@oxy.so/protocol 1.6.0 → 1.6.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/protocol",
-  "version": "1.6.0",
+  "version": "1.6.1",
   "description": "Oxy Protocol — the app-agnostic base substrate: signed-record envelope, canonical JSON, signature/verification, and platform crypto. Reused by any Oxy app to decentralize its own content.",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
@@ -158,16 +158,16 @@
   },
   "devDependencies": {
     "@react-native-async-storage/async-storage": "^3.1.1",
-    "@types/express": "^4.17.25",
-    "@types/node": "^22.20.1",
-    "@types/supertest": "^6.0.2",
-    "expo-crypto": "~56.0.3",
-    "expo-modules-core": "~58.0.26",
-    "expo-secure-store": "~57.0.4",
-    "express": "^4.22.2",
-    "jest": "^30.5.1",
-    "supertest": "^7.0.0",
-    "ts-jest": "^29.4.12",
-    "typescript": "^5.9.2"
+    "@types/express": "^5.0.6",
+    "@types/node": "^26.6.6",
+    "@types/supertest": "^7.2.1",
+    "expo-crypto": "~58.0.7",
+    "expo-modules-core": "~58.0.30",
+    "expo-secure-store": "~58.0.2",
+    "express": "^5.3.0",
+    "jest": "^30.5.2",
+    "supertest": "^7.3.1",
+    "ts-jest": "^29.4.15",
+    "typescript": "~6.0.3"
   }
 }

package/src/__tests__/nodeApp.test.ts

@@ -432,11 +432,10 @@ describe('createNodeApp', () => {
       prev = id;
     }
 
-    // `?since[]=<id1>&since[]=<id2>` arrives as a string[] — the handler must
-    // take the FIRST value (a tampered array can never cause type confusion).
-    const res = await request(app)
-      .get('/oxy/log')
-      .query({ 'since[]': [ids[0], ids[2]] });
+    // A repeated `?since=<id1>&since=<id2>` arrives as a string[] under every
+    // Express query parser — the handler must take the FIRST value (a tampered
+    // array can never cause type confusion).
+    const res = await request(app).get('/oxy/log').query(`since=${ids[0]}&since=${ids[2]}`);
     expect(res.status).toBe(200);
     // Cursor resolves off ids[0] → records strictly after seq 0 → [1, 2].
     expect(res.body.records.map((entry: { seq: number }) => entry.seq)).toEqual([1, 2]);
@@ -456,9 +455,7 @@ describe('createNodeApp', () => {
       prev = await computeRecordId(envelope);
     }
 
-    const res = await request(app)
-      .get('/oxy/log')
-      .query({ 'limit[]': ['2', '99'] });
+    const res = await request(app).get('/oxy/log').query('limit=2&limit=99');
     expect(res.status).toBe(200);
     expect(res.body.records.map((entry: { seq: number }) => entry.seq)).toEqual([0, 1]);
   });

package/src/node/nodeApp.ts

@@ -399,7 +399,7 @@ export function createNodeApp(deps: NodeAppDependencies): NodeApp {
   );
 
   // ── Serve a content-addressed blob ───────────────────────────────────────────
-  app.get(`${NODE_BLOBS_PATH}/:hash`, async (req: Request, res: Response, next: NextFunction) => {
+  app.get(`${NODE_BLOBS_PATH}/:hash`, async (req, res, next) => {
     try {
       const hash = req.params.hash.toLowerCase();
       if (!SHA256_HEX.test(hash)) {