Release v0.19.0 - xchain-encoder

.github/workflows/ci.yml

@@ -56,11 +56,28 @@ jobs:
           ssh-key: ${{ secrets.XCHAIN_HUB_DEPLOY_KEY }}
           path: xchain-hub
 
+      - name: Check out the sibling xchain-decoder (envelope gate twin)
+        uses: actions/checkout@v4
+        with:
+          repository: XChain-Platform/xchain-decoder
+          ref: ${{ github.ref == 'refs/heads/master' && 'master' || 'develop' }}
+          path: xchain-decoder
+
       - name: Use Node.js 22
         uses: actions/setup-node@v4
         with:
           node-version: "22"
 
+      - name: Install dependencies
+        working-directory: xchain-encoder
+        run: if [ -f package-lock.json ]; then npm ci; else npm install; fi
+
+      - name: Envelope recognition gate equals the decoder copy (hard)
+        working-directory: xchain-encoder
+        env:
+          XCHAIN_REQUIRE_SIBLINGS: "1"
+        run: npx mocha test/unit/xchain_encoder/envelope_recognition_gate.test.js --exit
+
       - name: Coin-registry byte-identity vs canonical
         run: xchain-hub/bin/sync-coins.sh --check --only xchain-encoder
 
@@ -76,6 +93,23 @@ jobs:
             console.log("consensus pin conformance OK (testnet, regtest)");
           '
 
+      # Identity pin: bin/pins/identity.json records the sha256 of the vendored
+      # coin files and the roundtrip conformance fixture. The tool compares only
+      # the entries the pin names, so an emptied pin would read as holding: first
+      # refuse a pin with no coin or conformance entries, then fail on any moved
+      # or missing file, so a stale pin cannot reach develop or master green
+      # through a direct push or a release pull request. bin/ci-full.sh runs the
+      # same commands before a push; both use only node builtins, so no install.
+      - name: Identity pin (vendored coins, conformance fixture)
+        working-directory: xchain-encoder
+        run: |
+          node -e '
+            const pin = require("./bin/pins/identity.json");
+            for (const group of ["coins", "conformance"]) {
+              if (!Object.keys(pin[group] || {}).length) throw new Error("identity pin names no " + group + " files");
+            }
+          ' && node bin/pin-identity.js --compare bin/pins/identity.json
+
   # Coverage ratchet: re-run the unit suite under c8 and fail if line or
   # branch coverage drops below this repo's floor in bin/coverage-thresholds.json
   # (mirrored into the `coverage:check` npm script). Catches silent coverage

CHANGELOG.md

@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.19.0] - 2026-09-16
+
+### Added
+- Consensus: the XBRIDGE action name and its escrow role addresses are recognized.
+
+### Changed
+- Audited transitive packages move to their patched releases (lockfile only).
+- Restructured under the platform code-structure standard (feature directories, snake_case files, split test suites, restored comments); consensus identity byte-identical and pinned.
+
 ## [0.18.0] - 2026-09-11
 
 ### Fixed

README.md

@@ -4,8 +4,8 @@
 # XChain Platform Encoder
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-0.17.0-blue" alt="Version">
-  <img src="https://img.shields.io/badge/tests-1%2C738%2B%20passing-brightgreen" alt="Tests">
+  <img src="https://img.shields.io/badge/version-0.19.0-blue" alt="Version">
+  <img src="https://img.shields.io/badge/tests-1%2C787%2B%20passing-brightgreen" alt="Tests">
   <img src="https://img.shields.io/badge/node-%3E%3D22-green" alt="Node">
   <img src="https://img.shields.io/badge/license-AGPL--3.0--or--later-blue" alt="License">
 </p>
@@ -126,7 +126,7 @@ indefinitely. A `since` in the future holds the window closed until it opens.
 `reason` is optional, bounded, and stripped to printable ASCII.
 
 `xchain-node` writes and removes this file automatically around a bootstrap
-publish (`src/services/EncoderMaintenanceWindow.js`).
+publish (`src/services/encoder_maintenance_window.js`).
 
