-map: 2.0.0 - tinyrainbow: 3.1.0 + tinyrainbow: 3.1.1 + + '@vitest/utils@4.1.11': + dependencies: + '@vitest/pretty-format': 4.1.11 + convert-source-map: 2.0.0 + tinyrainbow: 3.1.1 '@webassemblyjs/ast@1.14.1': dependencies: @@ -12524,6 +12551,8 @@ snapshots: es-module-lexer@2.3.1: {} + es-module-lexer@2.3.2: {} + es-object-atoms@1.1.2: dependencies: es-errors: 1.3.0 @@ -12781,9 +12810,9 @@ snapshots: dependencies: bser: 2.1.1 - fdir@6.5.0(picomatch@4.0.5): + fdir@6.5.0(picomatch@4.0.7): optionalDependencies: - picomatch: 4.0.5 + picomatch: 4.0.7 fflate@0.8.3: {} @@ -13505,7 +13534,7 @@ snapshots: jest-regex-util: 30.4.0 jest-util: 30.4.1 jest-worker: 30.4.1 - picomatch: 4.0.5 + picomatch: 4.0.7 walker: 1.0.8 optionalDependencies: fsevents: 2.3.3 @@ -13530,7 +13559,7 @@ snapshots: chalk: 4.1.2 graceful-fs: 4.2.11 jest-util: 30.4.1 - picomatch: 4.0.5 + picomatch: 4.0.7 pretty-format: 30.4.1 slash: 3.0.0 stack-utils: 2.0.6 @@ -13661,7 +13690,7 @@ snapshots: chalk: 4.1.2 ci-info: 4.4.0 graceful-fs: 4.2.11 - picomatch: 4.0.5 + picomatch: 4.0.7 jest-validate@29.7.0: dependencies: @@ -13949,7 +13978,7 @@ snapshots: magic-string@0.30.21: dependencies: - '@jridgewell/sourcemap-codec': 1.5.5 + '@jridgewell/sourcemap-codec': 1.6.0 magicast@0.5.3: dependencies: @@ -15050,6 +15079,8 @@ snapshots: picomatch@4.0.5: {} + picomatch@4.0.7: {} + pirates@4.0.7: {} pkg-dir@4.2.0: @@ -15946,15 +15977,17 @@ snapshots: tinyexec@1.2.4: {} - tinyexec@1.3.0: {} + tinyexec@1.3.1: {} tinyglobby@0.2.17: dependencies: - fdir: 6.5.0(picomatch@4.0.5) - picomatch: 4.0.5 + fdir: 6.5.0(picomatch@4.0.7) + picomatch: 4.0.7 tinyrainbow@3.1.0: {} + tinyrainbow@3.1.1: {} + tldts-core@6.1.86: {} tldts@6.1.86: @@ -16328,31 +16361,31 @@ snapshots: tsx: 4.23.1 yaml: 2.9.0 - vitest@4.1.10(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)): + vitest@4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)): dependencies: - '@vitest/expect': 4.1.10 - '@vitest/mocker': 4.1.10(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) - '@vitest/pretty-format': 4.1.10 - '@vitest/runner': 4.1.10 - '@vitest/snapshot': 4.1.10 - '@vitest/spy': 4.1.10 - '@vitest/utils': 4.1.10 - es-module-lexer: 2.3.1 + '@vitest/expect': 4.1.11 + '@vitest/mocker': 4.1.11(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + '@vitest/pretty-format': 4.1.11 + '@vitest/runner': 4.1.11 + '@vitest/snapshot': 4.1.11 + '@vitest/spy': 4.1.11 + '@vitest/utils': 4.1.11 + es-module-lexer: 2.3.2 expect-type: 1.4.0 magic-string: 0.30.21 obug: 2.1.4 pathe: 2.0.3 - picomatch: 4.0.5 + picomatch: 4.0.7 std-env: 4.2.0 tinybench: 2.9.0 - tinyexec: 1.2.4 + tinyexec: 1.3.1 tinyglobby: 0.2.17 - tinyrainbow: 3.1.0 + tinyrainbow: 3.1.1 vite: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0) why-is-node-running: 2.3.0 optionalDependencies: '@types/node': 26.1.2 - '@vitest/coverage-v8': 4.1.10(vitest@4.1.10) + '@vitest/coverage-v8': 4.1.10(vitest@4.1.11) jsdom: 26.1.0 transitivePeerDependencies: - msw From 210908d6e86fbe961c0a180be378bae5b0908515 Mon Sep 17 00:00:00 2001 From: Ty J Everett Date: Tue, 15 Sep 2026 12:02:33 -0700 Subject: [PATCH 2/2] chore(test): align Vitest coverage peers and record patch candidates --- docs/packages/helpers/fund-wallet.md | 2 +- docs/packages/middleware/402-pay.md | 2 +- docs/packages/wallet/wallet-toolbox-client.md | 2 +- docs/packages/wallet/wallet-toolbox-mobile.md | 2 +- docs/reference/package-api-migrations.md | 16 ++-- docs/reference/stack-facts.md | 8 +- governance/package-release-notes.json | 8 +- governance/repository-health/baselines.json | 8 +- packages/helpers/fund-wallet/package.json | 4 +- packages/middleware/402-pay/CHANGELOG.md | 5 ++ packages/middleware/402-pay/package.json | 6 +- .../wallet/wallet-toolbox/client/package.json | 4 +- .../wallet/wallet-toolbox/mobile/package.json | 4 +- pnpm-lock.yaml | 74 +++++++------------ 14 files changed, 64 insertions(+), 81 deletions(-) diff --git a/docs/packages/helpers/fund-wallet.md b/docs/packages/helpers/fund-wallet.md index 482fe48a1..7fb920d21 100644 --- a/docs/packages/helpers/fund-wallet.md +++ b/docs/packages/helpers/fund-wallet.md @@ -3,7 +3,7 @@ id: pkg-fund-wallet title: '@bsv/fund-wallet' kind: package domain: helpers -version: '1.5.0' +version: '1.5.1' source_repo: 'bsv-blockchain/ts-stack' last_updated: '2026-08-31' last_verified: '2026-08-31' diff --git a/docs/packages/middleware/402-pay.md b/docs/packages/middleware/402-pay.md index 3277ccbee..fc3dfe373 100644 --- a/docs/packages/middleware/402-pay.md +++ b/docs/packages/middleware/402-pay.md @@ -3,7 +3,7 @@ id: pkg-402-pay title: '@bsv/402-pay' kind: package domain: middleware -version: '0.3.0' +version: '0.3.1' source_repo: 'bsv-blockchain/ts-stack' last_updated: '2026-09-08' last_verified: '2026-09-08' diff --git a/docs/packages/wallet/wallet-toolbox-client.md b/docs/packages/wallet/wallet-toolbox-client.md index e894ced0d..cfc8aff8d 100644 --- a/docs/packages/wallet/wallet-toolbox-client.md +++ b/docs/packages/wallet/wallet-toolbox-client.md @@ -3,7 +3,7 @@ id: pkg-wallet-toolbox-client title: '@bsv/wallet-toolbox-client' kind: package domain: wallet -version: '2.13.0' +version: '2.13.1' last_updated: '2026-09-10' last_verified: '2026-09-10' review_cadence_days: 30 diff --git a/docs/packages/wallet/wallet-toolbox-mobile.md b/docs/packages/wallet/wallet-toolbox-mobile.md index 7e40ceffd..fc6ac5774 100644 --- a/docs/packages/wallet/wallet-toolbox-mobile.md +++ b/docs/packages/wallet/wallet-toolbox-mobile.md @@ -3,7 +3,7 @@ id: pkg-wallet-toolbox-mobile title: '@bsv/wallet-toolbox-mobile' kind: package domain: wallet -version: '2.13.0' +version: '2.13.1' last_updated: '2026-09-10' last_verified: '2026-09-10' review_cadence_days: 30 diff --git a/docs/reference/package-api-migrations.md b/docs/reference/package-api-migrations.md index f5a4f7c1b..9f231cfc6 100644 --- a/docs/reference/package-api-migrations.md +++ b/docs/reference/package-api-migrations.md @@ -25,7 +25,7 @@ and clean-consumer tests remain the executable type authority. | Package | npm baseline | Source | Candidate | API | Migration | | --------------------------------- | ------------ | -------- | --------- | --------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| `@bsv/402-pay` | `0.2.5` | `0.3.0` | minor | [API and usage](../packages/middleware/402-pay.md) | Custom clients must send a strictly framed BRC-95 Atomic BEEF envelope whose subject is the payment transaction; plain BEEF is no longer accepted. Legacy Atomic BEEF containing unrelated branches remains compatible because the server reduces it to the declared subject and dependency closure. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package. | +| `@bsv/402-pay` | `0.2.5` | `0.3.1` | minor | [API and usage](../packages/middleware/402-pay.md) | Custom clients must send a strictly framed BRC-95 Atomic BEEF envelope whose subject is the payment transaction; plain BEEF is no longer accepted. Legacy Atomic BEEF containing unrelated branches remains compatible because the server reduces it to the declared subject and dependency closure. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package. | | `@bsv/air-gap` | `0.0.0` | `0.1.2` | minor | [API and usage](../packages/helpers/air-gap.md) | No consumer migration is required; this is the first published release of a new package with no prior public API. The experimental pre-release framing that circulated on the unmerged feature branch is not accepted by the v1 decoder. | | `@bsv/amountinator` | `2.1.1` | `2.1.5` | patch | [API and usage](../packages/helpers/amountinator.md) | No consumer migration is required; this is a backward-compatible patch candidate. | | `@bsv/auth` | `0.1.1` | `0.1.4` | patch | [API and usage](../packages/middleware/auth.md) | No consumer migration is required; authentication APIs, wire behavior, and runtime defaults are unchanged. | @@ -38,7 +38,7 @@ and clean-consumer tests remain the executable type authority. | `@bsv/did` | `0.2.1` | `0.2.5` | patch | [API and usage](../packages/helpers/did.md) | No consumer migration is required; DID APIs, encodings, credential behavior, and supported import forms are unchanged. | | `@bsv/did-client` | `1.2.1` | `1.3.1` | minor | [API and usage](../packages/helpers/did-client.md) | Existing local, mainnet, and testnet behavior is unchanged. TTN consumers select networkPreset teratestnet and use @bsv/sdk 2.4 or later. Distributors who copy the UMD file must keep THIRD_PARTY_NOTICES.md and LICENSES/ with it. | | `@bsv/ecpm-permission-module` | `0.0.0` | `0.1.0` | minor | [API and usage](../packages/wallet/ecpm-permission-module.md) | No existing consumer migration is required; this is the first release. Wallet hosts register the module under the ecpm scheme and supply their ordinary key deriver, authorization handler, and optional privileged key provider. | -| `@bsv/fund-wallet` | `1.4.4` | `1.5.0` | minor | [API and usage](../packages/helpers/fund-wallet.md) | Replace --private-key/--privateKey with the interactive secret prompt. Automation must provide exactly one private-key line on standard input from a protected file descriptor; funding APIs and transaction behavior are otherwise unchanged. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package. | +| `@bsv/fund-wallet` | `1.4.4` | `1.5.1` | minor | [API and usage](../packages/helpers/fund-wallet.md) | Replace --private-key/--privateKey with the interactive secret prompt. Automation must provide exactly one private-key line on standard input from a protected file descriptor; funding APIs and transaction behavior are otherwise unchanged. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package. | | `@bsv/gasp` | `1.3.1` | `1.3.6` | patch | [API and usage](../packages/overlays/gasp.md) | No consumer migration is required; existing constructor calls, imports, synchronization behavior, and wire semantics are unchanged. