@vtechcom/hexcore 2.0.0-beta.1 → 2.0.0-beta.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +22 -2
- package/README.md +6 -3
- package/dist/cli/hexcore.js +113 -0
- package/dist/cli/hexcore.js.map +1 -1
- package/dist/config.js +1 -1
- package/dist/hydra/argv.js +10 -0
- package/dist/hydra/argv.js.map +1 -1
- package/dist/hydra/capabilities.js +3 -0
- package/dist/hydra/capabilities.js.map +1 -1
- package/node_modules/@hexcore/shared/dist/cjs/hydra-versions.d.ts +12 -6
- package/node_modules/@hexcore/shared/dist/cjs/hydra-versions.d.ts.map +1 -1
- package/node_modules/@hexcore/shared/dist/cjs/hydra-versions.js +119 -38
- package/node_modules/@hexcore/shared/dist/cjs/hydra-versions.js.map +1 -1
- package/node_modules/@hexcore/shared/dist/esm/hydra-versions.js +119 -38
- package/node_modules/@hexcore/shared/dist/esm/hydra-versions.js.map +1 -1
- package/package.json +2 -2
- package/web/200.html +20 -18
- package/web/404.html +20 -18
- package/web/_nuxt/{DgDlQiDU.js → B-lS44p0.js} +1 -1
- package/web/_nuxt/{CqsSss-D.js → B1NtJEdQ.js} +1 -1
- package/web/_nuxt/B1ZAR7mP.js +1 -0
- package/web/_nuxt/BFc_bxHc.js +1 -0
- package/web/_nuxt/BGGQYvrr.js +1 -0
- package/web/_nuxt/BPQ3VLAy.js +1 -0
- package/web/_nuxt/BV_QiRi8.js +1 -0
- package/web/_nuxt/BW_3NqYy.js +1 -0
- package/web/_nuxt/B_DikKgJ.js +1 -0
- package/web/_nuxt/B_Vrwblg.js +1 -0
- package/web/_nuxt/Bbbbx_yO.js +1 -0
- package/web/_nuxt/BeS-yS0C.js +1 -0
- package/web/_nuxt/{Onf26W-r.js → BfFJ09wD.js} +1 -1
- package/web/_nuxt/{rhEiP908.js → Bj1gglGt.js} +1 -1
- package/web/_nuxt/BkRxDbrA.js +1 -0
- package/web/_nuxt/Bmqx7s9K.js +1 -0
- package/web/_nuxt/BnZUk6sk.js +1 -0
- package/web/_nuxt/BqoV-QnQ.js +3 -0
- package/web/_nuxt/Bv47q1hu.js +1 -0
- package/web/_nuxt/Bz1eTnxX.js +1 -0
- package/web/_nuxt/{CkCrahXt.js → CAfY3dDF.js} +1 -1
- package/web/_nuxt/CBchb2Up.js +1 -0
- package/web/_nuxt/CEGGvSzA.js +1 -0
- package/web/_nuxt/CG6Dc4jp.js +1 -0
- package/web/_nuxt/{LGfPBi70.js → CH5xbifj.js} +1 -1
- package/web/_nuxt/CZFMOWPc.js +1 -0
- package/web/_nuxt/C_n__rkq.js +1 -0
- package/web/_nuxt/CaWYVaRD.js +1 -0
- package/web/_nuxt/ChS5Np24.js +1 -0
- package/web/_nuxt/Cp-IABpG.js +1 -0
- package/web/_nuxt/Cuk6v7N8.js +1 -0
- package/web/_nuxt/CzTJPvyS.js +1 -0
- package/web/_nuxt/D-Stn6KG.js +1 -0
- package/web/_nuxt/D7oLnXFd.js +1 -0
- package/web/_nuxt/DAHap_t6.js +1 -0
- package/web/_nuxt/DBL-cQio.js +1 -0
- package/web/_nuxt/DIi866IK.js +7 -0
- package/web/_nuxt/DMl_I_aT.js +1 -0
- package/web/_nuxt/Dd34_EaM.js +1 -0
- package/web/_nuxt/DlAUqK2U.js +1 -0
- package/web/_nuxt/DlHvzKYz.js +1 -0
- package/web/_nuxt/DmF-LwQa.js +1 -0
- package/web/_nuxt/DmPn-vCY.js +1 -0
- package/web/_nuxt/DsttYulo.js +1 -0
- package/web/_nuxt/{DL9i0ayn.js → DybEwxe5.js} +1 -1
- package/web/_nuxt/JXuauuVw.js +41 -0
- package/web/_nuxt/Yzrsuije.js +1 -0
- package/web/_nuxt/builds/latest.json +1 -1
- package/web/_nuxt/builds/meta/5b0a342e-aa78-42e7-89fa-ee280f32f47a.json +1 -0
- package/web/_nuxt/dhmyGJu2.js +1 -0
- package/web/_nuxt/entry.Q53uGRvC.css +1 -0
- package/web/_nuxt/error-404.DL126m4x.css +1 -0
- package/web/_nuxt/error-500.BUVIYHmG.css +1 -0
