@astrale-os/kernel-protocol 0.5.0-beta.21 → 0.5.0-beta.24

package/CHANGELOG.md

@@ -24,6 +24,127 @@
 * the first supported V2 release is a coordinated `1.0.0`, not a compatible continuation of the
   current `0.x` line; package and wire versions remain independent as specified in
   [the protocol architecture](./.spec/architecture.md)
+## [0.5.0-beta.24](https://github.com/astrale-os/kernel/compare/kernel-protocol-v0.5.0-beta.23...kernel-protocol-v0.5.0-beta.24) (2026-08-29)
+
+
+### Features
+
+* **api:** carry view iframe requirements ([#531](https://github.com/astrale-os/kernel/issues/531)) ([4eedb0b](https://github.com/astrale-os/kernel/commit/4eedb0b3430f5f642942e913cf1c5806e09b7cf1))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @astrale-os/kernel-core bumped to 0.9.0-beta.23
+
+## [0.5.0-beta.23](https://github.com/astrale-os/kernel/compare/kernel-protocol-v0.5.0-beta.22...kernel-protocol-v0.5.0-beta.23) (2026-08-29)
+
+
+### ⚠ BREAKING CHANGES
+
+* View declarations now contain only target and optional description. Legacy View.auth fields are rejected; callable authorization, View.resolve admission, Policies, and Shell handshakes remain independent.
+
+### Features
+
+* add aliased domain dependency projection ([afb799b](https://github.com/astrale-os/kernel/commit/afb799b0d61fd6f7436fe659f558a6a62ef1e7a1))
+* add aliased Domain dependency projection ([9c4c4fb](https://github.com/astrale-os/kernel/commit/9c4c4fb4f942c0c5e3961faf4428ed299d42f847))
+* add compiled remote domain serving ([ac9e365](https://github.com/astrale-os/kernel/commit/ac9e36538982a91359712e4cbbc68353ea2cc1a2))
+* add compiled remote Domain serving ([6149628](https://github.com/astrale-os/kernel/commit/6149628820d1294981156ff5b50ceaa522ea0403))
+* add source-qualified Invocation identity ([#331](https://github.com/astrale-os/kernel/issues/331)) ([ac87f3c](https://github.com/astrale-os/kernel/commit/ac87f3c67907290f43b21ca1efe2c3b51541c73d))
+* **api:** ratify token exchange lifecycle ([#519](https://github.com/astrale-os/kernel/issues/519)) ([33831ff](https://github.com/astrale-os/kernel/commit/33831ffac82dc96f5d71488d6f410d1710b85ca0))
+* **callable:** preserve native binary streams and status ([d14c6f1](https://github.com/astrale-os/kernel/commit/d14c6f13492c14a3363b2c4af59c738034752fa2))
+* **clients:** normalize safe failure evidence ([459cd4d](https://github.com/astrale-os/kernel/commit/459cd4ddd8b7fe000841ae854d0e5645e3809842))
+* **clients:** normalize safe failure evidence ([034a5e5](https://github.com/astrale-os/kernel/commit/034a5e5a45cafd3ee297ef36ffe98625c77c1813))
+* **invocation:** preserve same-schema remote domain calls ([1c54830](https://github.com/astrale-os/kernel/commit/1c54830829c0e49612f354f5c4b8d4a12cc7e22c))
+* remove Property visibility and cut DSL V2 ([#518](https://github.com/astrale-os/kernel/issues/518)) ([4d99e8f](https://github.com/astrale-os/kernel/commit/4d99e8f0837136cf6be257ab3a6df666b62e06b5))
+* remove View authentication declarations ([4a5bfe0](https://github.com/astrale-os/kernel/commit/4a5bfe016717267d31257748f95e7f646782f876))
+* **runtime:** preserve remote Domain calls across same-schema deployments ([40c237b](https://github.com/astrale-os/kernel/commit/40c237bc4877068ba94b53a29d916e7c8f633f1e))
+* **runtime:** support buffered and streaming binary ([fcd73f9](https://github.com/astrale-os/kernel/commit/fcd73f99c75963257b595449b1a0e0e4e234a05d))
+* **schema:** make atomic installs convergent ([ed198fb](https://github.com/astrale-os/kernel/commit/ed198fba6d8d9d4e0092cd1bc64f454b717851e5))
+* **schema:** split inspection and add convergence ([6afbd39](https://github.com/astrale-os/kernel/commit/6afbd39506b8a9e37225aded1c02f94ffa64e54b))
+* **schema:** split ready reads and make atomic installs convergent ([dd96d3e](https://github.com/astrale-os/kernel/commit/dd96d3ed13c374b0db19f7edbfeff1dc65ae03f9))
