@cross-deck/node 1.5.3 → 1.7.0

package/CHANGELOG.md

@@ -4,6 +4,72 @@ All notable changes to `@cross-deck/node` will be documented here. The
 format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.7.0] — 2026-06-11
+
+**PARK on version-rejection — events are held, never dropped.** A third
+event-queue outcome for the day the server stops accepting an outdated event
+format. Purely additive; no public API change.
+
+**Added:**
+
+- **PARK (HTTP `426` / `sdk_version_unsupported`).** A version-rejection is now
+  recognised as its own outcome — distinct from retry (transient) and drop
+  (invalid): the data is good, only the wire dialect is stale. The queue
+  **holds** the events (folded to the buffer front, FIFO-capped at 1000),
+  **hushes** (stops flushing a known-too-old payload), **signals** once (one
+  `console.warn` + a typed `sdk.parked` debug event), and delivers on restart
+  after you upgrade. Node's queue is in-memory, so a process restart *before*
+  upgrade clears the held events — an opt-in disk-backed queue is on the
+  roadmap; the messaging says exactly this, never more.
+- **`sdk_version_unsupported`** added to the error-codes catalogue with
+  remediation, and `version_error` to `CrossdeckErrorType`. `CrossdeckError`
+  carries `minVersion` / `surface` from the 426 body. New `onParked` callback.
+
+**Fixed (no public API change):**
+
+- The empty-input contract is now codified cross-SDK as
+  `invalid-input-rejected-natively`: `track("")` / `aliasIdentity` with a
+  missing `userId` reject at the call site by throwing a typed `CrossdeckError`
+  (`missing_event_name` / `missing_user_id`) and never reach the wire — the
+  Node/JS idiom of the invariant *"invalid input never crashes the app."* No
+  behaviour change; the guarantee is now documented and bundled.
+- Standalone-build fix: the `contract-failed` schema-lock test now reads the
+  bundled contract (`_contracts-bundled.ts`) instead of the monorepo
+  `contracts/` path, so the published-mirror release build no longer fails.
+
+See https://cross-deck.com/docs/sdk-event-durability/ for the durability contract.
+
+## [1.6.0] — 2026-06-10
+
+Event Envelope v1 conformance — server-enforced contract (spec
+`backend/docs/event-envelope-spec-v1.md`).
+
+**Added:**
+
+- **`envelopeVersion: 1`** (integer) on every batch POST body. Both the
+  queue-flush path (`EventQueue.flush()`) and the direct `ingest()` path
+  now emit this field. The server will reject payloads missing this field
+  once ingest enforcement lands.
+- **`seq`** (number) on every wire event — per-session monotonic sequence
+  number. Captured synchronously with the event's `timestamp` at
+  `track()` / enqueue time. Counter starts at 0 when the `CrossdeckServer`
+  instance is constructed (session start) and increments once per event.
+  Matches spec §3: monotonic within a session, never reset between
+  background/foreground (Node has no such lifecycle; the instance lifetime
+  IS the session).
+- **`context`** (object) on every wire event — standardized device/platform
+  context (spec §4), promoted out of `properties`. Common fields: `os`,
+  `osVersion`, `appVersion`, `sdkName`, `sdkVersion`, `locale`, `timezone`.
+  Node-specific: `nodeVersion`, `host`, `region` (the existing
+  `runtime.*` props, promoted).
+
+**Changed:**
+
+- `track()` no longer merges `runtime.*` keys into `properties`. Those
+  facts now live in the top-level `context` object on the wire event.
+  Super-properties registered via `server.register()` continue to appear
+  in `properties` unchanged (caller-supplied values are unaffected).
+
 ## [1.5.1] — 2026-05-27
 
 `crossdeck.contract_failed` is now single-fire to a dedicated

package/dist/auto-events/index.d.mts

@@ -1,4 +1,4 @@
-import { w as CrossdeckServer } from '../crossdeck-server-BFTTwCEP.mjs';
+import { w as CrossdeckServer } from '../crossdeck-server-DYawt4eT.mjs';
 import 'node:events';
 