- package/web/_nuxt/{YUGC0nt0.js → hza_YA5H.js} +1 -1
- package/web/_nuxt/index.D8biniUe.css +1 -0
- package/web/_nuxt/vzCX1O3u.js +1 -0
- package/web/_nuxt/{CZK6xUH-.js → yhvT770r.js} +1 -1
- package/web/heads/index.html +20 -18
- package/web/heads/new/index.html +20 -18
- package/web/index.html +20 -18
- package/web/login/index.html +20 -18
- package/web/settings/index.html +20 -18
- package/web/setup/index.html +20 -18
- package/web/_nuxt/2MxohCD-.js +0 -1
- package/web/_nuxt/4pFXjB_u.js +0 -1
- package/web/_nuxt/B-v0dEQX.js +0 -1
- package/web/_nuxt/B4yE3U25.js +0 -1
- package/web/_nuxt/BFh8Ai0L.js +0 -1
- package/web/_nuxt/BgPn4NJH.js +0 -1
- package/web/_nuxt/Bj1xviSh.js +0 -1
- package/web/_nuxt/BnotlrL7.js +0 -1
- package/web/_nuxt/C1YRg2ic.js +0 -1
- package/web/_nuxt/CGD7MYQH.js +0 -1
- package/web/_nuxt/CQcG7Bu4.js +0 -1
- package/web/_nuxt/CS3KqpH_.js +0 -1
- package/web/_nuxt/CT-yt694.js +0 -1
- package/web/_nuxt/CcdyYRYz.js +0 -1
- package/web/_nuxt/CePNTU1S.js +0 -1
- package/web/_nuxt/CgPLsCeU.js +0 -5
- package/web/_nuxt/CnOqDT9k.js +0 -3
- package/web/_nuxt/Cr8dL64Q.js +0 -1
- package/web/_nuxt/D3CwzwU0.js +0 -1
- package/web/_nuxt/DDANn6-H.js +0 -1
- package/web/_nuxt/DDl9uKIA.js +0 -1
- package/web/_nuxt/DLNoK9BC.js +0 -1
- package/web/_nuxt/DLztFeOQ.js +0 -1
- package/web/_nuxt/DPihKXdt.js +0 -1
- package/web/_nuxt/DXyr6Naa.js +0 -1
- package/web/_nuxt/DeDg5p0D.js +0 -1
- package/web/_nuxt/DyPI7qJE.js +0 -30
- package/web/_nuxt/QZNQe_OX.js +0 -1
- package/web/_nuxt/Y8IJM-iz.js +0 -1
- package/web/_nuxt/builds/meta/7e461629-93e2-4694-b237-6d5c6a85c97c.json +0 -1
- package/web/_nuxt/builds/meta/dev.json +0 -1
- package/web/_nuxt/entry.BxsAxZxf.css +0 -1
- package/web/_nuxt/error-404.XbtAw-qw.css +0 -1
- package/web/_nuxt/error-500.CNHVltWM.css +0 -1
- package/web/_nuxt/rS90pPZ_.js +0 -1
- package/web/_nuxt/vSj9Ec0g.js +0 -1
- package/web/_nuxt/woNjBJMN.js +0 -1
|
@@ -52,20 +52,72 @@ function isArm64(platform) {
|
|
|
52
52
|
* retired when it is fixed.
|
|
53
53
|
*/
|
|
54
54
|
exports.HYDRA_KNOWN_ISSUES = [
|
|
55
|
+
{
|
|
56
|
+
id: 2871,
|
|
57
|
+
url: 'https://github.com/cardano-scaling/hydra/issues/2871',
|
|
58
|
+
title: 'A deposit below the minimum ADA of its output is locked and never recorded',
|
|
59
|
+
impact: "The deposit output's inline datum lists the deposited UTxO, so it needs more ADA than the " +
|
|
60
|
+
'UTxO itself — about 1.5 ADA for a plain one, more with tokens. `/commit` tops the output up ' +
|
|
61
|
+
'while the datum keeps the original value, the node rejects the mismatch when it observes the ' +
|
|
62
|
+
'deposit, and the funds sit at the deposit script with no `CommitRecorded` and no recovery ' +
|
|
63
|
+
'through the node. Deposit comfortably above the minimum — a token UTxO at its own minimum ADA ' +
|
|
64
|
+
'is the typical case that trips it.',
|
|
65
|
+
/**
|
|
66
|
+
* `warning`: the head keeps running, and only a deposit of one shape
|
|
67
|
+
* is lost — one an operator can avoid once told. Every 2.x version
|
|
68
|
+
* carries it, so a blocker here would put a blocker on every choice.