+
+
+### Bug Fixes
+
+* align the official kernel package cohort ([#371](https://github.com/astrale-os/kernel/issues/371)) ([30fda63](https://github.com/astrale-os/kernel/commit/30fda63157bbaf756af2d46efed4e2fc5bc17d4b))
+* **api:** finish binary delivery taxonomy ([#462](https://github.com/astrale-os/kernel/issues/462)) ([2fce294](https://github.com/astrale-os/kernel/commit/2fce29427449280e2629d07817780b121f6c6b79))
+* **api:** keep introspection codec runtime-only ([12678d7](https://github.com/astrale-os/kernel/commit/12678d7cd6446dc2b068a3cc32fef6196e657f2d))
+* **api:** let Vite bundle MessagePack ([c882bcd](https://github.com/astrale-os/kernel/commit/c882bcd05f37b5fdba807601b77abc7e8de3f5b7))
+* **api:** let Vite bundle MessagePack ([99f16cf](https://github.com/astrale-os/kernel/commit/99f16cf2fd9b7984db8a344af12aa2e6407065ac))
+* **api:** retain visibility-free DSL as V1 ([#526](https://github.com/astrale-os/kernel/issues/526)) ([e24c1ea](https://github.com/astrale-os/kernel/commit/e24c1ea257e8567d9bd33c6ada0de63bb346a496))
+* **ci:** enforce the official Kernel cohort ([#469](https://github.com/astrale-os/kernel/issues/469)) ([f6ea87a](https://github.com/astrale-os/kernel/commit/f6ea87a47f7b1f9c415e404dc1a09b480a2a3f5f))
+* **core:** preserve callable identity and runtime boundaries ([#394](https://github.com/astrale-os/kernel/issues/394)) ([ad67dad](https://github.com/astrale-os/kernel/commit/ad67dad84aef3c8b79f769009595ea1f1229026b))
+* **deps:** refresh the Kernel dependency cohort ([#393](https://github.com/astrale-os/kernel/issues/393)) ([883e7bb](https://github.com/astrale-os/kernel/commit/883e7bb7ce17eecb7dad1c94ad2089c576ba3746))
+* **dsl:** close runtime facade contracts ([ff99450](https://github.com/astrale-os/kernel/commit/ff99450ce3889013f57c39293e7022b32e186ca6))
+* **dsl:** close semantic qualification gaps ([4a48cd7](https://github.com/astrale-os/kernel/commit/4a48cd729bcaf839ceda880b26ade064d6505fe2))
+* **kernel:** enforce executable callable boundaries ([e4e6c24](https://github.com/astrale-os/kernel/commit/e4e6c24a58b8d7b81b02d978298e9effcccd084a))
+* **packages:** keep workspace guard private ([e0ba76c](https://github.com/astrale-os/kernel/commit/e0ba76c5ae163245e31115e2a72e0663db0f5320))
+* **packages:** keep workspace guard private ([d260a52](https://github.com/astrale-os/kernel/commit/d260a52329cde5ce4b0260c43a3bbf28cb78f408))
+* **packages:** keep workspace guard private ([a3e82ec](https://github.com/astrale-os/kernel/commit/a3e82ec671f07252a5966b4de988e275e4078b8c))
+* **protocol:** admit intrinsic kernel capability requirements ([11f9b18](https://github.com/astrale-os/kernel/commit/11f9b18cb0b837eac05d484f8dd42ba5d939c3fd))
+* **protocol:** admit intrinsic Kernel capability requirements ([5345d82](https://github.com/astrale-os/kernel/commit/5345d826110b318907a4bcb96f2c8c2b1f58a116))
+* **protocol:** keep introspection runtime-only ([9ebc40b](https://github.com/astrale-os/kernel/commit/9ebc40b7b329922f462c44eee98ab8cc0201f1a7))
+* **protocol:** publish runtime artifact export ([13fc0e1](https://github.com/astrale-os/kernel/commit/13fc0e1c4d25f68760190be2c8afc2d95bed6610))
+* **protocol:** resolve functional dependencies from bundle closure ([4cf5c4e](https://github.com/astrale-os/kernel/commit/4cf5c4e0ddbe07bcadf28550a70aada90bc8dd6f))
+* **protocol:** resolve functional dependencies from bundle closure ([cdfcfeb](https://github.com/astrale-os/kernel/commit/cdfcfebc72cdacd41da844a4d0db9080c4231e58))
+* publish a TypeScript-compatible cohort ([#406](https://github.com/astrale-os/kernel/issues/406)) ([f1a0cd0](https://github.com/astrale-os/kernel/commit/f1a0cd09f2f0b4498f9fa8924b2e319cac6552b7))
+* **release:** add package repository metadata ([8238077](https://github.com/astrale-os/kernel/commit/8238077d47a96c0f7b50a1bae8769fe4faab45b7))