 /**

package/dist/auto-events/index.d.ts

@@ -1,4 +1,4 @@
-import { w as CrossdeckServer } from '../crossdeck-server-BFTTwCEP.js';
+import { w as CrossdeckServer } from '../crossdeck-server-DYawt4eT.js';
 import 'node:events';
 
 /**

package/dist/{crossdeck-server-BFTTwCEP.d.mts → crossdeck-server-DYawt4eT.d.mts}

@@ -1,6 +1,6 @@
 import { EventEmitter } from 'node:events';
 
-type CrossdeckErrorType = "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "internal_error" | "network_error" | "configuration_error";
+type CrossdeckErrorType = "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "version_error" | "internal_error" | "network_error" | "configuration_error";
 interface CrossdeckErrorPayload {
     type: CrossdeckErrorType;
     /**
@@ -19,6 +19,14 @@ interface CrossdeckErrorPayload {
     requestId?: string;
     status?: number;
     retryAfterMs?: number;
+    /**
+     * Required SDK version floor — populated only on a `426 Upgrade Required`
+     * / `sdk_version_unsupported` response, so the queue's PARK message names
+     * the exact version to update to.
+     */
+    minVersion?: string;
+    /** SDK surface the rejection applies to (web/node/swift/…), on a 426. */
+    surface?: string;
 }
 declare class CrossdeckError extends Error {
     readonly type: CrossdeckErrorType;
@@ -26,6 +34,8 @@ declare class CrossdeckError extends Error {
     readonly requestId?: string;
     readonly status?: number;
     readonly retryAfterMs?: number;
+    readonly minVersion?: string;
+    readonly surface?: string;
     constructor(payload: CrossdeckErrorPayload);
     /**
      * JSON representation suitable for structured loggers. Without this,
@@ -173,8 +183,8 @@ declare const CrossdeckContracts: {
     readonly byId: (id: string) => Contract | undefined;
     readonly byPillar: (pillar: ContractPillar) => readonly Contract[];
     readonly withStatus: (status: ContractStatus) => readonly Contract[];
-    readonly sdkVersion: "1.5.3";
-    readonly bundledIn: "@cross-deck/node@1.5.3";
+    readonly sdkVersion: "1.6.0";
+    readonly bundledIn: "@cross-deck/node@1.6.0";
     /**
      * Resolve a failing test back to the contract it exercises.
      * Used by test-framework hooks to find the contract id of a
@@ -1312,6 +1322,8 @@ declare class CrossdeckServer extends EventEmitter {
     private readonly processAnonymousId;
     private readonly runtime;
     private readonly runtimeProperties;
+    /** Envelope v1 §4 context object — built once at SDK init, reused on every event. */
+    private readonly eventContext;
     private readonly breadcrumbs;
     private readonly eventQueue;
     private readonly errorTracker;
@@ -1329,6 +1341,23 @@ declare class CrossdeckServer extends EventEmitter {
      */
     private readonly entitlementStore;
     private readonly debug;
+    /**
+     * Event Envelope v1 §3 — per-session monotonic sequence counter.
+     *
+     * Node has no mobile "session" lifecycle (no app launch / background /
+     * foreground). We model a session as the SDK instance lifetime: the
+     * counter starts at 0 on construction and increments once per
+     * `track()` call. `session.started` is the boot-telemetry event
+     * (the first `track()` called from `emitBootTelemetryEvent()`), so
+     * the seq will be 0 for that event, matching the spec's "reset to 0
+     * at session.started" clause — by construction, it's the zeroth event
+     * of this instance's lifecycle.
+     *
+     * The counter persists for the entire process lifetime of the SDK
+     * instance (spec §3 clause 1: background/foreground does not reset).
+     * A new `CrossdeckServer` construction is the only reset (new session).
+     */
+    private sessionSeq;
     /**
      * Alias map — `developerUserId` / `anonymousId` → canonical
      * `crossdeckCustomerId`. Populated by `getEntitlements()` so a

package/dist/{crossdeck-server-BFTTwCEP.d.ts → crossdeck-server-DYawt4eT.d.ts}

@@ -1,6 +1,6 @@
 import { EventEmitter } from 'node:events';
 