 ## Metrics and log shipping (optional, off by default)
 
@@ -165,20 +165,20 @@ neither source sets one, so these defaults hold on an unconfigured box:
 | `npm run build` | Production browser bundle (minified) -> `dist/xchain_encoder.min.js` |
 | `npm run build:dev` | Development browser bundle (unminified) |
 | `npm run smoke-test` | Smoke tests (~52 tests, <1s) |
-| `npm run test:unit` | Unit tests (870 tests) |
+| `npm run test:unit` | Unit tests (910 tests) |
 | `npm run test:integration` | Integration tests (115 tests) |
 | `npm run test:boundary` | Boundary condition tests (~101 tests) |
-| `npm run test:security` | Security tests (63 tests) |
+| `npm run test:security` | Security tests (67 tests) |
 | `npm run test:fuzz` | Property-based fuzz tests (6 suites, 6 tests) |
 | `npm run test:chaos` | Chaos engineering tests (65 tests) |
 | `npm run test:e2e` | End-to-end tests (~158 tests) |
-| `npm run test:regression` | Regression tests (302 tests) |
+| `npm run test:regression` | Regression tests (307 tests) |
 | `npm run mutate` | Full mutation testing via StrykerJS |
 | `npm run mutate:quick` | Quick mutation check (XChainEncoder.js only) |
 | `npm run bench` | Performance benchmarks |
 | `npm run bench:full` | Extended benchmarks with JSON output |
 | `npm run bench:soak` | Soak test (sustained load) |
-| `npm test` | Unit tests (hermetic, no external services, 870 tests) |
+| `npm test` | Unit tests (hermetic, no external services, 910 tests) |
 | `npm run test:regtest` | Regtest integration tests (requires local bitcoind) |
 
 ## Test Suite

bin/ci-full.sh

@@ -92,6 +92,29 @@ run_tier "drift: coin consensus-pin conformance" node -e '
   console.log("consensus pin conformance OK (testnet, regtest)");
 '
 
+# --- identity pin (this gate only; no ci.yml job runs it) --------------
+# bin/pins/identity.json holds the sha256 of the vendored coin files and the
+# roundtrip conformance fixture. The tool compares only the entries the pin
+# names, so an emptied pin would read as holding: the tier first refuses a pin
+# with no coin or conformance entries, then fails on any moved or missing file.
+identity_pin_check() {
+  node -e '
+    const pin = require("./bin/pins/identity.json");
+    for (const group of ["coins", "conformance"]) {
+      if (!Object.keys(pin[group] || {}).length) throw new Error("identity pin names no " + group + " files");
+    }
+  ' && node bin/pin-identity.js --compare bin/pins/identity.json
+}
+run_tier "identity pin (vendored coins, conformance fixture)" identity_pin_check
+
+# --- suite-title pin (this gate only; no ci.yml job runs it) -----------
+# Guards that every npm test script still collects the same test titles it
+# did at the pin, through the declared rename and split maps.
+run_tier "suite-title pin (at1)" node bin/suite-title-map.js \
+  --compare bin/pins/at1-suite-titles.json \
+  --rename-map bin/pins/test-rename-map.json \
+  --split-map bin/pins/suite-title-splits.json
+
 # --- job: coverage (needs: ci) ------------------------------------------
 # The workflow checks out every repo in .ci-siblings before this job so the
 # ratchet re-run measures coverage with the same cross-repo tests exercised

bin/coverage-thresholds.json

@@ -1,5 +1,5 @@
 {
-  "comment": "Coverage floors for the CI coverage job (regression floors, ~1-1.5 points below measured, not tier targets; raise as coverage climbs). Mirrored into the coverage:check npm script in package.json and guarded by test/unit/coverage-thresholds-sync.test.js. Re-measured 2026-08-14 WITH the declared siblings checked out, which is what the coverage job now does: 87.77 lines/statements, 86.67 branches, 67.48 functions over 587 unit tests; the functions floor stays at its existing 66, already inside the band, and remains a holding line rather than a target.",
+  "comment": "Coverage floors for the CI coverage job (regression floors, ~1-1.5 points below measured, not tier targets; raise as coverage climbs). Mirrored into the coverage:check npm script in package.json and guarded by test/unit/repo/coverage_thresholds_sync.test.js. Re-measured 2026-08-14 WITH the declared siblings checked out, which is what the coverage job now does: 87.77 lines/statements, 86.67 branches, 67.48 functions over 587 unit tests; the functions floor stays at its existing 66, already inside the band, and remains a holding line rather than a target.",
   "lines": 86.2,
   "statements": 86.2,
   "branches": 85.1,