+* **release:** align the published beta cohort ([8f2dc4a](https://github.com/astrale-os/kernel/commit/8f2dc4a7156aeee4dc9034624d2ffa2b3583d5b8))
+* **release:** publish exact Kernel cohort edges ([04629b8](https://github.com/astrale-os/kernel/commit/04629b89515aa665ede2f9fe058888bad45ab896))
+* **release:** publish exact Kernel cohort edges ([14f2c52](https://github.com/astrale-os/kernel/commit/14f2c52329874fdad43114a964521599c8313eab))
+* **runtime:** clarify Domain transition Foundation without narrowing behavior ([bce2184](https://github.com/astrale-os/kernel/commit/bce21848e645d2570cf056d56cc0d4489c656d14))
+* **runtime:** close domain transition foundation drift ([310f95f](https://github.com/astrale-os/kernel/commit/310f95fadfb1a85fb19ac52b69a58427d22a5788))
+* **runtime:** preserve existing dependency behavior ([73c2b6c](https://github.com/astrale-os/kernel/commit/73c2b6c5a0d8a0dc11102d8687d7e67d9f437741))
+* **schema:** harden introspection evidence and caches ([9516eb5](https://github.com/astrale-os/kernel/commit/9516eb510242427296861ef9e730b01861e45463))
+* **server:** preserve compatible remote schema continuity ([#508](https://github.com/astrale-os/kernel/issues/508)) ([306a275](https://github.com/astrale-os/kernel/commit/306a275dd7253810085f5b8c86cef15fffd95089))
+* stabilize governed Kernel integration ([#347](https://github.com/astrale-os/kernel/issues/347)) ([6869e3f](https://github.com/astrale-os/kernel/commit/6869e3fc4de1e73ff701bb38383e89c934ddfdf2))
+* **system:** clear Codegraph diagnostic debt ([f7a8e1f](https://github.com/astrale-os/kernel/commit/f7a8e1f5c5694d9c3c45d95fde184f0d5f2c7343))
+* **system:** clear Codegraph diagnostic debt ([45f86a9](https://github.com/astrale-os/kernel/commit/45f86a9ce14a224efed0e07966a5df8d7a892078))
+* **system:** preserve erased domain and runtime facade contracts ([b525d47](https://github.com/astrale-os/kernel/commit/b525d4781d2d58776ec6b4bbe1e045a3c1accebb))
+* **system:** preserve public revision vocabulary ([5e990d0](https://github.com/astrale-os/kernel/commit/5e990d0b28578a040b80c508943552c46b8632ae))
+
+
+### Performance Improvements
+
+* **operations:** release only the Host production closure ([3f9d61a](https://github.com/astrale-os/kernel/commit/3f9d61afe6b4f19f4dfd0bd5e454e38f951aaf2a))
+
+
+### Documentation
+
+* **api:** finish buffered and streaming binary vocabulary ([af00cda](https://github.com/astrale-os/kernel/commit/af00cda06b1744b5120cdd3ea3bc39ca58efcceb))
+* **api:** finish buffered and streaming binary vocabulary ([11a28be](https://github.com/astrale-os/kernel/commit/11a28bec361ead8c0ae32e55f545c63042bb1539))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @astrale-os/kernel-core bumped to 0.9.0-beta.22
+    * @astrale-os/kernel-dsl bumped to 0.2.0-beta.17
+
+## [0.5.0-beta.22](https://github.com/astrale-os/kernel/compare/kernel-protocol-v0.5.0-beta.21...kernel-protocol-v0.5.0-beta.22) (2026-08-29)
+
+
+### Features
+
+* **api:** ratify token exchange lifecycle ([#519](https://github.com/astrale-os/kernel/issues/519)) ([33831ff](https://github.com/astrale-os/kernel/commit/33831ffac82dc96f5d71488d6f410d1710b85ca0))
+* remove Property visibility and cut DSL V2 ([#518](https://github.com/astrale-os/kernel/issues/518)) ([4d99e8f](https://github.com/astrale-os/kernel/commit/4d99e8f0837136cf6be257ab3a6df666b62e06b5))
+
+
+### Bug Fixes
+
+* **api:** retain visibility-free DSL as V1 ([#526](https://github.com/astrale-os/kernel/issues/526)) ([e24c1ea](https://github.com/astrale-os/kernel/commit/e24c1ea257e8567d9bd33c6ada0de63bb346a496))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @astrale-os/kernel-core bumped to 0.9.0-beta.21
+    * @astrale-os/kernel-dsl bumped to 0.2.0-beta.16
+
 ## [0.5.0-beta.21](https://github.com/astrale-os/kernel/compare/kernel-protocol-v0.5.0-beta.20...kernel-protocol-v0.5.0-beta.21) (2026-08-28)
 