-type CrossdeckErrorType = "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "internal_error" | "network_error" | "configuration_error";
+type CrossdeckErrorType = "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "version_error" | "internal_error" | "network_error" | "configuration_error";
 interface CrossdeckErrorPayload {
     type: CrossdeckErrorType;
     /**
@@ -19,6 +19,14 @@ interface CrossdeckErrorPayload {
     requestId?: string;
     status?: number;
     retryAfterMs?: number;
+    /**
+     * Required SDK version floor — populated only on a `426 Upgrade Required`
+     * / `sdk_version_unsupported` response, so the queue's PARK message names
+     * the exact version to update to.
+     */
+    minVersion?: string;
+    /** SDK surface the rejection applies to (web/node/swift/…), on a 426. */
+    surface?: string;
 }
 declare class CrossdeckError extends Error {
     readonly type: CrossdeckErrorType;
@@ -26,6 +34,8 @@ declare class CrossdeckError extends Error {
     readonly requestId?: string;
     readonly status?: number;
     readonly retryAfterMs?: number;
+    readonly minVersion?: string;
+    readonly surface?: string;
     constructor(payload: CrossdeckErrorPayload);
     /**
      * JSON representation suitable for structured loggers. Without this,
@@ -173,8 +183,8 @@ declare const CrossdeckContracts: {
     readonly byId: (id: string) => Contract | undefined;
     readonly byPillar: (pillar: ContractPillar) => readonly Contract[];
     readonly withStatus: (status: ContractStatus) => readonly Contract[];
-    readonly sdkVersion: "1.5.3";
-    readonly bundledIn: "@cross-deck/node@1.5.3";
+    readonly sdkVersion: "1.6.0";
+    readonly bundledIn: "@cross-deck/node@1.6.0";
     /**
      * Resolve a failing test back to the contract it exercises.
      * Used by test-framework hooks to find the contract id of a
@@ -1312,6 +1322,8 @@ declare class CrossdeckServer extends EventEmitter {
     private readonly processAnonymousId;
     private readonly runtime;
     private readonly runtimeProperties;
+    /** Envelope v1 §4 context object — built once at SDK init, reused on every event. */
+    private readonly eventContext;
     private readonly breadcrumbs;
     private readonly eventQueue;
     private readonly errorTracker;
@@ -1329,6 +1341,23 @@ declare class CrossdeckServer extends EventEmitter {
      */
     private readonly entitlementStore;
     private readonly debug;
+    /**
+     * Event Envelope v1 §3 — per-session monotonic sequence counter.
+     *
+     * Node has no mobile "session" lifecycle (no app launch / background /
+     * foreground). We model a session as the SDK instance lifetime: the
+     * counter starts at 0 on construction and increments once per
+     * `track()` call. `session.started` is the boot-telemetry event
+     * (the first `track()` called from `emitBootTelemetryEvent()`), so
+     * the seq will be 0 for that event, matching the spec's "reset to 0
+     * at session.started" clause — by construction, it's the zeroth event
+     * of this instance's lifecycle.
+     *
+     * The counter persists for the entire process lifetime of the SDK
+     * instance (spec §3 clause 1: background/foreground does not reset).
+     * A new `CrossdeckServer` construction is the only reset (new session).
+     */
+    private sessionSeq;
     /**
      * Alias map — `developerUserId` / `anonymousId` → canonical
      * `crossdeckCustomerId`. Populated by `getEntitlements()` so a

package/dist/index.cjs

@@ -66,6 +66,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
   requestId;
   status;
   retryAfterMs;
+  minVersion;
+  surface;
   constructor(payload) {
     super(payload.message);
     this.name = "CrossdeckError";
@@ -74,6 +76,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
     this.requestId = payload.requestId;
     this.status = payload.status;
     this.retryAfterMs = payload.retryAfterMs;
+    this.minVersion = payload.minVersion;
+    this.surface = payload.surface;
     Object.setPrototypeOf(this, _CrossdeckError.prototype);
   }
   /**
@@ -95,6 +99,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
       requestId: this.requestId,
       status: this.status,
       retryAfterMs: this.retryAfterMs,
+      minVersion: this.minVersion,
+      surface: this.surface,
       stack: this.stack
     };
   }
@@ -185,7 +191,10 @@ async function crossdeckErrorFromResponse(res) {
       message: envelope.message ?? `HTTP ${res.status}`,
       requestId: envelope.request_id ?? requestId,
       status: res.status,
-      retryAfterMs
+      retryAfterMs,
+      // PARK metadata, present only on a 426 / sdk_version_unsupported body.
+      minVersion: typeof envelope.minVersion === "string" ? envelope.minVersion : void 0,
+      surface: typeof envelope.surface === "string" ? envelope.surface : void 0
     });
   }
   return makeCrossdeckError({
@@ -378,7 +387,7 @@ function byteLength(s) {
 var https = __toESM(require("https"));
 