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package. | | `@bsv/lch` | `0.0.0` | `0.1.0` | minor | [API and usage](../packages/content/lch.md) | No consumer migration is required; this is the first release of a new additive package. Applications must give quote() the verified Asset encryption descriptor and selected Offer key-delivery mechanism, keep createPayment behind explicit wallet authorization, persist the funded transaction and every partial settlement proof through recovery, retry with that same transaction, distinguish finalized from accepted evidence, fail closed on unknown settlement or evidence profiles, and supply an address-pinning connector for DNS endpoints. Payees should select receipt-complete unless they explicitly accept authorized-output provider, privacy, and pre-internalization key-release tradeoffs. Distributors must retain THIRD_PARTY_NOTICES.md with the package; the new profile adds no dependency. Published BRC-170 remains authoritative if the implementation and standard differ. | | `@bsv/message-box-client` | `2.4.0` | `2.5.0` | minor | [API and usage](../packages/messaging/message-box-client.md) | No API migration is required. socketOptions is optional and nothing is forwarded by default, so socket transport negotiation and every HTTP code path are unchanged for existing callers; wallet and originator stay client-owned and cannot be overridden through it. managerOptions excludes autoConnect and retries: JavaScript callers receive an immediate error for autoConnect: false or nonzero message retries because the live socket starts immediately and AuthSocket does not send Socket.IO acknowledgements. Connection reconnection options remain supported. Upgrade @bsv/sdk and @bsv/message-box-client together; historical number-array wallets, current Uint8Array substrates, and already-pending numeric-key messages interoperate through the same portable transaction form. Distributors who copy the UMD file must keep THIRD_PARTY_NOTICES.md and LICENSES/ with it. No migration is required for the bundled payment optimization. Module consumers can use SDK 2.5.0 or later to enable the same optional extension; existing compatible SDK peer versions remain supported. Recipients must advertise already-validated transaction IDs through x-bsv-payment-known-txids, an optional SDK extension rather than a standardized BRC-105 header; services that omit it retain existing payment behavior. | @@ -56,8 +56,8 @@ and clean-consumer tests remain the executable type authority. | `@bsv/wallet-helper` | `0.1.1` | `0.1.7` | patch | [API and usage](../packages/helpers/wallet-helper.md) | No consumer migration is required; fluent builder APIs and transaction semantics are unchanged. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package. | | `@bsv/wallet-relay` | `0.3.6` | `0.4.0` | minor | [API and usage](../packages/wallet/wallet-relay.md) | Enable signed QR codes and distribute only HTTPS pairing origins and relay API URLs. Root-relative API paths and loopback HTTP remain supported. Configure onApprovalRequired for every method not deliberately listed in autoApproveMethods; unsigned pairing URIs and implicit approval are no longer accepted. Existing relay sessions and supported wallet RPC byte encodings remain valid, and host applications continue to provide their matching Express runtime and type graph. | | `@bsv/wallet-toolbox` | `2.12.0` | `2.13.0` | minor | [API and usage](../packages/wallet/wallet-toolbox.md) | Custom WalletServices implementations may omit getValidatedMerklePath; stale RPC proof recovery then uses one fully validated getMerklePath lookup. Sync transfer support requires the 2.13.0 candidate or a later release containing it on the client and each relevant provider; published 2.12.0 does not contain this extension. Providers must run additive migration 2026-09-09-001 for two bounded staging tables before advertising transfer version 1; syncTransfers: false supports a mixed-version rollout. For rollback, stop transfer traffic and use the new migration source to reverse only this staging migration and its ledger entry before restarting older code; preserve all current wallet records. Existing ordinary-page and export file contracts are retained. IndexedDB upgrades automatically to version 6 with a non-unique transaction-ID/user index, preserving existing data and duplicate transaction IDs. Older clients requesting schema version 6 cannot reopen the upgraded database; retain a compatible client for local backups. Compact checkpoints are advertised through runtime settings; older providers retain the full-state path. No ID-map data is removed and existing wire defaults remain compatible. Existing sync peers remain compatible; additive fields are optional. Run the normal Knex migration for source indexes. Only idempotent getSyncChunk reads retry after HTTP 413. Existing actions, ordinary noSend calls, permission modules, UMP v3 tokens, and active WAB accounts require no client migration. Deploy the additive WAB registration-status migration and WAB routes before relying on interrupted-signup recovery; older servers and clients retain their prior wire behavior. To use BRC-177, migrate every active Knex store before serving requests and run the default Wallet Toolbox monitor; IndexedDB upgrades automatically to schema version 6. Upgrade signer, active storage service, and remote monitor together to 2.11.0 or later; older remote storage is rejected before prefunding. The Knex migration also adds rebuildable prepared-BEEF and proof-epoch tables with every COOK control disabled. Validate the migration on MySQL before release and the cross-process epoch fence on non-production PXC before enabling writes. Roll out writes before reads, use backfill only after database review, and disable all three flags to roll back. Delete derived prepared rows before downgrading to code that cannot advance the epoch. Semantic modules may add handleRequest; hosts installing @bsv/ecpm-permission-module register it under the ecpm scheme. Argon2id tokens keep the same parameters and derived bytes across WebAssembly and JavaScript runtimes. Host registration is available from each package root; concurrent cold calls share one preload attempt, and hosts must make readiness/preload reentrant and cache permanent failures or back off retries. Native and JavaScript results share byte-type and exact-length validation; unrelated hash-wasm errors still propagate without WebAssembly. Canonical AtomicBEEF and number-array behavior are unchanged; use @bsv/sdk 2.4.2 or later, use docs/storage.md instead of the removed JSight export, and retain THIRD_PARTY_NOTICES.md and LICENSES/. Replace non-loopback HTTP storage and Arcade SSE endpoints with HTTPS. Snapshot APIs and formats are unchanged, but applications must store each complete snapshot in an OS Keychain, hardware-backed keystore, or comparably trusted secret store because possession of it grants wallet access. | -| `@bsv/wallet-toolbox-client` | `2.12.0` | `2.13.0` | minor | [API and usage](../packages/wallet/wallet-toolbox-client.md) | Custom WalletServices implementations may omit getValidatedMerklePath; stale RPC proof recovery then uses one fully validated getMerklePath lookup. Sync transfer support requires the 2.13.0 candidate or a later release containing it on the client and each relevant provider; published 2.12.0 does not contain this extension. Providers must run additive migration 2026-09-09-001 for two bounded staging tables before advertising transfer version 1; syncTransfers: false supports a mixed-version rollout. For rollback, stop transfer traffic and use the new migration source to reverse only this staging migration and its ledger entry before restarting older code; preserve all current wallet records. Existing ordinary-page and export file contracts are retained. IndexedDB upgrades automatically to version 6 with a non-unique transaction-ID/user index, preserving existing data and duplicate transaction IDs. Older clients requesting schema version 6 cannot reopen the upgraded database; retain a compatible client for local backups. Compact checkpoints are advertised through runtime settings; older providers retain the full-state path. No ID-map data is removed and existing wire defaults remain compatible. Existing sync peers remain compatible; additive fields are optional. Run the normal Knex migration for source indexes. Only idempotent getSyncChunk reads retry after HTTP 413. Existing browser actions, permission modules, UMP v3 tokens, and active WAB accounts require no client migration; IndexedDB upgrades automatically. Deploy the additive WAB registration-status migration and WAB routes before relying on interrupted-signup recovery; older servers and clients retain their prior wire behavior. To use BRC-177 with remote storage, upgrade the active storage service and its default monitor to Wallet Toolbox 2.11.0 or later before upgrading clients; an older server is rejected before prefunding. Prepared BEEF persistence and rollout controls apply only to the full package's Knex provider, so IndexedDB and remote clients require no COOK configuration. Semantic modules may add handleRequest; installing @bsv/ecpm-permission-module requires registration under the ecpm scheme. Argon2id tokens keep the same parameters and derived bytes across WebAssembly and JavaScript runtimes. Host registration is available from each package root; concurrent cold calls share a preload attempt, and hosts must make readiness/preload reentrant and cache permanent failures or back off retries. Native and JavaScript results share byte-type and exact-length validation; unrelated hash-wasm errors still propagate without WebAssembly. Browser exports, wire types, canonical AtomicBEEF behavior, and pagination contracts are unchanged; use @bsv/sdk 2.4.2 or later and retain THIRD_PARTY_NOTICES.md and LICENSES/. Replace non-loopback HTTP storage and Arcade SSE endpoints with HTTPS. Snapshot APIs and formats are unchanged, but store each complete snapshot only through browser or extension storage backed by an OS Keychain or comparably trusted secret store. | -| `@bsv/wallet-toolbox-mobile` | `2.12.0` | `2.13.0` | minor | [API and usage](../packages/wallet/wallet-toolbox-mobile.md) | Custom WalletServices implementations may omit getValidatedMerklePath; stale RPC proof recovery then uses one fully validated getMerklePath lookup. Sync transfer support requires the 2.13.0 candidate or a later release containing it on the client and each relevant provider; published 2.12.0 does not contain this extension. Providers must run additive migration 2026-09-09-001 for two