 

package/dist/publication/bindings/index.d.ts

@@ -1,3 +1,3 @@
 export { admitCallableBinding, admitCallableKey, type CallableBinding } from './callable.js';
 export { acceptInvocationEndpoints, type InvocationEndpoints } from './invocation.js';
-export { admitViewBinding, type ViewBinding } from './view.js';
+export { admitViewBinding, type IframeRequirements, type ViewBinding } from './view.js';

package/dist/publication/bindings/view.d.ts

@@ -3,5 +3,12 @@ export interface ViewBinding {
     readonly view: Key.View;
     readonly href: string;
     readonly handshake: 'shell' | 'none';
+    readonly iframe?: IframeRequirements;
+}
+export interface IframeRequirements {
+    readonly sandbox?: readonly string[];
+    readonly allow?: readonly string[];
 }
 export declare function admitViewBinding(input: unknown, origin: string): ViewBinding;
+/** Authoring-only normalization used before a Publication receives its canonical ETag. */
+export declare function canonicalizeViewBinding(input: unknown, origin: string): ViewBinding;

package/dist/publication/bindings/view.js

@@ -1,9 +1,17 @@
 import { Key } from '@astrale-os/kernel-dsl/v1/addressing';
 import { absoluteHttpUrl, exact, record } from '../content.js';
 import { fail } from '../error.js';
+const TOKEN = /^[a-z][a-z0-9-]*$/u;
 export function admitViewBinding(input, origin) {
+    return readViewBinding(input, origin, false);
+}
+/** Authoring-only normalization used before a Publication receives its canonical ETag. */
+export function canonicalizeViewBinding(input, origin) {
+    return readViewBinding(input, origin, true);
+}
+function readViewBinding(input, origin, canonicalize) {
     const value = record(input, 'PUBLICATION_VIEW_INVALID', 'Published View binding is invalid.');
-    exact(value, ['view', 'href', 'handshake'], 'PUBLICATION_VIEW_INVALID');
+    exact(value, ['view', 'href', 'handshake', 'iframe'], 'PUBLICATION_VIEW_INVALID');
     let view;
     try {
         view = Key(String(value.view));
@@ -20,9 +28,110 @@ export function admitViewBinding(input, origin) {
     if (value.handshake !== 'shell' && value.handshake !== 'none') {
         fail('PUBLICATION_VIEW_INVALID', 'View handshake is invalid.');
     }
+    const iframe = admitIframeRequirements(dataValue(value, 'iframe'), value.handshake, canonicalize);
     return Object.freeze({
         view,
         href: absoluteHttpUrl(value.href, true, 'PUBLICATION_VIEW_INVALID'),
         handshake: value.handshake,
+        ...(iframe === undefined ? {} : { iframe }),
+    });
+}
+function admitIframeRequirements(input, handshake, canonicalize) {
+    if (input === undefined)
+        return undefined;
+    const value = plainRecord(input);
+    exactOwnKeys(value, ['sandbox', 'allow']);
+    if (!canonicalize && (!Object.hasOwn(value, 'sandbox') || !Object.hasOwn(value, 'allow'))) {
+        invalid();
+    }
+    const sandbox = tokens(dataValue(value, 'sandbox'), canonicalize);
+    const allow = tokens(dataValue(value, 'allow'), canonicalize);
+    assertRelationships(sandbox);
+    const baselineSandbox = handshake === 'shell' ? ['allow-same-origin', 'allow-scripts'] : ['allow-scripts'];
+    const baselineAllow = handshake === 'shell' ? ['clipboard-write'] : [];