|
|
69
|
+
*/
|
|
70
|
+
severity: 'warning',
|
|
71
|
+
// The exact-value guard and its "silently ignores deposits" TODO in
|
|
72
|
+
// observeDepositTxOut are in every tag from 2.0.0 to 2.4.1 and absent
|
|
73
|
+
// from 1.0.0 and 0.22.4. Fixed on master by d89c0b9b3 (DepositTooLow),
|
|
74
|
+
// not yet in a release — set fixedIn when the release carrying it ships.
|
|
75
|
+
affectedFrom: '2.0.0',
|
|
76
|
+
// Offline heads start from --initial-utxo and never deposit.
|
|
77
|
+
backends: ['blockfrost', 'cardano-node'],
|
|
78
|
+
},
|
|
79
|
+
{
|
|
80
|
+
// A security advisory, not an issue, so there is no number for `id`.
|
|
81
|
+
// The advisory itself is the checkable record.
|
|
82
|
+
url: 'https://github.com/cardano-scaling/hydra/security/advisories/GHSA-cg83-6w6r-6hx3',
|
|
83
|
+
title: 'Security: a malicious participant can get a snapshot confirmed that steals funds',
|
|
84
|
+
impact: 'Critical upstream advisory GHSA-cg83-6w6r-6hx3. When confirming a snapshot the node re-applied ' +
|
|
85
|
+
'transactions on a path that skips signature checks and Plutus evaluation, and an unvalidated ' +
|
|
86
|
+
'transaction could reach it — so one participant, using only their own Hydra key, can get honest ' +
|
|
87
|
+
"nodes to sign a snapshot that moves another participant's funds to themselves, and Close plus " +
|
|
88
|
+
'Fanout pays it out on L1. Only another party in the head can do this; a head whose every node ' +
|
|
89
|
+
'runs in this one Hexcore has nobody to exploit it. Upgrade to 2.4.1 before sharing a head with ' +
|
|
90
|
+
'anyone you do not control — your own node on 2.4.1 is enough, since every snapshot needs its ' +
|
|
91
|
+
'signature. Coming from 2.3, close and fan out first: 2.4 changed the scripts.',
|
|
92
|
+
/**
|
|
93
|
+
* `warning` and not `blocker`, on the scale this field defines: the head
|
|
94
|
+
* neither stops nor dies, and the exploit needs a dishonest participant,
|
|
95
|
+
* which a head run entirely from one installation does not have. It
|
|
96
|
+
* matters the moment a head is shared — and that is what the text says.
|
|
97
|
+
*/
|
|
98
|
+
severity: 'warning',
|
|
99
|
+
// The reapply path landed in dc17f23fa (2026-06-08), first tagged in
|
|
100
|
+
// 2.3.0. Checked against the release tags: 2.1.0 and 2.2.0 do not
|
|
101
|
+
// contain it, 2.4.0 does, and 2.4.1 removes it. The advisory's own
|
|
102
|
+
// range (<= 2.4.0) is wider than the code.
|
|
103
|
+
affectedFrom: '2.3.0',
|
|
104
|
+
fixedIn: '2.4.1',
|
|
105
|
+
},
|
|
55
106
|
{
|
|
56
107
|
// No upstream issue: this is how the images are built, not a bug in the
|
|
57
108
|
// node. Our own record carries the source references and the timings.
|
|
58
109
|
url: 'https://github.com/Vtechcom/hexcore-v2/issues/7',
|
|
59
110
|
title: 'The official image is amd64-only and will not run on an arm64 host',
|
|
60
|
-
impact: 'Every image cardano-scaling
|
|
111
|
+
impact: 'Every image cardano-scaling published before 2.4.0 is built for amd64 alone. On Apple Silicon it ' +
|
|
61
112
|
'runs under Rosetta, and from 2.2.0 the node forces the whole KZG trusted setup into ' +
|
|
62
113
|
'memory before it installs a tracer or opens its API socket — under Rosetta blst loses ' +
|
|
63
114
|
'the CPU paths that make that fast, so the node stalls there printing nothing at all ' +
|
|
64
115
|
'and the head fails as a plain readiness timeout with no clue in the log. On arm64 ' +
|
|
65
116
|
'Linux the daemon simply refuses the image unless qemu is installed. Measured: the ' +
|
|
66
117
|
'warm-up takes 0.47s on an arm64 rebuild of the same source and was never observed to ' +
|
|
67
|
-
'finish under Rosetta. Use
|
|
68
|
-
'fixed — or 2.1.x, which predates the
|
|
118
|
+
'finish under Rosetta. Use the official 2.4.1 or later, which is published for arm64 too, or ' +
|
|
119
|
+
'hydra-node 2.3.x (arm64) — same code, architecture fixed — or 2.1.x, which predates the ' +
|
|
120
|
+
'warm-up but carries a double-spend defect.',
|
|
69
121
|
severity: 'blocker',
|
|
70
122
|
/**
|
|
71
123
|
* Keyed on the image and the host, not on the version range, and both
|
|
@@ -82,6 +134,10 @@ exports.HYDRA_KNOWN_ISSUES = [
|
|
|
82
134
|
// The warm-up landed in 8ded45de4 / 016ec6ee2 (2026-05-27), tagged into
|
|
83
135
|
// 2.2.0. 2.1.0 predates it and boots under Rosetta.