bin/pin-identity.js

@@ -0,0 +1,106 @@
+#!/usr/bin/env node
+/*********************************************************************
+ *
+ * Copyright © 2025-2026 Dankest, LLC
+ * Based on XChain Platform by Dankest, LLC - https://dankest.llc
+ *
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ *
+ * This file is part of XChain Platform. Licensed under the GNU Affero
+ * General Public License v3.0 or later; see LICENSE.md.
+ *
+ **********************************************************************
+ *
+ * The AT1 identity pin for xchain-encoder: sha256 of every file whose byte
+ * identity a later milestone must not move by accident. Two populations:
+ *
+ *   coins        the five hub-vendored src/coins/ files, refreshed by
+ *                sync-coins.sh and never edited here. A rename or a byte
+ *                edit both move the hash, so this pin catches either.
+ *   conformance  test/fixtures/roundtrip-conformance.json, whose canonical
+ *                copy is THIS repo (decoder and sdk copy it outward). It is
+ *                pinned here for the same reason: nothing here may move
+ *                a byte in it, only its consumers may.
+ *
+ * USAGE
+ *   node bin/pin-identity.js --out bin/pins/identity.json    write the pin
+ *   node bin/pin-identity.js --compare bin/pins/identity.json  re-read and
+ *                                                             diff against it
+ *
+ ********************************************************************/
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+
+const REPO_ROOT = path.resolve(__dirname, '..');
+
+const COINS_FILES = [
+    'src/coins/BTC.js',
+    'src/coins/LTC.js',
+    'src/coins/DOGE.js',
+    'src/coins/index.js',
+    'src/coins/consensus_pin.js',
+];
+
+const CONFORMANCE_FILES = [
+    'test/fixtures/roundtrip-conformance.json',
+];
+
+function sha256(rel) {
+    const abs = path.join(REPO_ROOT, rel);
+    const buf = fs.readFileSync(abs);
+    return crypto.createHash('sha256').update(buf).digest('hex');
+}
+
+function buildPin() {
+    const coins = {};
+    for (const rel of COINS_FILES) coins[rel] = sha256(rel);
+    const conformance = {};
+    for (const rel of CONFORMANCE_FILES) conformance[rel] = sha256(rel);
+    return { capturedAt: new Date().toISOString(), coins, conformance };
+}
+
+function parseArgs(argv) {
+    const opts = {};
+    for (let i = 0; i < argv.length; i += 1) {
+        if (argv[i] === '--out') { opts.out = path.resolve(argv[i + 1]); i += 1; }
+        else if (argv[i] === '--compare') { opts.compare = path.resolve(argv[i + 1]); i += 1; }
+    }
+    return opts;
+}
+
+function main() {
+    const opts = parseArgs(process.argv.slice(2));
+    const pin = buildPin();
+    if (opts.compare) {
+        const prior = JSON.parse(fs.readFileSync(opts.compare, 'utf8'));
+        const diffs = [];
+        for (const rel of Object.keys(prior.coins || {})) {
+            if (pin.coins[rel] !== prior.coins[rel]) diffs.push(`coins:${rel}`);
+        }
+        for (const rel of Object.keys(prior.conformance || {})) {
+            if (pin.conformance[rel] !== prior.conformance[rel]) diffs.push(`conformance:${rel}`);
+        }
+        if (diffs.length) {
+            console.log(`${diffs.length} identity difference(s): ${diffs.join(', ')}`);
+            process.exitCode = 1;
+            return;
+        }
+        console.log('identity pin holds: coins and conformance byte-identical');
+        return;
+    }
+    if (opts.out) {
+        fs.mkdirSync(path.dirname(opts.out), { recursive: true });
+        fs.writeFileSync(opts.out, `${JSON.stringify(pin, null, 2)}\n`);
+        console.log(`written to ${path.relative(REPO_ROOT, opts.out)}`);
+        return;
+    }
+    console.log(JSON.stringify(pin, null, 2));
+}
+
+if (require.main === module) main();
+
+module.exports = { buildPin, COINS_FILES, CONFORMANCE_FILES };