@ouronet/ouronet-core 4.3.6 → 4.3.7

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `@ouronet/ouronet-core`.
 
 This package is the historical continuation of `@ouronet/ouronet-core` v0.x–v3.3.8. v4.0.0 split it into a two-package npm workspace under `StoaChain/stoa-js` — chain-generic infrastructure moved out into [`@stoachain/stoa-core`](https://www.npmjs.com/package/@stoachain/stoa-core), this package retained the Ouronet-specific business logic. The `4.0.0` heading below is the first release after the split.
 
+## 4.3.7 — 2026-07-22
+
+**PATCH — chain-peer realignment, no code change.**
+
+Re-pins the exact peer dependencies onto the chain layer: `@stoachain/stoa-core` and `@stoachain/kadena-stoic-legacy` move `4.3.6` → `4.3.7`. No source in this package changed.
+
+Why it is needed: this package pins its chain peers EXACTLY. That was free when all three shipped atomically from one repo, but since the Phase-4 split the chain packages release independently from `StoaChain/stoa-js`. stoa-js 4.3.7 (which repointed DALOS onto `@ouronet/dalos-crypto`) therefore left `@ouronet/ouronet-core@4.3.6` demanding a chain version consumers no longer resolve — any tree pulling `^4.3.0` got an unsatisfiable peer.
+
+**Consequence to keep in mind:** the exact pin is deliberate, so this coupling is permanent. Every `stoa-js` release now requires a matching `ouronet-core` release, or consumers who upgrade the chain layer break. Ship them together.
+
+**785 specs pass.**
+
 ## 4.3.6 — 2026-06-11
 
 Atomic-triplet lockstep bump — `4.3.5 → 4.3.6` alongside `@stoachain/stoa-core` (which carries an auto-gas-limit floor fix in `calculateAutoGasLimit` — a dirty-read under-reports a signed tx's real cost, so tiny estimates were starving txs) and `@stoachain/kadena-stoic-legacy`, per the cross-package version-pin invariant. This package is functionally identical to its 4.3.5 release.

package/README.md

@@ -16,6 +16,8 @@ Chain-generic infrastructure (signing, wallet, crypto, network failover, gas, gu
 
 ## Status
 
+**`4.3.7` on public npmjs** — **PATCH (chain-peer realignment with `@stoachain/stoa-core@4.3.7` + `@stoachain/kadena-stoic-legacy@4.3.7`).** Released 2026-07-22. NO code changes in this package. The exact chain peers move 4.3.6 → 4.3.7 so consumers resolving the current chain layer get a satisfiable tree; stoa-js 4.3.7 repointed DALOS onto `@ouronet/dalos-crypto@4.0.4`. **785 specs pass.**
+
 **`4.3.6` on public npmjs** — **PATCH (atomic-triplet alignment with `@stoachain/stoa-core@4.3.6` + `@stoachain/kadena-stoic-legacy@4.3.6`).** Released 2026-06-11. NO code changes in this package; version bumped solely to maintain the atomic-triplet invariant. The v4.3.6 change (a `@stoachain/stoa-core` auto-gas-limit floor fix in `calculateAutoGasLimit`) lives entirely in `@stoachain/stoa-core`. Functionally identical to `4.3.5`. **829 specs pass.**
 
 **`4.3.5` on public npmjs** — **ADDITIVE (atomic-triplet with `@stoachain/stoa-core@4.3.5` + `@stoachain/kadena-stoic-legacy@4.3.5` — those two functionally identical to 4.3.4; only ouronet-core changed).** Released 2026-06-10. Smart Ouronet Account deploy (`buildDeploySmartAccountPactCode` + `getDeploySmartAccountInfo`/`…InfoOnly` → `C_DeploySmartAccount`/`URC_DeploySmartAccount`); keyset-ref-aware activation (`buildDeploy{Standard,Smart}AccountPactCode` gained `mode`/`keysetRef` → `(keyset-ref-guard "<ref>")` in `"existing"` mode, preserving the keyset-ref guard type); and `getIgnisBalance` moved to tier **T1** (balance reads belong there — at T5 the patron IGNIS balance stayed stale right after a transfer, falsely blocking spends). Pure additive — existing exports unchanged (deploy builders gained optional defaults). See CHANGELOG.
@@ -34,6 +36,8 @@ Chain-generic infrastructure (signing, wallet, crypto, network failover, gas, gu
 