|
|
84
136
|
affectedFrom: '2.2.0',
|
|
137
|
+
// hydra#2814: from 2.4.0 the release tags are manifest lists carrying
|
|
138
|
+
// linux/arm64 as well. `docker manifest inspect` on 2.4.0 and 2.4.1
|
|
139
|
+
// shows both architectures; on 2.3.0 a single amd64 manifest.
|
|
140
|
+
fixedIn: '2.4.0',
|
|
85
141
|
},
|
|
86
142
|
{
|
|
87
143
|
id: 2629,
|
|
@@ -197,6 +253,53 @@ function knownIssuesFor(image, backend, platform = 'unknown') {
|
|
|
197
253
|
* specific pattern must come before a broader one.
|
|
198
254
|
*/
|
|
199
255
|
exports.HYDRA_VERSION_PROFILES = [
|
|
256
|
+
/**
|
|
257
|
+
* 2.4.1 — the first release that is both safe to share a head on and
|
|
258
|
+
* published for arm64.
|
|
259
|
+
*
|
|
260
|
+
* 2.4.1 rather than 2.4.0: it fixes GHSA-cg83-6w6r-6hx3, and the two carry
|
|
261
|
+
* different script transactions in `networks.json`, so the patch version is
|
|
262
|
+
* what gets pinned. 2.4.0 still resolves here by tag and gets the advisory.
|
|
263
|
+
*
|
|
264
|
+
* Flags read from `hydra-node --help` on the actual image and diffed against
|
|
265
|
+
* 2.3.0: the Blockfrost timeout flags are gone (passing them aborts option
|
|
266
|
+
* parsing) and `--deposit-activation` is new. Nothing else changed.
|
|
267
|
+
*
|
|
268
|
+
* Not carried over from 2.3 and worth knowing before changing a head's
|
|
269
|
+
* image: script hashes and the snapshot signature changed, so a 2.4 node
|
|
270
|
+
* cannot join a head of 2.3 nodes, and `hydra.db` migrates to CBOR on first
|
|
271
|
+
* start, one way. Moving a head across needs a reset.
|
|
272
|
+
*/
|
|
273
|
+
{
|
|
274
|
+
id: '2.4',
|
|
275
|
+
label: 'hydra-node 2.4.x',
|
|
276
|
+
image: 'ghcr.io/cardano-scaling/hydra-node:2.4.1',
|
|
277
|
+
tagPattern: /^2\.4(\.|-|$)/,
|
|
278
|
+
flags: {
|
|
279
|
+
unsyncedPeriod: true,
|
|
280
|
+
blockfrostTimeouts: false,
|
|
281
|
+
network: true,
|
|
282
|
+
blockfrost: true,
|
|
283
|
+
offline: true,
|
|
284
|
+
depositActivation: true,
|
|
285
|
+
},
|
|
286
|
+
args: {
|
|
287
|
+
unsyncedPeriod: 180,
|
|
288
|
+
// Carried for completeness — the flags above gate them out of argv.
|
|
289
|
+
blockfrostQueryTimeout: 30,
|
|
290
|
+
blockfrostRetryTimeout: 300,
|
|
291
|
+
extraArgs: [],
|
|
292
|
+
},
|
|
293
|
+
summary: 'Current release. Fixes the snapshot security advisory in 2.3–2.4.0, and the official ' +
|
|
294
|
+
'image runs natively on Apple Silicon and arm64 Linux.',
|
|
295
|
+
/**
|
|
296
|
+
* Every platform, `darwin-arm64` included: the tag is a manifest list
|
|
297
|
+
* with linux/arm64 (hydra#2814), measured booting natively on an M1 —
|
|
298
|
+
* see docs/FIELD_NOTES.md. That retires the recommendation of the
|
|
299
|
+
* community-built 2.3 rebuild, and the personal registry with it.
|
|
300
|
+
*/
|
|
301
|
+
recommendedOn: ['darwin-arm64', 'darwin-x64', 'linux-arm64', 'linux-x64', 'unknown'],
|
|
302
|
+
},
|
|
200
303
|
/**
|
|
201
304
|
* 2.3.0 rebuilt for arm64 — the same source, the architecture fixed.
|
|
202
305
|
*
|
|
@@ -218,8 +321,10 @@ exports.HYDRA_VERSION_PROFILES = [
|
|
|
218
321
|
* Silicon is a version with a known double spend, and because it is
|
|
219
322
|
* reproducible: `tagPattern` matches the TAG, so anyone who rebuilds 2.3.0
|
|
220
323
|
* themselves and pushes `you/hydra-node:2.3.0-arm64` lands on this exact
|
|
221
|
-
* profile.
|
|
222
|
-
*
|
|
324
|
+
* profile.