+    if (!canonicalize &&
+        (sandbox.some((token) => baselineSandbox.includes(token)) ||
+            allow.some((feature) => baselineAllow.includes(feature)))) {
+        invalid();
+    }
+    const canonicalSandbox = canonicalize
+        ? sandbox.filter((token) => !baselineSandbox.includes(token))
+        : sandbox;
+    const canonicalAllow = canonicalize
+        ? allow.filter((feature) => !baselineAllow.includes(feature))
+        : allow;
+    if (!canonicalize && canonicalSandbox.length === 0 && canonicalAllow.length === 0)
+        invalid();
+    if (canonicalSandbox.length === 0 && canonicalAllow.length === 0)
+        return undefined;
+    return Object.freeze({
+        sandbox: Object.freeze(canonicalSandbox),
+        allow: Object.freeze(canonicalAllow),
     });
 }
+function plainRecord(input) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input))
+        invalid();
+    const prototype = Object.getPrototypeOf(input);
+    if (prototype !== Object.prototype && prototype !== null)
+        invalid();
+    return input;
+}
+function exactOwnKeys(input, allowed) {
+    const keys = new Set(allowed);
+    if (Reflect.ownKeys(input).some((key) => typeof key !== 'string' || !keys.has(key)))
+        invalid();
+}
+function dataValue(input, key) {
+    const descriptor = Object.getOwnPropertyDescriptor(input, key);
+    if (descriptor === undefined)
+        return undefined;
+    if (!('value' in descriptor))
+        invalid();
+    return descriptor.value;
+}
+function tokens(input, canonicalize) {
+    if (input === undefined)
+        return [];
+    if (!Array.isArray(input))
+        invalid();
+    const descriptors = Object.getOwnPropertyDescriptors(input);
+    const values = [];
+    for (let index = 0; index < input.length; index += 1) {
+        const descriptor = descriptors[String(index)];
+        if (descriptor === undefined || !('value' in descriptor))
+            invalid();
+        if (typeof descriptor.value !== 'string' || !TOKEN.test(descriptor.value))
+            invalid();
+        values.push(descriptor.value);
+    }
+    for (const key of Reflect.ownKeys(descriptors)) {
+        if (key === 'length')
+            continue;
+        if (typeof key !== 'string' || !/^(0|[1-9][0-9]*)$/u.test(key) || Number(key) >= input.length) {
+            invalid();
+        }
+    }
+    if (canonicalize)
+        return [...new Set(values)].sort();
+    for (let index = 1; index < values.length; index += 1) {
+        if (values[index - 1] >= values[index])
+            invalid();
+    }
+    return values;
+}
+function assertRelationships(sandbox) {
+    const tokens = new Set(sandbox);
+    if (tokens.has('allow-popups-to-escape-sandbox') && !tokens.has('allow-popups'))
+        invalid();
+    if (tokens.has('allow-top-navigation') && tokens.has('allow-top-navigation-by-user-activation')) {
+        invalid();
+    }
+    if (tokens.has('allow-top-navigation-to-custom-protocols') &&
+        (tokens.has('allow-top-navigation') || tokens.has('allow-popups'))) {
+        invalid();
+    }
+}
+function invalid() {
+    return fail('PUBLICATION_VIEW_INVALID', 'View iframe requirements are invalid.');
+}