bounded staging tables before advertising transfer version 1; syncTransfers: false supports a mixed-version rollout. For rollback, stop transfer traffic and use the new migration source to reverse only this staging migration and its ledger entry before restarting older code; preserve all current wallet records. Existing ordinary-page and export file contracts are retained. Compact checkpoints are advertised through runtime settings; older providers retain the full-state path. No ID-map data is removed and existing wire defaults remain compatible. Existing sync peers remain compatible; additive fields are optional. Run the normal Knex migration for source indexes. Only idempotent getSyncChunk reads retry after HTTP 413. Existing mobile actions, permission modules, UMP v3 tokens, and active WAB accounts require no client migration. Deploy the additive WAB registration-status migration and WAB routes before relying on interrupted-signup recovery; older servers and clients retain their prior wire behavior. To use BRC-177, migrate and upgrade the active remote storage service and its default monitor to Wallet Toolbox 2.11.0 or later before upgrading clients; an older server is rejected before prefunding. Prepared BEEF persistence and rollout controls apply only to the full package's Knex provider, so mobile remote clients require no COOK configuration. Semantic modules may add handleRequest without changing the Wallet interface. Argon2id tokens keep the same parameters and derived bytes across WebAssembly and JavaScript runtimes; no user device setting is required. Host registration is available from the mobile root; concurrent cold calls share a preload attempt, and hosts must make readiness/preload reentrant and cache permanent failures or back off retries. Native and JavaScript results share byte-type and exact-length validation; unrelated hash-wasm errors still propagate without WebAssembly. React Native exports, wire types, and canonical AtomicBEEF behavior are unchanged; use @bsv/sdk 2.4.2 or later and retain THIRD_PARTY_NOTICES.md and LICENSES/. Replace non-loopback HTTP storage and Arcade SSE endpoints with HTTPS. Snapshot APIs and formats are unchanged, but store each complete snapshot in the iOS Keychain, Android Keystore-backed encrypted storage, or a comparably trusted secret store. | +| `@bsv/wallet-toolbox-client` | `2.12.0` | `2.13.1` | minor | [API and usage](../packages/wallet/wallet-toolbox-client.md) | Custom WalletServices implementations may omit getValidatedMerklePath; stale RPC proof recovery then uses one fully validated getMerklePath lookup. Sync transfer support requires the 2.13.0 candidate or a later release containing it on the client and each relevant provider; published 2.12.0 does not contain this extension. Providers must run additive migration 2026-09-09-001 for two bounded staging tables before advertising transfer version 1; syncTransfers: false supports a mixed-version rollout. For rollback, stop transfer traffic and use the new migration source to reverse only this staging migration and its ledger entry before restarting older code; preserve all current wallet records. Existing ordinary-page and export file contracts are retained. IndexedDB upgrades automatically to version 6 with a non-unique transaction-ID/user index, preserving existing data and duplicate transaction IDs. Older clients requesting schema version 6 cannot reopen the upgraded database; retain a compatible client for local backups. Compact checkpoints are advertised through runtime settings; older providers retain the full-state path. No ID-map data is removed and existing wire defaults remain compatible. Existing sync peers remain compatible; additive fields are optional. Run the normal Knex migration for source indexes. Only idempotent getSyncChunk reads retry after HTTP 413. Existing browser actions, permission modules, UMP v3 tokens, and active WAB accounts require no client migration; IndexedDB upgrades automatically. Deploy the additive WAB registration-status migration and WAB routes before relying on interrupted-signup recovery; older servers and clients retain their prior wire behavior. To use BRC-177 with remote storage, upgrade the active storage service and its default monitor to Wallet Toolbox 2.11.0 or later before upgrading clients; an older server is rejected before prefunding. Prepared BEEF persistence and rollout controls apply only to the full package's Knex provider, so IndexedDB and remote clients require no COOK configuration. Semantic modules may add handleRequest; installing @bsv/ecpm-permission-module requires registration under the ecpm scheme. Argon2id tokens keep the same parameters and derived bytes across WebAssembly and JavaScript runtimes. Host registration is available from each package root; concurrent cold calls share a preload attempt, and hosts must make readiness/preload reentrant and cache permanent failures or back off retries. Native and JavaScript results share byte-type and exact-length validation; unrelated hash-wasm errors still propagate without WebAssembly. Browser exports, wire types, canonical AtomicBEEF behavior, and pagination contracts are unchanged; use @bsv/sdk 2.4.2 or later and retain THIRD_PARTY_NOTICES.md and LICENSES/. Replace non-loopback HTTP storage and Arcade SSE endpoints with HTTPS. Snapshot APIs and formats are unchanged, but store each complete snapshot only through browser or extension storage backed by an OS Keychain or comparably trusted secret store. | +| `@bsv/wallet-toolbox-mobile` | `2.12.0` | `2.13.1` | minor | [API and usage](../packages/wallet/wallet-toolbox-mobile.md) | Custom WalletServices implementations may omit getValidatedMerklePath; stale RPC proof recovery then uses one fully validated getMerklePath lookup. Sync transfer support requires the 2.13.0 candidate or a later release containing it on the client and each relevant provider; published 2.12.0 does not contain this extension. Providers must run additive migration 2026-09-09-001 for two bounded staging tables before advertising transfer version 1; syncTransfers: false supports a mixed-version rollout. For rollback, stop transfer traffic and use the new migration source to reverse only this staging migration and its ledger entry before restarting older code; preserve all current wallet records. Existing ordinary-page and export file contracts are retained. Compact checkpoints are advertised through runtime settings; older providers retain the full-state path. No ID-map data is removed and existing wire defaults remain compatible. Existing sync peers remain compatible; additive fields are optional. Run the normal Knex migration for source indexes. Only idempotent getSyncChunk reads retry after HTTP 413. Existing mobile actions, permission modules, UMP v3 tokens, and active WAB accounts require no client migration. Deploy the additive WAB registration-status migration and WAB routes before relying on interrupted-signup recovery; older servers and clients retain their prior wire behavior. To use BRC-177, migrate and upgrade the active remote storage service and its default monitor to Wallet Toolbox 2.11.0 or later before upgrading clients; an older server is rejected before prefunding. Prepared BEEF persistence and rollout controls apply only to the full package's Knex provider, so mobile remote clients require no COOK configuration. Semantic modules may add handleRequest without changing the Wallet interface. Argon2id tokens keep the same parameters and derived bytes across WebAssembly and JavaScript runtimes; no user device setting is required. Host registration is available from the mobile root; concurrent cold calls share a preload attempt, and hosts must make readiness/preload reentrant and cache permanent failures or back off retries. Native and JavaScript results share byte-type and exact-length validation; unrelated hash-wasm errors still propagate without WebAssembly. React Native exports, wire types, and canonical AtomicBEEF behavior are unchanged; use @bsv/sdk 2.4.2 or later and retain THIRD_PARTY_NOTICES.md and LICENSES/. Replace non-loopback HTTP storage and Arcade SSE endpoints with HTTPS. Snapshot APIs and formats are unchanged, but store each complete snapshot in the iOS Keychain, Android Keystore-backed encrypted storage, or a comparably trusted secret store. | | `create-bsv-app` | `1.0.2` | `1.1.1` | minor | [API and usage](../packages/helpers/create-bsv-app.md) | Existing mainnet and testnet scaffolds are unchanged. New TTN projects pass --network ttn or select TerraTestNet in the configurator. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package. | `none` means the source manifest matches the recorded npm baseline. Any other @@ -71,7 +71,7 @@ explicitly authorized operations. - Package documentation: [docs/packages/middleware/402-pay.md](../packages/middleware/402-pay.md) - Source: [packages/middleware/402-pay](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/middleware/402-pay) -- Release note: Adds an exact-tarball Vite and esbuild contract for the browser-safe client entry point, including a bundle-size ratchet and an assertion that server exports never leak into browser consumers. Retains the hash-pinned pre-uniformization Open BSV License version 4 grant as a scoped continuity notice. Standardizes first-party author metadata on the current BSV Association name. Binds BRC-121 pricing and internalization to the transaction declared by the BRC-95 Atomic BEEF subject, removes unrelated included branches, rejects trailing bytes and non-atomic envelopes, and requires affirmative wallet acceptance before serving paid content. +- Release note: Adds an exact-tarball Vite and esbuild contract for the browser-safe client entry point, including a bundle-size ratchet and an assertion that server exports never leak into browser consumers. Retains the hash-pinned pre-uniformization Open BSV License version 4 grant as a scoped continuity notice. Standardizes first-party author metadata on the current BSV Association name. Binds BRC-121 pricing and internalization to the transaction declared by the BRC-95 Atomic BEEF subject, removes unrelated included branches, rejects trailing bytes and non-atomic envelopes, and requires affirmative wallet acceptance before serving paid content. Aligns the development-only Vitest runner and V8 coverage provider at 4.1.11; consumer runtime behavior is unchanged. - Migration: Custom clients must send a strictly framed BRC-95 Atomic BEEF envelope whose subject is the payment transaction; plain BEEF is no longer accepted. Legacy Atomic BEEF containing unrelated branches remains compatible because the server reduces it to the declared subject and dependency closure. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package. | Public subpath | Runtime target(s) | Declaration target(s) | @@ -226,7 +226,7 @@ CLI entry points: `{"chirp":"./dist/cli.js"}`. - Package documentation: [docs/packages/helpers/fund-wallet.md](../packages/helpers/fund-wallet.md) - Source: [packages/helpers/fund-wallet](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/helpers/fund-wallet) -- Release note: Adopts the governed strict TypeScript profile and repository-wide zero-warning lint and formatting contract, and retains the imported fund-metanet source's hash-pinned ISC provenance and notice from its exact source and npm publication. Standardizes first-party author metadata on the current BSV Association name. Removes private-key command-line arguments so wallet secrets cannot leak through shell history or process inspection, adds a non-echoing interactive secret prompt, and preserves protected-stdin automation. Retains the governed package-quality and provenance contract. +- Release note: Adopts the governed strict TypeScript profile and repository-wide zero-warning lint and formatting contract, and retains the imported fund-metanet source's hash-pinned ISC provenance and notice from its exact source and npm publication. Standardizes first-party author metadata on the current BSV Association name. Removes private-key command-line arguments so wallet secrets cannot leak through shell history or process inspection, adds a non-echoing interactive secret prompt, and preserves protected-stdin automation. Retains the governed package-quality and provenance contract. Aligns the development-only Vitest runner and V8 coverage provider at 4.1.11; consumer runtime behavior is unchanged. - Migration: Replace --private-key/--privateKey with the interactive secret prompt. Automation must provide exactly one private-key line on standard input from a protected file descriptor; funding APIs and transaction behavior are otherwise unchanged. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package. CLI entry points: `{"fund-metanet":"./dist/index.mjs"}`. @@ -534,7 +534,7 @@ CLI entry points: `{"wallet-relay":"./bin/init.mjs"}`. - Package documentation: [docs/packages/wallet/wallet-toolbox-client.md](../packages/wallet/wallet-toolbox-client.md) - Source: [packages/wallet/wallet-toolbox/client](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox/client) -- Release note: Adds optional getValidatedMerklePath provider failover with independent per-call provider traversal. Adds conservative initial sync pages and per-copy adaptation to committed page latency, with proof-work limits independent of byte budgets. Adds negotiated bounded sync transfers, full-frame integrity verification, resumable staged uploads and checkpoint replay protection for oversized records. Adds IndexedDB schema version 6 and bounded sync identity/relation and indexed proof-batch lookups to avoid full-wallet scans during large local restores. Adds negotiated compact committed sync checkpoints and faster binary JSON parsing without scalar-byte reviver callbacks. Adds adaptive wallet-storage sync reads, optional progress totals, disambiguated checkpoints, bounded HTTP 413 recovery, and MySQL/SQLite source indexes while retaining legacy peer compatibility. Adds the built-in browser BRC-177 noSend-expiry signer, IndexedDB schema version 6 lifecycle state, remote storage capability negotiation, default monitor coordination, interruption-safe WAB registration recovery, the optional semantic handleRequest hook, an interoperable asynchronous JavaScript Argon2id fallback when WebAssembly is unavailable, and an optional proven-ready native Argon2id backend for host runtimes. Carries the shared prepared-BEEF-aware createAction contract while IndexedDB remains canonical-only; compatible remote Knex providers can enable COOK independently. Retains transformation modules, BRC-100 wire compatibility, stable IndexedDB totals, current browser compatibility fixes, and earlier Open BSV grants. Carries the spending-authorization, certificate-signature, complete-accounting, credential-transport, and credential-log security corrections into the browser package while documenting snapshots as wallet-equivalent secrets. +- Release note: Adds optional getValidatedMerklePath provider failover with independent per-call provider traversal. Adds conservative initial sync pages and per-copy adaptation to committed page latency, with proof-work limits independent of byte budgets. Adds negotiated bounded sync transfers, full-frame integrity verification, resumable staged uploads and checkpoint replay protection for oversized records. Adds IndexedDB schema version 6 and bounded sync identity/relation and indexed proof-batch lookups to avoid full-wallet scans during large local restores. Adds negotiated compact committed sync checkpoints and faster binary JSON parsing without scalar-byte reviver callbacks. Adds adaptive wallet-storage sync reads, optional progress totals, disambiguated checkpoints, bounded HTTP 413 recovery, and MySQL/SQLite source indexes while retaining legacy peer compatibility. Adds the built-in browser BRC-177 noSend-expiry signer, IndexedDB schema version 6 lifecycle state, remote storage capability negotiation, default monitor coordination, interruption-safe WAB registration recovery, the optional semantic handleRequest hook, an interoperable asynchronous JavaScript Argon2id fallback when WebAssembly is unavailable, and an optional proven-ready native Argon2id backend for host runtimes. Carries the shared prepared-BEEF-aware createAction contract while IndexedDB remains canonical-only; compatible remote Knex providers can enable COOK independently. Retains transformation modules, BRC-100 wire compatibility, stable IndexedDB totals, current browser compatibility fixes, and earlier Open BSV grants. Carries the spending-authorization, certificate-signature, complete-accounting, credential-transport, and credential-log security corrections into the browser package while documenting snapshots as wallet-equivalent secrets. Aligns the development-only Vitest runner and V8 coverage provider at 4.1.11; consumer runtime behavior is unchanged. - Migration: Custom WalletServices implementations may omit getValidatedMerklePath; stale RPC proof recovery then uses one fully validated getMerklePath lookup. Sync transfer support requires the 2.13.0 candidate or a later release containing it on the client and each relevant provider; published 2.12.0 does not contain this extension. Providers must run additive migration 2026-09-09-001 for two bounded staging tables before advertising transfer version 1; syncTransfers: false supports a mixed-version rollout. For rollback, stop transfer traffic and use the new migration source to reverse only this staging migration and its ledger entry before restarting older code; preserve all current wallet records. Existing ordinary-page and export file contracts are retained. IndexedDB upgrades automatically to version 6 with a non-unique transaction-ID/user index, preserving existing data and duplicate transaction IDs. Older clients requesting schema version 6 cannot reopen the upgraded database; retain a compatible client for local backups. Compact checkpoints are advertised through runtime settings; older providers retain the full-state path. No ID-map data is removed and existing wire defaults remain compatible. Existing sync peers remain compatible; additive fields are optional. Run the normal Knex migration for source indexes. Only idempotent getSyncChunk reads retry after HTTP 413. Existing browser actions, permission modules, UMP v3 tokens, and active WAB accounts require no client migration; IndexedDB upgrades automatically. Deploy the additive WAB registration-status migration and WAB routes before relying on interrupted-signup recovery; older servers and clients retain their prior wire behavior. To use BRC-177 with remote storage, upgrade the active storage service and its default monitor to Wallet Toolbox 2.11.0 or later before upgrading clients; an older server is rejected before prefunding. Prepared BEEF persistence and rollout controls apply only to the full package's Knex provider, so IndexedDB and remote clients require no COOK configuration. Semantic modules may add handleRequest; installing @bsv/ecpm-permission-module requires registration under the ecpm scheme. Argon2id tokens keep the same parameters and derived bytes across WebAssembly and JavaScript runtimes. Host registration is available from each package root; concurrent cold calls share a preload attempt, and hosts must make readiness/preload reentrant and cache permanent failures or back off retries. Native and JavaScript results share byte-type and exact-length validation; unrelated hash-wasm errors still propagate without WebAssembly. Browser exports, wire types, canonical AtomicBEEF behavior, and pagination contracts are unchanged; use @bsv/sdk 2.4.2 or later and retain THIRD_PARTY_NOTICES.md and LICENSES/. Replace non-loopback HTTP storage and Arcade SSE endpoints with HTTPS. Snapshot APIs and formats are unchanged, but store each complete snapshot only through browser or extension storage backed by an OS Keychain or comparably trusted secret store. | Public subpath | Runtime target(s) | Declaration target(s) | @@ -546,7 +546,7 @@ CLI entry points: `{"wallet-relay":"./bin/init.mjs"}`. - Package documentation: [docs/packages/wallet/wallet-toolbox-mobile.md](../packages/wallet/wallet-toolbox-mobile.md) - Source: [packages/wallet/wallet-toolbox/mobile](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox/mobile) -- Release note: Adds optional getValidatedMerklePath provider failover with independent per-call provider traversal. Adds conservative initial