 **`4.2.0` on public npmjs** — **MINOR (atomic with `@stoachain/stoa-core@4.2.0` + `@stoachain/kadena-stoic-legacy@4.2.0`).** Released 2026-05-09. Closes 6 audit findings: **F-ARCH-001** (Phase 1 dex god-file split — ~10 entity-oriented files + thin re-export shim), **F-ARCH-002** (Phase 2 ouro god-file split + chain/UI surgical separation — ~11 entity-oriented files + thin re-export shim), **F-ARCH-003** (Phase 3 parameterized liquidity executor — 5 thin wrappers + 1 internal `executeLiquidityOp`, LOC reduction ~600 → ~200), **F-API-002** (Phase 4 — 12 functions honor declared `Promise<T | null>` contract, return null on RPC failure instead of rethrowing), **F-API-018** (Phase 5 readonly sweep — ~50 public-type fields in `codex/types.ts` and all `*Params` interfaces), **F-TEST-006** (Phase 7 — +127 specs across 6 modules: `infoOneFunctions`, `coilFunctions`, `kpayFunctions`, `pensionFunctions`, `activateFunctions`, `guardFunctions`). NEW deliverable: [`INTEGRATION-GUIDE.md`](https://github.com/StoaChain/stoa-js/blob/main/INTEGRATION-GUIDE.md) at repo root — comprehensive cold-start consumer onboarding doc, 13 sections, full v4.0 → v4.1 → v4.2 architectural arc. 8 new `v4-2-0-*.test.ts` regression-lock files. Test count: **710 specs pass** (was ~330 in v4.1.1). Cross-reference: see [`MIGRATION-v4.2.md`](https://github.com/StoaChain/stoa-js/blob/main/MIGRATION-v4.2.md) at the monorepo root.
 
+**v4.3.7** — chain-peer realignment bump (exact peers on `@stoachain/stoa-core@4.3.7` + `@stoachain/kadena-stoic-legacy@4.3.7`). Released 2026-07-22. NO code changes. Required because this package pins its chain peers exactly and stoa-js now releases independently. **785 specs pass.**
+
 **v4.3.6** — atomic-triplet alignment bump (atomic with `@stoachain/stoa-core@4.3.6` + `@stoachain/kadena-stoic-legacy@4.3.6`). Released 2026-06-11. NO code changes; the v4.3.6 change (a stoa-core auto-gas-limit floor fix in `calculateAutoGasLimit`) lives in `@stoachain/stoa-core`. Functionally identical to v4.3.5. **829 specs pass.**
 
 **v4.3.5** — ADDITIVE (atomic-triplet with `@stoachain/stoa-core@4.3.5` + `@stoachain/kadena-stoic-legacy@4.3.5`). Released 2026-06-10. Smart Ouronet Account deploy builder (`buildDeploySmartAccountPactCode` + `getDeploySmartAccountInfo`/`…InfoOnly`); keyset-ref-aware activation (`mode`/`keysetRef` → `(keyset-ref-guard "<ref>")`); `getIgnisBalance` moved to tier T1 (fresh balance read). Pure additive. **829 specs pass.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouronet/ouronet-core",
-  "version": "4.3.6",
+  "version": "4.3.7",
   "description": "Ouronet-specific business logic for the Ouronet protocol on StoaChain — interactions/* read+execute functions for the ouronet-ns Pact modules, the Codex encrypted-multi-wallet format, Ouronet protocol accounts and tokens. Depends on @stoachain/stoa-core for chain-generic infrastructure (signing, wallet, crypto, network, etc.).",
   "type": "module",
   "main": "./dist/index.js",
@@ -48,8 +48,8 @@
     "clean": "rimraf dist"
   },
   "peerDependencies": {
-    "@stoachain/kadena-stoic-legacy": "4.3.6",
-    "@stoachain/stoa-core": "4.3.6"
+    "@stoachain/kadena-stoic-legacy": "4.3.7",
+    "@stoachain/stoa-core": "4.3.7"
   },
   "repository": {
     "type": "git",