 // src/_version.ts
-var SDK_VERSION = "1.5.3";
+var SDK_VERSION = "1.7.0";
 var SDK_NAME = "@cross-deck/node";
 
 // src/_diagnostic-telemetry.ts
@@ -398,7 +407,12 @@ var DIAGNOSTIC_TELEMETRY_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "run_id",
   "test_file",
   "test_name",
-  "device_class"
+  "device_class",
+  // verification_phase — categorical `boot` / `hot_path` bucket set by the
+  // runtime contract verifier layer. Declared in the shared diagnostics
+  // contract (contracts/diagnostics/contract-failed-payload-schema-lock.json)
+  // and carried by web/swift; node had drifted by omitting it.
+  "verification_phase"
 ]);
 function filterDiagnosticPayload(payload) {
   const filtered = {};
@@ -891,6 +905,16 @@ var EventQueue = class {
   cancelTimer = null;
   firstFlushFired = false;
   nextRetryAt = null;
+  /**
+   * PARK state (HTTP 426 / `sdk_version_unsupported`). Once parked, the
+   * queue stops flushing — retrying a known-too-old payload only wastes
+   * bandwidth and drips pointless rejects into the server logs until the
+   * process restarts on an upgraded SDK. In-memory: a fresh process starts
+   * unparked, retries once, and either delivers (upgraded) or re-parks.
+   */
+  parked = false;
+  /** One developer-facing console warning per process — never per-event spam. */
+  parkWarned = false;
   retry;
   /**
    * Stable Idempotency-Key for the current in-flight batch. Minted
@@ -943,6 +967,7 @@ var EventQueue = class {
    * this one settles. Strict ordering preserved.
    */
   async flush() {
+    if (this.parked) return null;
     let batch;
     let batchId;
     if (this.pendingBatch !== null && this.pendingBatchId !== null) {
@@ -962,6 +987,11 @@ var EventQueue = class {
     try {
       const env = this.cfg.envelope();
       const body = {
+        // Event Envelope v1 §1 — schema/wire version the server uses to
+        // decide whether it can parse this payload. Integer 1; only bumped
+        // on a breaking wire change. Distinct from sdk.version (which
+        // answers "which build?") — two questions, two fields.
+        envelopeVersion: 1,
         events: batch,
         sdk: env.sdk
       };
@@ -985,6 +1015,28 @@ var EventQueue = class {
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       this.lastError = message;
+      if (isVersionRejected(err)) {
+        this.parked = true;
+        this.buffer = [...batch, ...this.buffer];
+        if (this.buffer.length > HARD_BUFFER_CAP) {
+          const overflow = this.buffer.length - HARD_BUFFER_CAP;
+          this.buffer.splice(0, overflow);
+          this.dropped += overflow;
+        }
+        this.pendingBatch = null;
+        this.pendingBatchId = null;
+        this.inFlight -= batch.length;
+        this.cfg.onBufferChange?.(this.buffer.length);
+        const minVersion = versionRejectionFloor(err);
+        if (!this.parkWarned) {
+          this.parkWarned = true;
+          console.warn(
+            `[Crossdeck] SDK outdated \u2014 the server is no longer accepting this version's event format. Events are PARKED in memory (held, not lost across this process) and will deliver once you update @cross-deck/node${minVersion ? ` to >= ${minVersion}` : ""} and restart. A restart before upgrade clears them \u2014 configure a disk queue for cross-restart durability.`
+          );
+        }
+        this.cfg.onParked?.({ minVersion, surface: versionRejectionSurface(err) });
+        return null;
+      }
       if (isPermanent4xx(err)) {
         const droppedCount = batch.length;
         this.pendingBatch = null;
@@ -1083,8 +1135,22 @@ function isPermanent4xx(err) {
   if (typeof status !== "number" || !Number.isFinite(status)) return false;
   if (status < 400 || status >= 500) return false;
   if (status === 408 || status === 429) return false;
+  if (status === 426) return false;
   return true;
 }
+function isVersionRejected(err) {
+  if (!err || typeof err !== "object") return false;
+  if (err.status === 426) return true;
+  return err.code === "sdk_version_unsupported";
+}
+function versionRejectionFloor(err) {
+  const v = err?.minVersion;
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
+function versionRejectionSurface(err) {
+  const v = err?.surface;
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
 function defaultScheduler(fn, ms) {
   const id = setTimeout(fn, ms);
   if (typeof id.unref === "function") {
@@ -1946,6 +2012,25 @@ function runtimeInfoToProperties(info) {
   if (info.appVersion) out.appVersion = info.appVersion;
   return out;
 }
+function buildEventContext(info, sdkName, sdkVersion) {
+  const ctx = {
+    // Common fields (spec §4, all platforms)
+    os: info.platform,
+    osVersion: info.platformRelease,
+    appVersion: info.appVersion ?? null,
+    sdkName,
+    sdkVersion,
+    // locale / timezone: Node has no process-level locale by default;
+    // surface them from the environment if available, otherwise null.
+    locale: typeof process !== "undefined" && process.env["LANG"] || null,
+    timezone: typeof Intl !== "undefined" && Intl.DateTimeFormat().resolvedOptions().timeZone || null,
+    // Node-specific runtime context (spec §4 Node section)
+    nodeVersion: info.nodeVersion,
+    host: info.host,
+    region: info.region ?? null
+  };
+  return ctx;
+}
 