sync pages and per-copy adaptation to committed page latency, with proof-work limits independent of byte budgets. Adds negotiated bounded sync transfers, full-frame integrity verification, resumable staged uploads and checkpoint replay protection for oversized records. Adds negotiated compact committed sync checkpoints and faster binary JSON parsing without scalar-byte reviver callbacks. Adds adaptive wallet-storage sync reads, optional progress totals, disambiguated checkpoints, bounded HTTP 413 recovery, and MySQL/SQLite source indexes while retaining legacy peer compatibility. Adds the built-in mobile BRC-177 noSend-expiry signer, remote storage capability negotiation, default-monitor ownership coordination across restarts and devices, interruption-safe WAB registration recovery, the optional semantic handleRequest hook, an interoperable asynchronous JavaScript Argon2id fallback for React Native runtimes without WebAssembly, and an optional proven-ready native Argon2id backend for host runtimes. Carries the shared prepared-BEEF-aware createAction contract while mobile storage remains canonical-only; compatible remote Knex providers can enable COOK independently. Retains transformation modules, BRC-100 wire compatibility, current mobile compatibility fixes, and earlier Open BSV grants. Carries the spending-authorization, certificate-signature, complete-accounting, credential-transport, and credential-log security corrections into the React Native package while documenting snapshots as wallet-equivalent secrets. +- Release note: Adds optional getValidatedMerklePath provider failover with independent per-call provider traversal. Adds conservative initial sync pages and per-copy adaptation to committed page latency, with proof-work limits independent of byte budgets. Adds negotiated bounded sync transfers, full-frame integrity verification, resumable staged uploads and checkpoint replay protection for oversized records. Adds negotiated compact committed sync checkpoints and faster binary JSON parsing without scalar-byte reviver callbacks. Adds adaptive wallet-storage sync reads, optional progress totals, disambiguated checkpoints, bounded HTTP 413 recovery, and MySQL/SQLite source indexes while retaining legacy peer compatibility. Adds the built-in mobile BRC-177 noSend-expiry signer, remote storage capability negotiation, default-monitor ownership coordination across restarts and devices, interruption-safe WAB registration recovery, the optional semantic handleRequest hook, an interoperable asynchronous JavaScript Argon2id fallback for React Native runtimes without WebAssembly, and an optional proven-ready native Argon2id backend for host runtimes. Carries the shared prepared-BEEF-aware createAction contract while mobile storage remains canonical-only; compatible remote Knex providers can enable COOK independently. Retains transformation modules, BRC-100 wire compatibility, current mobile compatibility fixes, and earlier Open BSV grants. Carries the spending-authorization, certificate-signature, complete-accounting, credential-transport, and credential-log security corrections into the React Native package while documenting snapshots as wallet-equivalent secrets. Aligns the development-only Vitest runner and V8 coverage provider at 4.1.11; consumer runtime behavior is unchanged. - Migration: Custom WalletServices implementations may omit getValidatedMerklePath; stale RPC proof recovery then uses one fully validated getMerklePath lookup. Sync transfer support requires the 2.13.0 candidate or a later release containing it on the client and each relevant provider; published 2.12.0 does not contain this extension. Providers must run additive migration 2026-09-09-001 for two bounded staging tables before advertising transfer version 1; syncTransfers: false supports a mixed-version rollout. For rollback, stop transfer traffic and use the new migration source to reverse only this staging migration and its ledger entry before restarting older code; preserve all current wallet records. Existing ordinary-page and export file contracts are retained. Compact checkpoints are advertised through runtime settings; older providers retain the full-state path. No ID-map data is removed and existing wire defaults remain compatible. Existing sync peers remain compatible; additive fields are optional. Run the normal Knex migration for source indexes. Only idempotent getSyncChunk reads retry after HTTP 413. Existing mobile actions, permission modules, UMP v3 tokens, and active WAB accounts require no client migration. Deploy the additive WAB registration-status migration and WAB routes before relying on interrupted-signup recovery; older servers and clients retain their prior wire behavior. To use BRC-177, migrate and upgrade the active remote storage service and its default monitor to Wallet Toolbox 2.11.0 or later before upgrading clients; an older server is rejected before prefunding. Prepared BEEF persistence and rollout controls apply only to the full package's Knex provider, so mobile remote clients require no COOK configuration. Semantic modules may add handleRequest without changing the Wallet interface. Argon2id tokens keep the same parameters and derived bytes across WebAssembly and JavaScript runtimes; no user device setting is required. Host registration is available from the mobile root; concurrent cold calls share a preload attempt, and hosts must make readiness/preload reentrant and cache permanent failures or back off retries. Native and JavaScript results share byte-type and exact-length validation; unrelated hash-wasm errors still propagate without WebAssembly. React Native exports, wire types, and canonical AtomicBEEF behavior are unchanged; use @bsv/sdk 2.4.2 or later and retain THIRD_PARTY_NOTICES.md and LICENSES/. Replace non-loopback HTTP storage and Arcade SSE endpoints with HTTPS. Snapshot APIs and formats are unchanged, but store each complete snapshot in the iOS Keychain, Android Keystore-backed encrypted storage, or a comparably trusted secret store. | Public subpath | Runtime target(s) | Declaration target(s) | diff --git a/docs/reference/stack-facts.md b/docs/reference/stack-facts.md index c03aee770..c46a02323 100644 --- a/docs/reference/stack-facts.md +++ b/docs/reference/stack-facts.md @@ -42,7 +42,7 @@ authorized release action. | helpers | `@bsv/amountinator` | `2.1.5` | node-library | node-cjs, node-esm | node | `>=22` | [packages/helpers/amountinator](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/helpers/amountinator) | | helpers | `@bsv/did` | `0.2.5` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm | browser, node | `>=22` | [packages/helpers/did](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/helpers/did) | | helpers | `@bsv/did-client` | `1.3.1` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm, umd-global | browser, node, umd | `>=22` | [packages/helpers/did-client](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/helpers/did-client) | -| helpers | `@bsv/fund-wallet` | `1.5.0` | cli | cli | node | `>=22` | [packages/helpers/fund-wallet](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/helpers/fund-wallet) | +| helpers | `@bsv/fund-wallet` | `1.5.1` | cli | cli | node | `>=22` | [packages/helpers/fund-wallet](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/helpers/fund-wallet) | | helpers | `@bsv/simple` | `0.5.3` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm | browser, node | `>=22` | [packages/helpers/simple](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/helpers/simple) | | helpers | `@bsv/templates` | `1.10.1` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm | browser, node | `>=22` | [packages/helpers/ts-templates](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/helpers/ts-templates) | | helpers | `@bsv/wallet-helper` | `0.1.7` | node-library | node-cjs, node-esm | node | `>=22` | [packages/helpers/bsv-wallet-helper](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/helpers/bsv-wallet-helper) | @@ -51,7 +51,7 @@ authorized release action. | messaging | `@bsv/authsocket-client` | `2.1.6` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm, umd-global | browser, node, umd | `>=22` | [packages/messaging/authsocket-client](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/messaging/authsocket-client) | | messaging | `@bsv/message-box-client` | `2.5.0` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm, umd-global | browser, node, umd | `>=22` | [packages/messaging/message-box-client](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/messaging/message-box-client) | | messaging | `@bsv/paymail` | `2.4.7` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm | browser, node | `>=22` | [packages/messaging/ts-paymail](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/messaging/ts-paymail) | -| middleware | `@bsv/402-pay` | `0.3.0` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm | browser, node | `>=22` | [packages/middleware/402-pay](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/middleware/402-pay) | +| middleware | `@bsv/402-pay` | `0.3.1` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm | browser, node | `>=22` | [packages/middleware/402-pay](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/middleware/402-pay) | | middleware | `@bsv/auth` | `0.1.4` | node-library | node-cjs, node-esm | node | `>=22` | [packages/middleware/auth](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/middleware/auth) | | middleware | `@bsv/auth-express-middleware` | `2.2.3` | node-library | node-cjs, node-esm | node | `>=22` | [packages/middleware/auth-express-middleware](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/middleware/auth-express-middleware) | | middleware | `@bsv/payment-express-middleware` | `2.1.6` | node-library | node-cjs, node-esm | node | `>=22` | [packages/middleware/payment-express-middleware](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/middleware/payment-express-middleware) | @@ -69,8 +69,8 @@ authorized release action. | wallet | `@bsv/ecpm-permission-module` | `0.1.0` | browser-library | browser-bundler, browser-esm, node-esm | browser, node | `>=22` | [packages/wallet/ecpm-permission-module](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/ecpm-permission-module) | | wallet | `@bsv/wallet-relay` | `0.4.0` | cli-library | browser-bundler, browser-esm, cli, node-cjs, node-esm | browser, node | `>=22` | [packages/wallet/ts-wallet-relay](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/ts-wallet-relay) | | wallet | `@bsv/wallet-toolbox` | `2.13.0` | node-library | node-cjs | node | `>=22` | [packages/wallet/wallet-toolbox](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox) | -| wallet | `@bsv/wallet-toolbox-client` | `2.13.0` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm | browser, node | `>=22` | [packages/wallet/wallet-toolbox/client](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox/client) | -| wallet | `@bsv/wallet-toolbox-mobile` | `2.13.0` | react-native-library | react-native-metro | react-native | `>=22` | [packages/wallet/wallet-toolbox/mobile](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox/mobile) | +| wallet | `@bsv/wallet-toolbox-client` | `2.13.1` | browser-library | browser-bundler, browser-esm, node-cjs, node-esm | browser, node | `>=22` | [packages/wallet/wallet-toolbox/client](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox/client) | +| wallet | `@bsv/wallet-toolbox-mobile` | `2.13.1` | react-native-library | react-native-metro | react-native | `>=22` | [packages/wallet/wallet-toolbox/mobile](https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox/mobile) | ## Standalone infrastructure manifests diff --git a/governance/package-release-notes.json b/governance/package-release-notes.json index dcd17400f..2f5988935 100644 --- a/governance/package-release-notes.json +++ b/governance/package-release-notes.json @@ -7,7 +7,7 @@ "name": "@bsv/402-pay", "publishedVersion": "0.2.5", "releaseType": "minor", - "summary": "Adds an exact-tarball Vite and esbuild contract for the browser-safe client entry point, including a bundle-size ratchet and an assertion that server exports never leak into browser consumers. Retains the hash-pinned pre-uniformization Open BSV License version 4 grant as a scoped continuity notice. Standardizes first-party author metadata on the current BSV Association name. Binds BRC-121 pricing and internalization to the transaction declared by the BRC-95 Atomic BEEF subject, removes unrelated included branches, rejects trailing bytes and non-atomic envelopes, and requires affirmative wallet acceptance before serving paid content.", + "summary": "Adds an exact-tarball Vite and esbuild contract for the browser-safe client entry point, including a bundle-size ratchet and an assertion that server exports never leak into browser consumers. Retains the hash-pinned pre-uniformization Open BSV License version 4 grant as a scoped continuity notice. Standardizes first-party author metadata on the current BSV Association name. Binds BRC-121 pricing and internalization to the transaction declared by the BRC-95 Atomic BEEF subject, removes unrelated included branches, rejects trailing bytes and non-atomic envelopes, and requires affirmative wallet acceptance before serving paid content. Aligns the development-only Vitest runner and V8 coverage provider at 4.1.11; consumer runtime behavior is unchanged.", "migration": "Custom clients must send a strictly framed BRC-95 Atomic BEEF envelope whose subject is the payment transaction; plain BEEF is no longer accepted. Legacy Atomic BEEF containing unrelated branches remains compatible because the server reduces it to the declared subject and dependency closure. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package." }, { @@ -105,7 +105,7 @@ "name": "@bsv/fund-wallet", "publishedVersion": "1.4.4", "releaseType": "minor", - "summary": "Adopts the governed strict TypeScript profile and repository-wide zero-warning lint and formatting contract, and retains the imported fund-metanet source's hash-pinned ISC provenance and notice from its exact source and npm publication. Standardizes first-party author metadata on the current BSV Association name. Removes private-key command-line arguments so wallet secrets cannot leak through shell history or process inspection, adds a non-echoing interactive secret prompt, and preserves protected-stdin automation. Retains the governed package-quality and provenance contract.", + "summary": "Adopts the governed strict TypeScript profile and repository-wide zero-warning lint and formatting contract, and retains the imported fund-metanet source's hash-pinned ISC provenance and notice from its exact source and npm publication. Standardizes first-party author metadata on the current BSV Association name. Removes private-key command-line arguments so wallet secrets cannot leak through shell history or process inspection, adds a non-echoing interactive secret prompt, and preserves protected-stdin automation. Retains the governed package-quality and provenance contract. Aligns the development-only Vitest runner and V8 coverage provider at 4.1.11; consumer runtime behavior is unchanged.", "migration": "Replace --private-key/--privateKey with the interactive secret prompt. Automation must provide exactly one private-key line on standard input from a protected file descriptor; funding APIs and transaction behavior are otherwise unchanged. Distributors must retain THIRD_PARTY_NOTICES.md and LICENSES/ with the package." }, { @@ -224,14 +224,14 @@ "name": "@bsv/wallet-toolbox-client", "publishedVersion": "2.12.0", "releaseType": "minor", - "summary": "Adds optional getValidatedMerklePath provider failover with independent per-call provider traversal. Adds conservative initial sync pages and per-copy adaptation to committed page latency, with proof-work limits independent of byte budgets. Adds negotiated bounded sync transfers, full-frame integrity verification, resumable staged uploads and checkpoint replay protection for oversized records. Adds IndexedDB schema version 6 and bounded sync identity/relation and indexed proof-batch lookups to avoid full-wallet scans during large local restores. Adds negotiated compact committed sync checkpoints and faster binary JSON parsing without scalar-byte reviver callbacks. Adds adaptive wallet-storage sync reads, optional progress totals, disambiguated checkpoints, bounded HTTP 413 recovery, and MySQL/SQLite source indexes while retaining legacy peer compatibility. Adds the built-in browser BRC-177 noSend-expiry signer, IndexedDB schema version 6 lifecycle state, remote storage capability negotiation, default monitor coordination, interruption-safe WAB registration recovery, the optional semantic handleRequest hook, an interoperable asynchronous JavaScript Argon2id fallback when WebAssembly is unavailable, and an optional proven-ready native Argon2id backend for host runtimes. Carries the shared prepared-BEEF-aware createAction contract while IndexedDB remains canonical-only; compatible remote Knex providers can enable COOK independently. Retains transformation modules, BRC-100 wire compatibility, stable IndexedDB totals, current browser compatibility fixes, and earlier Open BSV grants. Carries the spending-authorization, certificate-signature, complete-accounting, credential-transport, and credential-log security corrections into the browser package while documenting snapshots as wallet-equivalent secrets.", + "summary": "Adds optional getValidatedMerklePath provider failover with independent per-call provider traversal. Adds conservative initial sync pages and per-copy adaptation to committed page latency, with proof-work limits independent of byte budgets. Adds negotiated bounded sync transfers, full-frame integrity verification, resumable staged uploads and checkpoint replay protection for oversized records. Adds IndexedDB schema version 6 and bounded sync identity/relation and indexed proof-batch lookups to avoid full-wallet scans during large local restores. Adds negotiated compact committed sync checkpoints and faster binary JSON parsing without scalar-byte reviver callbacks. Adds adaptive wallet-storage sync reads, optional progress totals, disambiguated checkpoints, bounded HTTP 413 recovery, and MySQL/SQLite source indexes while retaining legacy peer compatibility. Adds the built-in browser BRC-177 noSend-expiry signer, IndexedDB schema version 6 lifecycle state, remote storage capability negotiation, default monitor coordination, interruption-safe WAB registration recovery, the optional semantic handleRequest hook, an interoperable asynchronous JavaScript Argon2id fallback when WebAssembly is unavailable, and an optional proven-ready native Argon2id backend for host runtimes. Carries the shared prepared-BEEF-aware createAction contract while IndexedDB remains canonical-only; compatible remote Knex providers can enable COOK independently. Retains transformation modules, BRC-100 wire compatibility, stable IndexedDB totals, current browser compatibility fixes, and earlier Open BSV grants. Carries the spending-authorization, certificate-signature, complete-accounting, credential-transport, and credential-log security corrections into the browser package while documenting snapshots as wallet-equivalent secrets. Aligns the development-only Vitest runner and V8 coverage provider at 4.1.11; consumer runtime behavior is unchanged.", "migration": "Custom WalletServices implementations may omit getValidatedMerklePath; stale RPC proof recovery then uses one fully validated getMerklePath lookup. Sync transfer support requires the 2.13.0 candidate or a later release containing it on the client and each relevant provider; published 2.12.0 does not contain this extension. Providers must run additive migration 2026-09-09-001 for two bounded staging tables before advertising transfer version 1; syncTransfers: false supports a mixed-version rollout. For rollback, stop transfer traffic and use the new migration source to reverse only this staging migration and its ledger entry before restarting older code; preserve all current wallet records. Existing ordinary-page and export file contracts are retained. IndexedDB upgrades automatically to version 6 with a non-unique transaction-ID/user index, preserving existing data and duplicate transaction IDs. Older clients requesting schema version 6 cannot reopen the upgraded database; retain a compatible client