|
|
325
|
+
*
|
|
326
|
+
* No longer recommended anywhere: from 2.4.0 the upstream image is
|
|
327
|
+
* multi-arch. Kept so heads already pinned to it still resolve by profile.
|
|
223
328
|
*/
|
|
224
329
|
{
|
|
225
330
|
id: '2.3-arm64',
|
|
@@ -232,6 +337,7 @@ exports.HYDRA_VERSION_PROFILES = [
|
|
|
232
337
|
network: true,
|
|
233
338
|
blockfrost: true,
|
|
234
339
|
offline: true,
|
|
340
|
+
depositActivation: false,
|
|
235
341
|
},
|
|
236
342
|
args: {
|
|
237
343
|
unsyncedPeriod: 180,
|
|
@@ -241,22 +347,6 @@ exports.HYDRA_VERSION_PROFILES = [
|
|
|
241
347
|
},
|
|
242
348
|
summary: '2.3.0 rebuilt for arm64. Identical code and flags, but it boots natively on Apple ' +
|
|
243
349
|
'Silicon instead of stalling under Rosetta. Community-built image.',
|
|
244
|
-
/**
|
|
245
|
-
* macOS on Apple Silicon only, and not arm64 Linux — which the image
|
|
246
|
-
* would also run on.
|
|
247
|
-
*
|
|
248
|
-
* The narrowing is about what happens when we say nothing. On Docker
|
|
249
|
-
* Desktop the amd64 image *starts* and then stalls in silence, so an
|
|
250
|
-
* operator with no recommendation is left with a head that failed for
|
|
251
|
-
* no visible reason: that is worth spending a third-party image on. On
|
|
252
|
-
* arm64 Linux the daemon rejects the image immediately and says exactly
|
|
253
|
-
* why, so the operator can see the problem and choose — including by
|
|
254
|
-
* rebuilding it themselves, which the known-issue text points at.
|
|
255
|
-
*
|
|
256
|
-
* Pointing people at an account this project does not own is a cost.
|
|
257
|
-
* It is paid where it buys the most and nowhere else.
|
|
258
|
-
*/
|
|
259
|
-
recommendedOn: ['darwin-arm64'],
|
|
260
350
|
},
|
|
261
351
|
{
|
|
262
352
|
id: '2.3',
|
|
@@ -269,6 +359,7 @@ exports.HYDRA_VERSION_PROFILES = [
|
|
|
269
359
|
network: true,
|
|
270
360
|
blockfrost: true,
|
|
271
361
|
offline: true,
|
|
362
|
+
depositActivation: false,
|
|
272
363
|
},
|
|
273
364
|
args: {
|
|
274
365
|
// 180s is upstream's tested value: it clears Blockfrost's 50-80s tip
|
|
@@ -281,23 +372,12 @@ exports.HYDRA_VERSION_PROFILES = [
|
|
|
281
372
|
extraArgs: [],
|
|
282
373
|
},
|
|
283
374
|
summary: 'Full Blockfrost drift tolerance. No commit phase (ADR-33), SQLite event store.',
|
|
284
|
-
|
|
285
|
-
* Upstream's own build, and the default everywhere except macOS on
|
|
286
|
-
* Apple Silicon. `unknown` gets it too: when we cannot tell what the
|
|
287
|
-
* machine is, the image published by the project is more defensible
|
|
288
|
-
* than one rebuilt by an individual.
|
|
289
|
-
*
|
|
290
|
-
* `linux-arm64` is in this list knowingly. The image will not run there
|
|
291
|
-
* either — but the daemon says so immediately and by name, and that is
|
|
292
|
-
* a better place to leave someone than pointed at a personal registry.
|
|
293
|
-
* The known-issue entry still fires and names the alternative.
|
|
294
|
-
*/
|
|
295
|
-
recommendedOn: ['darwin-x64', 'linux-x64', 'linux-arm64', 'unknown'],
|
|
375
|
+
// No longer recommended: 2.4.1 fixes the security advisory this carries.
|
|
296
376
|
},
|
|
297
377
|
/**
|
|
298
378
|
* 2.1 is the one concession to machines that cannot run 2.3.0's image.
|
|
299
379
|
*
|
|
300
|
-
* Every hydra-node image is amd64-only, and from 2.2.0 on the node forces
|
|
380
|
+
* Every hydra-node image before 2.4.0 is amd64-only, and from 2.2.0 on the node forces
|
|
301
381
|
* the entire KZG trusted setup into memory before it opens a socket or
|
|
302
382
|
* installs a tracer — under Rosetta that outlasts the readiness budget
|
|
303
383
|
* without printing a single line, so the node simply never greets. 2.1.0
|
|
@@ -310,9 +390,8 @@ exports.HYDRA_VERSION_PROFILES = [
|
|
|
310
390
|
* by hand still works, and HYDRA_KNOWN_ISSUES still warns, because that
|
|
311
391
|
* matches by version range rather than by profile.
