Wallet interoperability and reliability: bounded sync, proof recovery and BRC-118 payments

.github/workflows/ci.yml

@@ -498,7 +498,9 @@ jobs:
     runs-on: ubuntu-latest
     # The governed air-gap codec target currently instruments 352 mutants and
     # legitimately exceeds 20 minutes on a hosted runner.
-    timeout-minutes: ${{ contains(fromJSON('["revenue-lineage-package","revenue-lineage-graph","sdk-revenue-listing-funding","output-lookup-session-records","output-lookup-session-payloads","wallet-recovery-codec","wallet-recovery-installation","wallet-recovery-store","wallet-funding-store","wallet-recovery-transitions","wallet-recovery-controller","root-eviction-storage","root-eviction-journal","root-eviction-records","wallet-retained-snapshot","wallet-snapshot-sync","wallet-snapshot-sync-destination","wallet-snapshot-sync-rows","wallet-snapshot-archive","wallet-snapshot-remote-http"]'), matrix.target) && 90 || 45 }}
+    # Complete snapshot source-guard service qualification took 58m35s locally,
+    # before hosted checkout/install. Preserve the 45-minute default elsewhere.
+    timeout-minutes: ${{ contains(fromJSON('["revenue-lineage-package","revenue-lineage-graph","sdk-revenue-listing-funding","output-lookup-session-records","output-lookup-session-payloads","wallet-recovery-codec","wallet-recovery-installation","wallet-recovery-store","wallet-funding-store","wallet-recovery-transitions","wallet-recovery-controller","root-eviction-storage","root-eviction-journal","root-eviction-records","wallet-retained-snapshot","wallet-snapshot-journal","wallet-snapshot-sync","wallet-snapshot-sync-destination","wallet-snapshot-sync-rows","wallet-snapshot-archive","wallet-snapshot-remote-http","wallet-snapshot-remote-reader","wallet-snapshot-remote-service"]'), matrix.target) && 90 || 45 }}
     permissions:
       contents: read
     strategy:
@@ -602,6 +604,31 @@ jobs:
         with:
           pattern: mutation-wallet-retained-snapshot-*
           path: .mutation-parts/wallet-retained-snapshot
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        if: contains(fromJSON(needs.prepare.outputs.partition-targets || '[]'), 'wallet-snapshot-journal')
+        with:
+          pattern: mutation-wallet-snapshot-journal-*
+          path: .mutation-parts/wallet-snapshot-journal
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        if: contains(fromJSON(needs.prepare.outputs.partition-targets || '[]'), 'wallet-snapshot-remote-http')
+        with:
+          pattern: mutation-wallet-snapshot-remote-http-*
+          path: .mutation-parts/wallet-snapshot-remote-http
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        if: contains(fromJSON(needs.prepare.outputs.partition-targets || '[]'), 'wallet-snapshot-remote-service')
+        with:
+          pattern: mutation-wallet-snapshot-remote-service-*
+          path: .mutation-parts/wallet-snapshot-remote-service
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        if: contains(fromJSON(needs.prepare.outputs.partition-targets || '[]'), 'wallet-snapshot-archive')
+        with:
+          pattern: mutation-wallet-snapshot-archive-*
+          path: .mutation-parts/wallet-snapshot-archive
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        if: contains(fromJSON(needs.prepare.outputs.partition-targets || '[]'), 'wallet-snapshot-remote-reader')
+        with:
+          pattern: mutation-wallet-snapshot-remote-reader-*
+          path: .mutation-parts/wallet-snapshot-remote-reader
       - name: Require every selected canonical partition target gate
         if: needs.prepare.outputs.partition-targets != '[]' && needs.prepare.outputs.partition-targets != ''
         env:
@@ -998,6 +1025,36 @@ jobs:
           name: build-outputs
           path: .ci-artifacts
       - run: tar --extract --gzip --file .ci-artifacts/build-outputs.tar.gz
+      - name: Verify native snapshot crash recovery
+        if: matrix.id == 'shard-1'
+        working-directory: packages/wallet/wallet-toolbox
+        run: node test/storage/snapshotArchiveCrash.cjs
+      - name: Provision pinned native snapshot MySQL fixture
+        if: matrix.id == 'shard-1'
+        working-directory: packages/wallet/wallet-toolbox
+        timeout-minutes: 5
+        env:
+          TS_STACK_SNAPSHOT_HOSTED_MYSQL: '1'
+        run: node test/storage/snapshotArchiveDocker.cjs provision-hosted-image
+      - name: Verify native snapshot MySQL recovery
+        if: matrix.id == 'shard-1'
+        working-directory: packages/wallet/wallet-toolbox
+        timeout-minutes: 5
+        env:
+          TS_STACK_SNAPSHOT_HOSTED_MYSQL: '1'
+        run: node test/storage/runSnapshotArchiveMysql.cjs
+      - name: Verify native journal SQLite recovery
+        if: matrix.id == 'shard-1'
+        working-directory: packages/wallet/wallet-toolbox
+        timeout-minutes: 3
+        run: node test/storage/snapshotJournalSqliteCrash.cjs
+      - name: Verify native journal MySQL recovery
+        if: matrix.id == 'shard-1'
+        working-directory: packages/wallet/wallet-toolbox
+        timeout-minutes: 10
+        env:
+          TS_STACK_SNAPSHOT_HOSTED_MYSQL: '1'
+        run: node test/storage/runSnapshotJournalMysql.cjs
       - name: Generate wallet-toolbox coverage shard
         env:
           WALLET_SHARD: ${{ matrix.shard }}