for local backups. Compact checkpoints are advertised through runtime settings; older providers retain the full-state path. No ID-map data is removed and existing wire defaults remain compatible. Existing sync peers remain compatible; additive fields are optional. Run the normal Knex migration for source indexes. Only idempotent getSyncChunk reads retry after HTTP 413. Existing browser actions, permission modules, UMP v3 tokens, and active WAB accounts require no client migration; IndexedDB upgrades automatically. Deploy the additive WAB registration-status migration and WAB routes before relying on interrupted-signup recovery; older servers and clients retain their prior wire behavior. To use BRC-177 with remote storage, upgrade the active storage service and its default monitor to Wallet Toolbox 2.11.0 or later before upgrading clients; an older server is rejected before prefunding. Prepared BEEF persistence and rollout controls apply only to the full package's Knex provider, so IndexedDB and remote clients require no COOK configuration. Semantic modules may add handleRequest; installing @bsv/ecpm-permission-module requires registration under the ecpm scheme. Argon2id tokens keep the same parameters and derived bytes across WebAssembly and JavaScript runtimes. Host registration is available from each package root; concurrent cold calls share a preload attempt, and hosts must make readiness/preload reentrant and cache permanent failures or back off retries. Native and JavaScript results share byte-type and exact-length validation; unrelated hash-wasm errors still propagate without WebAssembly. Browser exports, wire types, canonical AtomicBEEF behavior, and pagination contracts are unchanged; use @bsv/sdk 2.4.2 or later and retain THIRD_PARTY_NOTICES.md and LICENSES/. Replace non-loopback HTTP storage and Arcade SSE endpoints with HTTPS. Snapshot APIs and formats are unchanged, but store each complete snapshot only through browser or extension storage backed by an OS Keychain or comparably trusted secret store." }, { "name": "@bsv/wallet-toolbox-mobile", "publishedVersion": "2.12.0", "releaseType": "minor", - "summary": "Adds optional getValidatedMerklePath provider failover with independent per-call provider traversal. Adds conservative initial sync pages and per-copy adaptation to committed page latency, with proof-work limits independent of byte budgets. Adds negotiated bounded sync transfers, full-frame integrity verification, resumable staged uploads and checkpoint replay protection for oversized records. Adds negotiated compact committed sync checkpoints and faster binary JSON parsing without scalar-byte reviver callbacks. Adds adaptive wallet-storage sync reads, optional progress totals, disambiguated checkpoints, bounded HTTP 413 recovery, and MySQL/SQLite source indexes while retaining legacy peer compatibility. Adds the built-in mobile BRC-177 noSend-expiry signer, remote storage capability negotiation, default-monitor ownership coordination across restarts and devices, interruption-safe WAB registration recovery, the optional semantic handleRequest hook, an interoperable asynchronous JavaScript Argon2id fallback for React Native runtimes without WebAssembly, and an optional proven-ready native Argon2id backend for host runtimes. Carries the shared prepared-BEEF-aware createAction contract while mobile storage remains canonical-only; compatible remote Knex providers can enable COOK independently. Retains transformation modules, BRC-100 wire compatibility, current mobile compatibility fixes, and earlier Open BSV grants. Carries the spending-authorization, certificate-signature, complete-accounting, credential-transport, and credential-log security corrections into the React Native package while documenting snapshots as wallet-equivalent secrets.", + "summary": "Adds optional getValidatedMerklePath provider failover with independent per-call provider traversal. Adds conservative initial sync pages and per-copy adaptation to committed page latency, with proof-work limits independent of byte budgets. Adds negotiated bounded sync transfers, full-frame integrity verification, resumable staged uploads and checkpoint replay protection for oversized records. Adds negotiated compact committed sync checkpoints and faster binary JSON parsing without scalar-byte reviver callbacks. Adds adaptive wallet-storage sync reads, optional progress totals, disambiguated checkpoints, bounded HTTP 413 recovery, and MySQL/SQLite source indexes while retaining legacy peer compatibility. Adds the built-in mobile BRC-177 noSend-expiry signer, remote storage capability negotiation, default-monitor ownership coordination across restarts and devices, interruption-safe WAB registration recovery, the optional semantic handleRequest hook, an interoperable asynchronous JavaScript Argon2id fallback for React Native runtimes without WebAssembly, and an optional proven-ready native Argon2id backend for host runtimes. Carries the shared prepared-BEEF-aware createAction contract while mobile storage remains canonical-only; compatible remote Knex providers can enable COOK independently. Retains transformation modules, BRC-100 wire compatibility, current mobile compatibility fixes, and earlier Open BSV grants. Carries the spending-authorization, certificate-signature, complete-accounting, credential-transport, and credential-log security corrections into the React Native package while documenting snapshots as wallet-equivalent secrets. Aligns the development-only Vitest runner and V8 coverage provider at 4.1.11; consumer runtime behavior is unchanged.", "migration": "Custom WalletServices implementations may omit getValidatedMerklePath; stale RPC proof recovery then uses one fully validated getMerklePath lookup. Sync transfer support requires the 2.13.0 candidate or a later release containing it on the client and each relevant provider; published 2.12.0 does not contain this extension. Providers must run additive migration 2026-09-09-001 for two bounded staging tables before advertising transfer version 1; syncTransfers: false supports a mixed-version rollout. For rollback, stop transfer traffic and use the new migration source to reverse only this staging migration and its ledger entry before restarting older code; preserve all current wallet records. Existing ordinary-page and export file contracts are retained. Compact checkpoints are advertised through runtime settings; older providers retain the full-state path. No ID-map data is removed and existing wire defaults remain compatible. Existing sync peers remain compatible; additive fields are optional. Run the normal Knex migration for source indexes. Only idempotent getSyncChunk reads retry after HTTP 413. Existing mobile actions, permission modules, UMP v3 tokens, and active WAB accounts require no client migration. Deploy the additive WAB registration-status migration and WAB routes before relying on interrupted-signup recovery; older servers and clients retain their prior wire behavior. To use BRC-177, migrate and upgrade the active remote storage service and its default monitor to Wallet Toolbox 2.11.0 or later before upgrading clients; an older server is rejected before prefunding. Prepared BEEF persistence and rollout controls apply only to the full package's Knex provider, so mobile remote clients require no COOK configuration. Semantic modules may add handleRequest without changing the Wallet interface. Argon2id tokens keep the same parameters and derived bytes across WebAssembly and JavaScript runtimes; no user device setting is required. Host registration is available from the mobile root; concurrent cold calls share a preload attempt, and hosts must make readiness/preload reentrant and cache permanent failures or back off retries. Native and JavaScript results share byte-type and exact-length validation; unrelated hash-wasm errors still propagate without WebAssembly. React Native exports, wire types, and canonical AtomicBEEF behavior are unchanged; use @bsv/sdk 2.4.2 or later and retain THIRD_PARTY_NOTICES.md and LICENSES/. Replace non-loopback HTTP storage and Arcade SSE endpoints with HTTPS. Snapshot APIs and formats are unchanged, but store each complete snapshot in the iOS Keychain, Android Keystore-backed encrypted storage, or a comparably trusted secret store." }, { diff --git a/governance/repository-health/baselines.json b/governance/repository-health/baselines.json index 5897a4409..60d5f01b9 100644 --- a/governance/repository-health/baselines.json +++ b/governance/repository-health/baselines.json @@ -305,14 +305,14 @@ "create-bsv-app": "1.1.1", "@bsv/did": "0.2.5", "@bsv/did-client": "1.3.1", - "@bsv/fund-wallet": "1.5.0", + "@bsv/fund-wallet": "1.5.1", "@bsv/simple": "0.5.3", "@bsv/templates": "1.10.1", "@bsv/authsocket": "2.1.7", "@bsv/authsocket-client": "2.1.6", "@bsv/message-box-client": "2.5.0", "@bsv/paymail": "2.4.7", - "@bsv/402-pay": "0.3.0", + "@bsv/402-pay": "0.3.1", "@bsv/auth": "0.1.4", "@bsv/auth-express-middleware": "2.2.3", "@bsv/payment-express-middleware": "2.1.6", @@ -328,8 +328,8 @@ "@bsv/btms-permission-module": "1.2.0", "@bsv/ecpm-permission-module": "0.1.0", "@bsv/wallet-relay": "0.4.0", - "@bsv/wallet-toolbox-client": "2.13.0", - "@bsv/wallet-toolbox-mobile": "2.13.0", + "@bsv/wallet-toolbox-client": "2.13.1", + "@bsv/wallet-toolbox-mobile": "2.13.1", "@bsv/wallet-toolbox": "2.13.0" } } diff --git a/packages/helpers/fund-wallet/package.json b/packages/helpers/fund-wallet/package.json index ba241533b..bd4dce3e8 100644 --- a/packages/helpers/fund-wallet/package.json +++ b/packages/helpers/fund-wallet/package.json @@ -1,7 +1,7 @@ { "name": "@bsv/fund-wallet", "private": false, - "version": "1.5.0", + "version": "1.5.1", "sideEffects": false, "engines": { "node": ">=22" @@ -45,7 +45,7 @@ "@bsv/sdk": "workspace:^", "@types/node": "^26.1.2", "@typescript/native": "npm:typescript@7.0.2", - "@vitest/coverage-v8": "4.1.10", + "@vitest/coverage-v8": "4.1.11", "fast-check": "^4.9.0", "oxlint": "^1.76.0", "tsdown": "0.22.14", diff --git a/packages/middleware/402-pay/CHANGELOG.md b/packages/middleware/402-pay/CHANGELOG.md index 1e211b1e3..35be14643 100644 --- a/packages/middleware/402-pay/CHANGELOG.md +++ b/packages/middleware/402-pay/CHANGELOG.md @@ -2,6 +2,11 @@ ## [Unreleased] +### Maintenance + +- Align the development-only Vitest runner and V8 coverage provider at 4.1.11. + Consumer APIs and payment protocol behavior are unchanged. + ### Security - Bind route pricing and wallet internalization to the BRC-95 Atomic BEEF diff --git a/packages/middleware/402-pay/package.json b/packages/middleware/402-pay/package.json index 491b14a93..ba1e25eec 100644 --- a/packages/middleware/402-pay/package.json +++ b/packages/middleware/402-pay/package.json @@ -1,6 +1,6 @@ { "name": "@bsv/402-pay", - "version": "0.3.0", + "version": "0.3.1", "sideEffects": false, "engines": { "node": ">=22" @@ -8,7 +8,7 @@ "publishConfig": { "access": "public" }, - "description": "BRC-121 Simple 402 Payments — server middleware and client for BSV micropayments over HTTP", + "description": "BRC-121 Simple 402 Payments \u2014 server middleware and client for BSV micropayments over HTTP", "type": "commonjs", "main": "./dist/index.cjs", "module": "./dist/index.mjs", @@ -97,7 +97,7 @@ "@bsv/sdk": "workspace:^", "@types/node": "^26.1.2", "@typescript/native": "npm:typescript@7.0.2", - "@vitest/coverage-v8": "4.1.10", + "@vitest/coverage-v8": "4.1.11", "fast-check": "^4.9.0", "oxlint": "^1.76.0", "tsdown": "0.22.14", diff --git a/packages/wallet/wallet-toolbox/client/package.json b/packages/wallet/wallet-toolbox/client/package.json index 01e064e6a..0e56879d3 100644 --- a/packages/wallet/wallet-toolbox/client/package.json +++ b/packages/wallet/wallet-toolbox/client/package.json @@ -1,6 +1,6 @@ { "name": "@bsv/wallet-toolbox-client", - "version": "2.13.0", + "version": "2.13.1", "type": "module", "sideEffects": false, "engines": { @@ -83,7 +83,7 @@ "@bsv/sdk": "workspace:^", "@types/node": "^26.1.2", "@typescript/native": "npm:typescript@7.0.2", - "@vitest/coverage-v8": "4.1.10", + "@vitest/coverage-v8": "4.1.11", "esbuild": "0.28.1", "oxlint": "^1.76.0", "tsdown": "0.22.14", diff --git a/packages/wallet/wallet-toolbox/mobile/package.json b/packages/wallet/wallet-toolbox/mobile/package.json index 23b65c3d3..050bb1412 100644 --- a/packages/wallet/wallet-toolbox/mobile/package.json +++ b/packages/wallet/wallet-toolbox/mobile/package.json @@ -1,6 +1,6 @@ { "name": "@bsv/wallet-toolbox-mobile", - "version": "2.13.0", + "version": "2.13.1", "type": "module", "sideEffects": false, "engines": { @@ -86,7 +86,7 @@ "@react-native/babel-preset": "0.86.2", "@types/node": "^26.1.2", "@typescript/native": "npm:typescript@7.0.2", - "@vitest/coverage-v8": "4.1.10", + "@vitest/coverage-v8": "4.1.11", "hermes-compiler": "260318099.0.1", "metro": "0.87.0", "metro-config": "0.87.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 25a1fb68e..43ed32ca5 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -31,7 +31,7 @@ importers: version: 9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2)) '@stryker-mutator/vitest-runner': specifier: 9.6.1 - version: 9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2))(vitest@4.1.11(@types/node@26.1.2)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0))) + version: 9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2))(vitest@4.1.11) esbuild: specifier: 0.28.1 version: 0.28.1 @@ -80,7 +80,7 @@ importers: version: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0) vitest: specifier: ^4.1.11 - version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.11)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) conformance/runner: dependencies: @@ -507,8 +507,8 @@ importers: specifier: npm:typescript@7.0.2 version: typescript@7.0.2 '@vitest/coverage-v8': - specifier: 4.1.10 - version: 4.1.10(vitest@4.1.11) + specifier: 4.1.11 + version: 4.1.11(vitest@4.1.11) fast-check: specifier: ^4.9.0 version: 4.9.0 @@ -523,7 +523,7 @@ importers: version: '@typescript/typescript6@6.0.2' vitest: specifier: ^4.1.11 - version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.11)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) packages/helpers/simple: dependencies: @@ -837,8 +837,8 @@ importers: specifier: npm:typescript@7.0.2 version: typescript@7.0.2 '@vitest/coverage-v8': - specifier: 4.1.10 - version: 4.1.10(vitest@4.1.11) + specifier: 4.1.11 + version: 4.1.11(vitest@4.1.11) fast-check: specifier: ^4.9.0 version: 4.9.0 @@ -853,7 +853,7 @@ importers: version: '@typescript/typescript6@6.0.2' vitest: specifier: ^4.1.11 - version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.11)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) packages/middleware/auth: devDependencies: @@ -1898,8 +1898,8 @@ importers: specifier: npm:typescript@7.0.2 version: typescript@7.0.2 '@vitest/coverage-v8': - specifier: 4.1.10 - version: 4.1.10(vitest@4.1.11) + specifier: 4.1.11 + version: 4.1.11(vitest@4.1.11) esbuild: specifier: 0.28.1 version: 0.28.1 @@ -1917,7 +1917,7 @@ importers: version: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0) vitest: specifier: ^4.1.11 - version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.11)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) packages/wallet/wallet-toolbox/mobile: dependencies: @@ -1950,8 +1950,8 @@ importers: specifier: npm:typescript@7.0.2 version: typescript@7.0.2 '@vitest/coverage-v8': - specifier: 4.1.10 - version: 4.1.10(vitest@4.1.11) + specifier: 4.1.11 + version: 4.1.11(vitest@4.1.11) hermes-compiler: specifier: 260318099.0.1 version: 260318099.0.1 @@ -1972,7 +1972,7 @@ importers: version: '@typescript/typescript6@6.0.2' vitest: specifier: ^4.1.11 - version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + version: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.11)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) packages: @@ -4397,11 +4397,11 @@ packages: babel-plugin-react-compiler: optional: true - '@vitest/coverage-v8@4.1.10': - resolution: {integrity: sha512-IM49HmthevbgAO4anp1hwtoT9wYe59w0LR00gr+eagHE+ZJ5lK4sLPeO0ubgoJcwLk6dehU3R24N+FbEEKDc8g==} + '@vitest/coverage-v8@4.1.11': + resolution: {integrity: sha512-8MVGEFnJIcdGjcbfKmeq8z0pZHH0JlVtoVZH9Q/qwUp6wyFnEJUBMrw9DCaj+ra3vShGmhavjalMIhPNxZAUcw==} peerDependencies: - '@vitest/browser': 4.1.10 - vitest: 4.1.10 + '@vitest/browser': 4.1.11 + vitest: 4.1.11 peerDependenciesMeta: '@vitest/browser': optional: true @@ -4420,9 +4420,6 @@ packages: vite: optional: true - '@vitest/pretty-format@4.1.10': - resolution: {integrity: sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==} - '@vitest/pretty-format@4.1.11': resolution: {integrity: sha512-yiZzPbGTS9Sr/JpFl8zHrcIkAofNbFV6k21vIgQN/cY/oxZeXhJv5sc/MBJ5jFKWmWs+oJHw0UXLZjmf931+Vw==} @@ -4435,9 +4432,6 @@ packages: '@vitest/spy@4.1.11': resolution: {integrity: sha512-apNa/prQy2qCeywhnixOHPRCgGNhvg7T4Dapfl1GahLp/R+uhBm5cPyFoNVyqsNd2h1nJxL6BqqdIjiABL60YA==} - '@vitest/utils@4.1.10': - resolution: {integrity: sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==} - '@vitest/utils@4.1.11': resolution: {integrity: sha512-zTCVGpyFsGWBhllOyKlTw/vnr6D9qxsfSDyfbyZmTyjHw5N/VuvzHpHoQjm2ZJzn4RJgx5w4r7V0er69CmLgPQ==} @@ -8096,10 +8090,6 @@ packages: resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==} engines: {node: '>=12.0.0'} - tinyrainbow@3.1.0: - resolution: {integrity: sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==} - engines: {node: '>=14.0.0'} - tinyrainbow@3.1.1: resolution: {integrity: sha512-yau8yJdTt989Mm0Bd/236QnzEiPf2xLLTqUZRUJOo/3CB078LSwzei343DgtJVmfJKJE3TMINY1u42SQsP6mXw==} engines: {node: '>=14.0.0'} @@ -10952,14 +10942,14 @@ snapshots: '@stryker-mutator/util@9.6.1': {} - '@stryker-mutator/vitest-runner@9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2))(vitest@4.1.11(@types/node@26.1.2)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)))': + '@stryker-mutator/vitest-runner@9.6.1(@stryker-mutator/core@9.6.1(@types/node@26.1.2))(vitest@4.1.11)': dependencies: '@stryker-mutator/api': 9.6.1 '@stryker-mutator/core': 9.6.1(@types/node@26.1.2) '@stryker-mutator/util': 9.6.1 semver: 7.8.5 tslib: 2.8.1 - vitest: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + vitest: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.11)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) '@testing-library/dom@10.4.1': dependencies: @@ -11461,10 +11451,10 @@ snapshots: '@rolldown/pluginutils': 1.0.1 vite: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0) - '@vitest/coverage-v8@4.1.10(vitest@4.1.11)': + '@vitest/coverage-v8@4.1.11(vitest@4.1.11)': dependencies: '@bcoe/v8-coverage': 1.0.2 - '@vitest/utils': 4.1.10 + '@vitest/utils': 4.1.11 ast-v8-to-istanbul: 1.0.5 istanbul-lib-coverage: 3.2.2 istanbul-lib-report: 3.0.1 @@ -11472,8 +11462,8 @@ snapshots: magicast: 0.5.3 obug: 2.1.4 std-env: 4.2.0 - tinyrainbow: 3.1.0 - vitest: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) + tinyrainbow: 3.1.1 + vitest: 4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.11)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) '@vitest/expect@4.1.11': dependencies: @@ -11492,10 +11482,6 @@ snapshots: optionalDependencies: vite: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0) - '@vitest/pretty-format@4.1.10': - dependencies: - tinyrainbow: 3.1.1 - '@vitest/pretty-format@4.1.11': dependencies: tinyrainbow: 3.1.1 @@ -11514,12 +11500,6 @@ snapshots: '@vitest/spy@4.1.11': {} - '@vitest/utils@4.1.10': - dependencies: - '@vitest/pretty-format': 4.1.10 - convert-source-map: 2.0.0 - tinyrainbow: 3.1.1 - '@vitest/utils@4.1.11': dependencies: '@vitest/pretty-format': 4.1.11 @@ -15985,8 +15965,6 @@ snapshots: fdir: 6.5.0(picomatch@4.0.7) picomatch: 4.0.7 - tinyrainbow@3.1.0: {} - tinyrainbow@3.1.1: {} tldts-core@6.1.86: {} @@ -16362,7 +16340,7 @@ snapshots: tsx: 4.23.1 yaml: 2.9.0 - vitest@4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.10)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)): + vitest@4.1.11(@types/node@26.1.2)(@vitest/coverage-v8@4.1.11)(jsdom@26.1.0)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)): dependencies: '@vitest/expect': 4.1.11 '@vitest/mocker': 4.1.11(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(terser@5.49.0)(tsx@4.23.1)(yaml@2.9.0)) @@ -16386,7 +16364,7 @@ snapshots: why-is-node-running: 2.3.0 optionalDependencies: '@types/node': 26.1.2 - '@vitest/coverage-v8': 4.1.10(vitest@4.1.11) + '@vitest/coverage-v8': 4.1.11(vitest@4.1.11) jsdom: 26.1.0 transitivePeerDependencies: - msw