 // src/flush-on-exit.ts
 var SIGNALS = ["SIGTERM", "SIGINT"];
@@ -2613,6 +2698,8 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
   processAnonymousId;
   runtime;
   runtimeProperties;
+  /** Envelope v1 §4 context object — built once at SDK init, reused on every event. */
+  eventContext;
   breadcrumbs;
   eventQueue;
   errorTracker;
@@ -2630,6 +2717,23 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
    */
   entitlementStore;
   debug;
+  /**
+   * Event Envelope v1 §3 — per-session monotonic sequence counter.
+   *
+   * Node has no mobile "session" lifecycle (no app launch / background /
+   * foreground). We model a session as the SDK instance lifetime: the
+   * counter starts at 0 on construction and increments once per
+   * `track()` call. `session.started` is the boot-telemetry event
+   * (the first `track()` called from `emitBootTelemetryEvent()`), so
+   * the seq will be 0 for that event, matching the spec's "reset to 0
+   * at session.started" clause — by construction, it's the zeroth event
+   * of this instance's lifecycle.
+   *
+   * The counter persists for the entire process lifetime of the SDK
+   * instance (spec §3 clause 1: background/foreground does not reset).
+   * A new `CrossdeckServer` construction is the only reset (new session).
+   */
+  sessionSeq = 0;
   /**
    * Alias map — `developerUserId` / `anonymousId` → canonical
    * `crossdeckCustomerId`. Populated by `getEntitlements()` so a
@@ -2689,6 +2793,7 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
       appVersion: options.appVersion
     });
     this.runtimeProperties = runtimeInfoToProperties(this.runtime);
+    this.eventContext = buildEventContext(this.runtime, SDK_NAME, this.sdkVersion);
     this.breadcrumbs = new BreadcrumbBuffer(options.breadcrumbsMaxSize ?? 50);
     this.superProps = new SuperPropertyStore();
     this.entitlementCache = new EntitlementCache({
@@ -2749,6 +2854,13 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
           error: info.lastError
         });
       },
+      onParked: (info) => {
+        this.debug.emit(
+          "sdk.parked",
+          `[crossdeck] SDK parked \u2014 server no longer accepts this version's event format. Events held (paused, not lost); update @cross-deck/node${info.minVersion ? ` to >= ${info.minVersion}` : ""} and restart to resume.`,
+          { ...info }
+        );
+      },
       onFirstFlushSuccess: () => {
         this.debug.emit("sdk.first_event_sent", "First batch landed.");
       }
@@ -3140,7 +3252,6 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
       }
     }
     const properties = {
-      ...this.runtimeProperties,
       ...this.superProps.getSuperProperties(),
       ...sanitized
     };
@@ -3149,10 +3260,14 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
       properties.$groups = groupIds;
     }
     const identity = this.resolveIdentity(event);
+    const seq = this.sessionSeq++;
+    const timestamp = event.timestamp ?? Date.now();
     const queued = {
       eventId: event.eventId ?? mintId("evt", 8),
       name: event.name,
-      timestamp: event.timestamp ?? Date.now(),
+      timestamp,
+      seq,
+      context: this.eventContext,
       properties,
       ...identity
     };
@@ -3191,6 +3306,8 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
     }
     const normalized = events.map((event) => this.normalizeIngestEvent(event));
     const body = {