.github/workflows/codeql.yml

@@ -32,10 +32,9 @@ jobs:
         language:
           - actions
           - javascript-typescript
-          # The only Python files are deterministic OpenAPI output under
-          # conformance/generated/**. The CodeQL config excludes that owned
-          # generated boundary, while codegen CI verifies its specs, locked
-          # generator, and output.
+          # Scan the independently authored BRC-118 conformance oracle.
+          # Generated OpenAPI clients remain excluded by the owned registry.
+          - python
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 

.github/workflows/conformance.yml

@@ -31,6 +31,8 @@ jobs:
           cache: pnpm
       - name: Install deps
         run: pnpm install --frozen-lockfile --ignore-scripts
+      - name: Verify independent BRC-118 wire and signature vectors
+        run: python3 conformance/runner/scripts/brc118-vectors.py
       - name: Build TS runner dependencies
         run: >-
           pnpm -r

.github/workflows/mutation-tests.yml

@@ -103,7 +103,9 @@ jobs:
     needs: prepare
     runs-on: ubuntu-latest
     # Preserve the acknowledged wallet/overlays90-minute target union.
-    timeout-minutes: ${{ contains(fromJSON('["revenue-lineage-package","revenue-lineage-graph","sdk-revenue-listing-funding","output-lookup-session-records","output-lookup-session-payloads","wallet-recovery-codec","wallet-recovery-installation","wallet-recovery-store","wallet-funding-store","wallet-recovery-transitions","wallet-recovery-controller","root-eviction-storage","root-eviction-journal","root-eviction-records","wallet-retained-snapshot","wallet-snapshot-sync","wallet-snapshot-sync-destination","wallet-snapshot-sync-rows","wallet-snapshot-archive","wallet-snapshot-remote-http"]'), matrix.target) && 90 || 45 }}
+    # Complete snapshot source-guard service qualification took 58m35s locally,
+    # before hosted checkout/install. Preserve the 45-minute default elsewhere.
+    timeout-minutes: ${{ contains(fromJSON('["revenue-lineage-package","revenue-lineage-graph","sdk-revenue-listing-funding","output-lookup-session-records","output-lookup-session-payloads","wallet-recovery-codec","wallet-recovery-installation","wallet-recovery-store","wallet-funding-store","wallet-recovery-transitions","wallet-recovery-controller","root-eviction-storage","root-eviction-journal","root-eviction-records","wallet-retained-snapshot","wallet-snapshot-journal","wallet-snapshot-sync","wallet-snapshot-sync-destination","wallet-snapshot-sync-rows","wallet-snapshot-archive","wallet-snapshot-remote-http","wallet-snapshot-remote-reader","wallet-snapshot-remote-service"]'), matrix.target) && 90 || 45 }}
     permissions:
       contents: read
     strategy:

.sonarcloud.properties

@@ -10,7 +10,7 @@ sonar.exclusions=packages/verifast/src/wasm/bdk-core.*,conformance/generated/**,
 # into self-contained Docker/package build contexts and checked byte-for-byte
 # in CI. Analyze the code for issues, but do not report intentional generated
 # copies as source duplication.
-sonar.cpd.exclusions=**/*.test.ts,**/*.test.tsx,**/*.spec.ts,**/*.spec.tsx,**/*.man.test.ts,**/__test__/**,**/__tests__/**,**/test/**,**/tests/**,**/*.vectors.ts,**/eslint.config.js,infra/wab/src/security/rateLimitPolicy.ts,infra/uhrp-server-basic/src/security/rateLimitPolicy.ts,infra/uhrp-server-cloud-bucket/src/security/rateLimitPolicy.ts,infra/message-box-server/src/security/rateLimitPolicy.ts,infra/uhrp-server-basic/src/security/edgePolicy.ts,infra/uhrp-server-cloud-bucket/src/security/edgePolicy.ts,infra/message-box-server/src/security/edgePolicy.ts,infra/chaintracks-server/src/security/edgePolicy.ts,packages/overlays/overlay-express/src/security/edgePolicy.ts,packages/wallet/wallet-toolbox/src/storage/remoting/edgePolicy.ts,infra/uhrp-server-cloud-bucket/src/resourceLimits.ts,infra/uhrp-server-cloud-bucket/src/utils/network.ts,infra/wallet-infra/src/KnexPaymentReplayStore.ts,infra/uhrp-server-basic/src/chirp/core/**,infra/uhrp-server-cloud-bucket/src/chirp/core/**,infra/uhrp-server-basic/src/chirp/openapi.ts,infra/uhrp-server-cloud-bucket/src/chirp/openapi.ts,infra/uhrp-server-cloud-bucket/src/chirp/contracts.ts,infra/uhrp-server-cloud-bucket/src/chirp/commitIndex.ts,infra/uhrp-server-cloud-bucket/src/chirp/routes.ts,infra/uhrp-server-cloud-bucket/src/chirp/bodyMiddleware.ts,infra/chaintracks-server/src/telemetry.ts,infra/wab/src/telemetry.ts,infra/uhrp-server-basic/src/telemetry.ts,infra/uhrp-server-cloud-bucket/src/telemetry.ts,infra/wallet-infra/src/telemetry.ts,infra/message-box-server/src/telemetry.ts
+sonar.cpd.exclusions=**/*.test.ts,**/*.test.tsx,**/*.spec.ts,**/*.spec.tsx,**/*.man.test.ts,**/__test__/**,**/__tests__/**,**/test/**,**/tests/**,**/*.vectors.ts,**/eslint.config.js,infra/wab/src/security/rateLimitPolicy.ts,infra/uhrp-server-basic/src/security/rateLimitPolicy.ts,infra/uhrp-server-cloud-bucket/src/security/rateLimitPolicy.ts,infra/message-box-server/src/security/rateLimitPolicy.ts,infra/uhrp-server-basic/src/security/edgePolicy.ts,infra/uhrp-server-cloud-bucket/src/security/edgePolicy.ts,infra/message-box-server/src/security/edgePolicy.ts,infra/chaintracks-server/src/security/edgePolicy.ts,packages/overlays/overlay-express/src/security/edgePolicy.ts,packages/wallet/wallet-toolbox/src/storage/remoting/edgePolicy.ts,infra/uhrp-server-cloud-bucket/src/resourceLimits.ts,infra/uhrp-server-cloud-bucket/src/utils/network.ts,infra/wallet-infra/src/KnexPaymentReplayStore.ts,infra/uhrp-server-basic/src/chirp/core/**,infra/uhrp-server-cloud-bucket/src/chirp/core/**,infra/uhrp-server-basic/src/chirp/openapi.ts,infra/uhrp-server-cloud-bucket/src/chirp/openapi.ts,infra/uhrp-server-cloud-bucket/src/chirp/contracts.ts,infra/uhrp-server-cloud-bucket/src/chirp/commitIndex.ts,infra/uhrp-server-cloud-bucket/src/chirp/routes.ts,infra/uhrp-server-cloud-bucket/src/chirp/bodyMiddleware.ts,infra/chaintracks-server/src/telemetry.ts,infra/wab/src/telemetry.ts,infra/uhrp-server-basic/src/telemetry.ts,infra/uhrp-server-cloud-bucket/src/telemetry.ts,infra/wallet-infra/src/telemetry.ts,infra/message-box-server/src/telemetry.ts,infra/uhrp-server-cloud-bucket/dev/bin/nodemon.js,infra/uhrp-server-cloud-bucket/dev/check-watch.cjs,infra/wab/dev/bin/nodemon.js,infra/wab/dev/check-watch.cjs
 # Narrow compatibility exceptions are registered with owner, evidence, review
 # dates, and objective removal conditions in repository-health/exceptions.json.
 sonar.issue.ignore.multicriteria=werrProtocolNames,curveSingletonAlias,curveSingletonReturn,scriptOpcodeDispatch