|
|
312
392
|
*
|
|
313
|
-
* The real answer for arm64 is
|
|
314
|
-
*
|
|
315
|
-
* `you/hydra-node:2.3.0` resolves to the 2.3 profile with no probe needed.
|
|
393
|
+
* The real answer for arm64 is now upstream's 2.4.1, which is multi-arch;
|
|
394
|
+
* before it, a rebuilt 2.3 image taken as a custom reference.
|
|
316
395
|
*
|
|
317
396
|
* Flags below were read from `hydra-node --help` on the actual image, not
|
|
318
397
|
* inferred from the version line: 2.1.0 accepts everything 2.3.0 does,
|
|
@@ -329,6 +408,7 @@ exports.HYDRA_VERSION_PROFILES = [
|
|
|
329
408
|
network: true,
|
|
330
409
|
blockfrost: true,
|
|
331
410
|
offline: true,
|
|
411
|
+
depositActivation: false,
|
|
332
412
|
},
|
|
333
413
|
args: {
|
|
334
414
|
unsyncedPeriod: 180,
|
|
@@ -354,6 +434,7 @@ exports.HYDRA_VERSION_PROFILES = [
|
|
|
354
434
|
// Offline mode predates both lines, so it is the one advanced
|
|
355
435
|
// capability 0.22.x shares with 2.x.
|
|
356
436
|
offline: true,
|
|
437
|
+
depositActivation: false,
|
|
357
438
|
},
|
|
358
439
|
args: {
|
|
359
440
|
// Carried for completeness — the flags above gate them out of argv.
|
|
@@ -363,7 +444,7 @@ exports.HYDRA_VERSION_PROFILES = [
|
|
|
363
444
|
extraArgs: [],
|
|
364
445
|
},
|
|
365
446
|
summary: 'Legacy protocol (commit phase, older scripts). Runs with a 60s unsynced budget ' +
|
|
366
|
-
'inside Blockfrost’s 50-80s drift band — prefer 2.
|
|
447
|
+
'inside Blockfrost’s 50-80s drift band — prefer 2.4.x on Blockfrost.',
|
|
367
448
|
},
|
|
368
449
|
];
|
|
369
450
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hydra-versions.js","sourceRoot":"","sources":["../../src/hydra-versions.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAiDH,0BAEC;
|
|
1
|
+
{"version":3,"file":"hydra-versions.js","sourceRoot":"","sources":["../../src/hydra-versions.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAiDH,0BAEC;AAmOD,0CAIC;AAGD,0CAQC;AASD,wCAqBC;AAiSD,4BAKC;AAGD,gDAIC;AAeD,4CAWC;AAmBD,sCAcC;AAiCD,wCAMC;AA3qBD,8EAA8E;AACjE,QAAA,cAAc,GAA4B;IACnD,cAAc;IACd,YAAY;IACZ,aAAa;IACb,WAAW;IACX,SAAS;CACZ,CAAC;AAEF,0EAA0E;AAC1E,SAAgB,OAAO,CAAC,QAAsB;IAC1C,OAAO,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,aAAa,CAAC;AACrE,CAAC;AAgED;;;;;;GAMG;AACU,QAAA,kBAAkB,GAA+B;IAC1D;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,4EAA4E;QACnF,MAAM,EACF,4FAA4F;YAC5F,8FAA8F;YAC9F,+FAA+F;YAC/F,4FAA4F;YAC5F,gGAAgG;YAChG,oCAAoC;QACxC;;;;WAIG;QACH,QAAQ,EAAE,SAAS;QACnB,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,YAAY,EAAE,OAAO;QACrB,6DAA6D;QAC7D,QAAQ,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;KAC3C;IACD;QACI,qEAAqE;QACrE,+CAA+C;QAC/C,GAAG,EAAE,kFAAkF;QACvF,KAAK,EAAE,kFAAkF;QACzF,MAAM,EACF,iGAAiG;YACjG,+FAA+F;YAC/F,kGAAkG;YAClG,gGAAgG;YAChG,gGAAgG;YAChG,iGAAiG;YACjG,+FAA+F;YAC/F,+EAA+E;QACnF;;;;;WAKG;QACH,QAAQ,EAAE,SAAS;QACnB,qEAAqE;QACrE,kEAAkE;QAClE,mEAAmE;QACnE,2CAA2C;QAC3C,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,OAAO;KACnB;IACD;QACI,wEAAwE;QACxE,sEAAsE;QACtE,GAAG,EAAE,iDAAiD;QACtD,KAAK,EAAE,oEAAoE;QAC3E,MAAM,EACF,mGAAmG;YACnG,sFAAsF;YACtF,wFAAwF;YACxF,sFAAsF;YACtF,oFAAoF;YACpF,oFAAoF;YACpF,uFAAuF;YACvF,8FAA8F;YAC9F,0FAA0F;YAC1F,4CAA4C;QAChD,QAAQ,EAAE,SAAS;QACnB;;;;;;;;;WASG;QACH,YAAY,EAAE,wCAAwC;QACtD,aAAa,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;QAC9C,wEAAwE;QACxE,oDAAoD;QACpD,YAAY,EAAE,OAAO;QACrB,sEAAsE;QACtE,oEAAoE;QACpE,8DAA8D;QAC9D,OAAO,EAAE,OAAO;KACnB;IACD;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,sDAAsD;QAC7D,MAAM,EACF,4FAA4F;YAC5F,0FAA0F;YAC1F,4FAA4F;YAC5F,+EAA+E;QACnF,QAAQ,EAAE,SAAS;QACnB,kEAAkE;QAClE,oEAAoE;QACpE,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,OAAO;KACnB;IACD;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,8CAA8C;QACrD,MAAM,EACF,4FAA4F;YAC5F,+FAA+F;YAC/F,qFAAqF;YACrF,8DAA8D;QAClE,QAAQ,EAAE,SAAS;QACnB,sEAAsE;QACtE,sBAAsB;QACtB,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,OAAO;KACnB;IACD;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,yEAAyE;QAChF,MAAM,EACF,yFAAyF;YACzF,4FAA4F;YAC5F,qFAAqF;QACzF,QAAQ,EAAE,SAAS;QACnB,wEAAwE;QACxE,oCAAoC;QACpC,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,CAAC,YAAY,CAAC;KAC3B;IACD;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,6DAA6D;QACpE,MAAM,EACF,6FAA6F;YAC7F,8FAA8F;YAC9F,6EAA6E;QACjF,QAAQ,EAAE,SAAS;QACnB,kEAAkE;QAClE,iCAAiC;QACjC,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,OAAO;KACnB;CACJ,CAAC;AAEF;;;;GAIG;AACH,SAAgB,eAAe,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,mEAAmE;AACnE,SAAgB,eAAe,CAAC,GAAW,EAAE,KAAa;IACtD,