+      // Event Envelope v1 §1 — wire version (parity with the queue path).
+      envelopeVersion: 1,
       events: normalized,
       sdk: { name: SDK_NAME, version: this.sdkVersion },
       // Match the queue's batch envelope (see event-queue.ts) — backend
@@ -4318,6 +4435,13 @@ var _CROSSDECK_ERROR_CODES = Object.freeze([
     description: "A field is present but the value failed validation.",
     resolution: "Read error.message for the field + reason. SDK-managed call sites should never emit this \u2014 file a bug if you do.",
     retryable: false
+  },
+  {
+    code: "sdk_version_unsupported",
+    type: "version_error",
+    description: "HTTP 426 \u2014 your installed SDK sends an event format the server no longer accepts. The data is good; only the wire dialect is too old. The SDK PARKS automatically: events are held in memory and deliver once you upgrade and restart.",
+    resolution: "Update @cross-deck/node to at least the version in error.minVersion and restart \u2014 the held queue backfills. See https://cross-deck.com/docs/sdk-event-durability/.",
+    retryable: false
   }
 ]);
 function isCrossdeckErrorCode(code) {
@@ -4449,8 +4573,8 @@ function normaliseSecrets(input) {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/node@1.5.3";
-var SDK_VERSION2 = "1.5.3";
+var BUNDLED_IN = "@cross-deck/node@1.6.0";
+var SDK_VERSION2 = "1.6.0";
 var BUNDLED_CONTRACTS = Object.freeze([
   {
     "id": "contract-failed-payload-schema-lock",
@@ -4572,7 +4696,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
       "legal/security/index.html#diagnostic",
       "legal/sdk-data/index.html#b-diagnostic"
     ],
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "documentation-honesty",
@@ -4604,7 +4728,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.1",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "error-envelope-shape",
@@ -4643,7 +4767,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "flush-interval-parity",
@@ -4688,7 +4812,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "idempotency-key-deterministic",
@@ -4793,7 +4917,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "node-pii-scrubber",
@@ -4832,7 +4956,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.1",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "node-shutdown-awaits-flush",
@@ -4865,7 +4989,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.4",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "sdk-error-codes-catalogue",
@@ -4879,9 +5003,14 @@ var BUNDLED_CONTRACTS = Object.freeze([
     "codeRef": [
       "sdks/web/src/error-codes.ts",
       "sdks/node/src/error-codes.ts",
+      "sdks/web/src/_contract-verifiers.ts",
       "backend/src/api/v1-errors.ts"
     ],
     "testRef": [
+      {
+        "file": "sdks/web/tests/contract-verifiers.test.ts",
+        "name": "sdk-error-codes-catalogue covers every backend wire code with remediation"
+      },
       {
         "file": "sdks/web/tests/error-codes-backfill.test.ts",
         "name": "includes backend code"
@@ -4905,7 +5034,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 6.2",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "sync-purchases-funnel-parity",
@@ -4938,7 +5067,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   },
   {
     "id": "verifier-timestamp-mandatory",
@@ -4992,7 +5121,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.2",
-    "bundledIn": "@cross-deck/node@1.5.3"
+    "bundledIn": "@cross-deck/node@1.6.0"
   }
 ]);