conformance/META.json

@@ -20,10 +20,20 @@
       "sdk.keys.publickey",
       "sdk.crypto.signature"
     ],
-    "BRC-74": ["sdk.transactions.merklepath", "broadcast.merklepath"],
-    "BRC-77": ["sdk.compat.bsm"],
-    "BRC-31": ["messaging.brc31.authrite-signature"],
-    "BRC-29": ["wallet.brc29.payment-derivation", "payments.brc29-payment-protocol"],
+    "BRC-74": [
+      "sdk.transactions.merklepath",
+      "broadcast.merklepath"
+    ],
+    "BRC-77": [
+      "sdk.compat.bsm"
+    ],
+    "BRC-31": [
+      "messaging.brc31.authrite-signature"
+    ],
+    "BRC-29": [
+      "wallet.brc29.payment-derivation",
+      "payments.brc29-payment-protocol"
+    ],
     "BRC-100": [
       "wallet.brc100.getpublickey",
       "wallet.brc100.createhmac",
@@ -55,26 +65,66 @@
       "wallet.brc100.getversion",
       "wallet.storage.adapterconformance"
     ],
-    "BRC-121": ["payments.brc121"],
-    "BRC-26": ["storage.uhrp-http"],
-    "BRC-167": ["storage.chirp-v1"],
-    "BRC-62": ["overlay.submit"],
-    "BRC-22": ["overlay.lookup", "overlay.topicmanagement"],
-    "BRC-20": ["broadcast.arcsubmit", "broadcast.merklepath"],
-    "BRC-21": ["sync.gasprotocol"],
-    "BRC-40": ["sync.brc40"],
-    "BRC-14": ["sdk.scripts.evaluation"],
-    "merkle-service": ["broadcast.merkle-service"],
-    "message-box": ["messaging.messagebox-http"],
-    "chaintracks-v2": ["sync.chaintracks-v2-http"],
-    "BRC-141": ["transport.air-gap-optical"],
-    "BRC-103": ["auth.brc31-handshake", "messaging.authsocket"],
-    "BRC-104": ["auth.brc31-handshake"]
+    "BRC-121": [
+      "payments.brc121"
+    ],
+    "BRC-26": [
+      "storage.uhrp-http"
+    ],
+    "BRC-167": [
+      "storage.chirp-v1"
+    ],
+    "BRC-62": [
+      "overlay.submit"
+    ],
+    "BRC-22": [
+      "overlay.lookup",
+      "overlay.topicmanagement"
+    ],
+    "BRC-20": [
+      "broadcast.arcsubmit",
+      "broadcast.merklepath"
+    ],
+    "BRC-21": [
+      "sync.gasprotocol"
+    ],
+    "BRC-40": [
+      "sync.brc40"
+    ],
+    "BRC-14": [
+      "sdk.scripts.evaluation"
+    ],
+    "merkle-service": [
+      "broadcast.merkle-service"
+    ],
+    "message-box": [
+      "messaging.messagebox-http"
+    ],
+    "chaintracks-v2": [
+      "sync.chaintracks-v2-http"
+    ],
+    "BRC-141": [
+      "transport.air-gap-optical"
+    ],
+    "BRC-103": [
+      "auth.brc31-handshake",
+      "messaging.authsocket"
+    ],
+    "BRC-104": [
+      "auth.brc31-handshake",
+      "payments.brc118"
+    ],
+    "BRC-118": [
+      "payments.brc118"
+    ],
+    "BRC-105": [
+      "payments.brc118"
+    ]
   },
   "stats": {
-    "total_files": 77,
-    "total_vectors": 6700,
-    "last_updated": "2026-09-24"
+    "total_files": 78,
+    "total_vectors": 6706,
+    "last_updated": "2026-09-28"
   },
   "regression_index": {
     "beef-v2-txid-panic": "go-sdk#306",

conformance/PARITY_MATRIX.json

@@ -1,21 +1,21 @@
 {
   "schema_version": "1.0",
-  "generated_at": "2026-09-24",
+  "generated_at": "2026-09-28",
   "source": "ts-stack conformance corpus",
   "description": "Machine-readable parity status for cross-language SDK implementations (Go, Rust, Python). Use this to track and drive conformance.",
   "summary": {
-    "total_files": 77,
-    "total_vectors": 6700,
-    "fully_required_files": 58,
+    "total_files": 78,
+    "total_vectors": 6706,
+    "fully_required_files": 59,
     "files_with_intended": 17,
     "files_with_mixed_status": 15,
     "vectors_by_status": {
-      "required": 6496,
+      "required": 6502,
       "intended": 204,
       "skipped": 7
     },
     "by_reason_category": {
-      "fully_supported": 1283,
+      "fully_supported": 1289,
       "governed_vector_skip": 50,
       "historical_regression": 36,
       "partial_ts_behavioral_difference": 5116,
@@ -145,6 +145,18 @@
       "reason_category": "fully_supported",
       "categories": []
     },
+    {
+      "path": "payments/brc118.json",
+      "id": "payments.brc118",
+      "total_vectors": 6,
+      "file_level_parity": "required",
+      "effective_status": "required",
+      "required_count": 6,
+      "intended_count": 0,
+      "skipped_count": 0,
+      "reason_category": "fully_supported",
+      "categories": []
+    },
     {
       "path": "payments/brc121.json",
       "id": "payments.brc121",