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAC,CAAE;YAAE,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAC1B,KAAa,EACb,OAAsB,EACtB,WAAyB,SAAS;IAElC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7C,OAAO,0BAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACrC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,KAAK,CAAC,YAAY,IAAI,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE;;;;;WAKG;QACH,IAAI,KAAK,CAAC,aAAa,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3G,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;AACP,CAAC;AAkED;;;GAGG;AACU,QAAA,sBAAsB,GAAmC;IAClE;;;;;;;;;;;;;;;;OAgBG;IACH;QACI,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,0CAA0C;QACjD,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE;YACH,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,KAAK;YACzB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,IAAI;SAC1B;QACD,IAAI,EAAE;YACF,cAAc,EAAE,GAAG;YACnB,oEAAoE;YACpE,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EACH,uFAAuF;YACvF,uDAAuD;QAC3D;;;;;WAKG;QACH,aAAa,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC;KACvF;IACD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH;QACI,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,0BAA0B;QACjC,KAAK,EAAE,iCAAiC;QACxC,UAAU,EAAE,sBAAsB;QAClC,KAAK,EAAE;YACH,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,KAAK;SAC3B;QACD,IAAI,EAAE;YACF,cAAc,EAAE,GAAG;YACnB,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EACH,oFAAoF;YACpF,mEAAmE;KAC1E;IACD;QACI,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,0CAA0C;QACjD,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE;YACH,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,KAAK;SAC3B;QACD,IAAI,EAAE;YACF,qEAAqE;YACrE,mEAAmE;YACnE,mEAAmE;YACnE,6BAA6B;YAC7B,cAAc,EAAE,GAAG;YACnB,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EAAE,gFAAgF;QACzF,yEAAyE;KAC5E;IACD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH;QACI,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,0CAA0C;QACjD,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE;YACH,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,KAAK;SAC3B;QACD,IAAI,EAAE;YACF,cAAc,EAAE,GAAG;YACnB,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EACH,2FAA2F;YAC3F,6EAA6E;KACpF;IACD;QACI,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,2CAA2C;QAClD,UAAU,EAAE,gBAAgB;QAC5B,KAAK,EAAE;YACH,mEAAmE;YACnE,0DAA0D;YAC1D,cAAc,EAAE,KAAK;YACrB,kBAAkB,EAAE,KAAK;YACzB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,8DAA8D;YAC9D,qCAAqC;YACrC,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,KAAK;SAC3B;QACD,IAAI,EAAE;YACF,oEAAoE;YACpE,cAAc,EAAE,GAAG;YACnB,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EACH,iFAAiF;YACjF,qEAAqE;KAC5E;CACJ,CAAC;AAEF;;;;GAIG;AACU,QAAA,mBAAmB,GAAqB;IACjD,cAAc,EAAE,GAAG;IACnB,sBAAsB,EAAE,EAAE;IAC1B,sBAAsB,EAAE,GAAG;IAC3B,SAAS,EAAE,EAAE;CAChB,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,QAAQ,CAAC,KAAa;IAClC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,4EAA4E;AAC5E,SAAgB,kBAAkB,CAAC,KAAa;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,8BAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,CAAC;AASD;;;;;GAKG;AACH,SAAgB,gBAAgB,CAC5B,OAAwC,EACxC,YAA+B,EAAE;IAEjC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,2BAAmB,CAAC;IAClD,OAAO;QACH,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;QAC/D,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,IAAI,IAAI,CAAC,sBAAsB;QACvF,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,IAAI,IAAI,CAAC,sBAAsB;QACvF,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;KACjC,CAAC;AACN,CAAC;AAmBD,SAAgB,aAAa,CAAC,OAA4B,EAAE,WAAyB,SAAS;IAC1F,OAAO;QACH,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK;QAC/D,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE;QAC3B,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;QACjE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;KACrF,CAAC;AACN,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB;IACzC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAClD,OAAO,IAAI,CAAC;AAChB,CAAC;AAoBD;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,EAAU,EAAE,IAAY;IACnD,IAAI,EAAE,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,cAAc,CAAC;IAC/D,IAAI,EAAE,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,YAAY,CAAC;IAC3D,IAAI,EAAE,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC;IAC7D,IAAI,EAAE,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IACzD,OAAO,SAAS,CAAC;AACrB,CAAC"}
|
|
@@ -40,20 +40,72 @@ export function isArm64(platform) {
|
|
|
40
40
|
* retired when it is fixed.