package/dist/publication/index.d.ts

@@ -14,4 +14,4 @@ export { ClassOperationOrder, admitRequirements, validateRequirements, type Capa
 export { acceptReference, compareReference, compareReferences, matchesReference, reference, type PublicationRef, type PublicationReferenceRelation, } from './reference.js';
 export type { BodyPick, CredentialSource, HttpMethod, HttpRoute, HttpRouteDeclaration, RouteBody, RouteHeaders, SingleCredentialSource, } from './route.js';
 export type { Schema } from './schema.js';
-export { acceptInvocationEndpoints, type CallableBinding, type InvocationEndpoints, type ViewBinding, } from './bindings/index.js';
+export { acceptInvocationEndpoints, type CallableBinding, type IframeRequirements, type InvocationEndpoints, type ViewBinding, } from './bindings/index.js';

package/dist/publication/publication.js

@@ -3,6 +3,7 @@ import { accept as acceptIssuerId } from '@astrale-os/kernel-core/auth/issuer';
 import { Key, patterns } from '@astrale-os/kernel-dsl/v1/addressing';
 import * as portable from '@astrale-os/kernel-dsl/value';
 import { admitCallableBinding, admitViewBinding } from './bindings/index.js';
+import { canonicalizeViewBinding } from './bindings/view.js';
 import { array, deepFreeze, exact, record, unique } from './content.js';
 import { admitEndpoint as admitDeliveryEndpoint } from './delivery-endpoint.js';
 import { fail } from './error.js';
@@ -33,7 +34,8 @@ export function url(input) {
     return `${admitted.replace(/\/+$/u, '')}${PATH}`;
 }
 export function seal(input) {
-    return acceptPublication({ ...input, etag: computeEtag(input) }, false);
+    const canonical = withoutEtag(acceptPublication({ ...input, etag: 'canonicalizing' }, false, true));
+    return acceptPublication({ ...canonical, etag: computeEtag(canonical) }, false);
 }
 export function accept(input) {
     const publication = acceptPublication(input, true);
@@ -45,7 +47,7 @@ export function accept(input) {
 export function encode(input) {
     return portable.json.encode(input);
 }
-function acceptPublication(input, requireEtag) {
+function acceptPublication(input, requireEtag, canonicalizeViews = false) {
     const value = record(input, 'PUBLICATION_INVALID', 'Expected a Publication object.');
     exact(value, [
         'format',
@@ -80,7 +82,7 @@ function acceptPublication(input, requireEtag) {
     exact(bindingSet, ['callables', 'views'], 'PUBLICATION_BINDING_INVALID');
     const callables = array(bindingSet.callables, 'PUBLICATION_BINDING_INVALID').map((entry) => admitCallableBinding(entry, origin));
     unique(callables.map(({ callable }) => callable), 'PUBLICATION_BINDING_INVALID', 'callable binding');
-    const views = array(bindingSet.views, 'PUBLICATION_VIEW_INVALID').map((entry) => admitViewBinding(entry, origin));
+    const views = array(bindingSet.views, 'PUBLICATION_VIEW_INVALID').map((entry) => canonicalizeViews ? canonicalizeViewBinding(entry, origin) : admitViewBinding(entry, origin));
     unique(views.map(({ view }) => view), 'PUBLICATION_VIEW_INVALID', 'View binding');
     const routes = array(value.routes, 'PUBLICATION_ROUTE_INVALID').map((entry) => admitRoute(entry, origin));
     unique(routes.map(({ name }) => name), 'PUBLICATION_ROUTE_INVALID', 'route name');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-protocol",
-  "version": "0.5.0-beta.21",
+  "version": "0.5.0-beta.24",
   "description": "Portable Astrale invocation, publication, installation, routing, and issuer protocols",
   "license": "Apache-2.0",
   "repository": {
@@ -133,8 +133,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-core": "0.9.0-beta.20",
-    "@astrale-os/kernel-dsl": "0.2.0-beta.15",
+    "@astrale-os/kernel-core": "0.9.0-beta.23",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.17",
     "@noble/hashes": "2.3.0"
   },
   "devDependencies": {