|
|
41
41
|
*/
|
|
42
42
|
export const HYDRA_KNOWN_ISSUES = [
|
|
43
|
+
{
|
|
44
|
+
id: 2871,
|
|
45
|
+
url: 'https://github.com/cardano-scaling/hydra/issues/2871',
|
|
46
|
+
title: 'A deposit below the minimum ADA of its output is locked and never recorded',
|
|
47
|
+
impact: "The deposit output's inline datum lists the deposited UTxO, so it needs more ADA than the " +
|
|
48
|
+
'UTxO itself — about 1.5 ADA for a plain one, more with tokens. `/commit` tops the output up ' +
|
|
49
|
+
'while the datum keeps the original value, the node rejects the mismatch when it observes the ' +
|
|
50
|
+
'deposit, and the funds sit at the deposit script with no `CommitRecorded` and no recovery ' +
|
|
51
|
+
'through the node. Deposit comfortably above the minimum — a token UTxO at its own minimum ADA ' +
|
|
52
|
+
'is the typical case that trips it.',
|
|
53
|
+
/**
|
|
54
|
+
* `warning`: the head keeps running, and only a deposit of one shape
|
|
55
|
+
* is lost — one an operator can avoid once told. Every 2.x version
|
|
56
|
+
* carries it, so a blocker here would put a blocker on every choice.
|
|
57
|
+
*/
|
|
58
|
+
severity: 'warning',
|
|
59
|
+
// The exact-value guard and its "silently ignores deposits" TODO in
|
|
60
|
+
// observeDepositTxOut are in every tag from 2.0.0 to 2.4.1 and absent
|
|
61
|
+
// from 1.0.0 and 0.22.4. Fixed on master by d89c0b9b3 (DepositTooLow),
|
|
62
|
+
// not yet in a release — set fixedIn when the release carrying it ships.
|
|
63
|
+
affectedFrom: '2.0.0',
|
|
64
|
+
// Offline heads start from --initial-utxo and never deposit.
|
|
65
|
+
backends: ['blockfrost', 'cardano-node'],
|
|
66
|
+
},
|
|
67
|
+
{
|
|
68
|
+
// A security advisory, not an issue, so there is no number for `id`.
|
|
69
|
+
// The advisory itself is the checkable record.
|
|
70
|
+
url: 'https://github.com/cardano-scaling/hydra/security/advisories/GHSA-cg83-6w6r-6hx3',
|
|
71
|
+
title: 'Security: a malicious participant can get a snapshot confirmed that steals funds',
|
|
72
|
+
impact: 'Critical upstream advisory GHSA-cg83-6w6r-6hx3. When confirming a snapshot the node re-applied ' +
|
|
73
|
+
'transactions on a path that skips signature checks and Plutus evaluation, and an unvalidated ' +
|
|
74
|
+
'transaction could reach it — so one participant, using only their own Hydra key, can get honest ' +
|
|
75
|
+
"nodes to sign a snapshot that moves another participant's funds to themselves, and Close plus " +
|
|
76
|
+
'Fanout pays it out on L1. Only another party in the head can do this; a head whose every node ' +
|
|
77
|
+
'runs in this one Hexcore has nobody to exploit it. Upgrade to 2.4.1 before sharing a head with ' +
|
|
78
|
+
'anyone you do not control — your own node on 2.4.1 is enough, since every snapshot needs its ' +
|
|
79
|
+
'signature. Coming from 2.3, close and fan out first: 2.4 changed the scripts.',
|
|
80
|
+
/**
|
|
81
|
+
* `warning` and not `blocker`, on the scale this field defines: the head
|
|
82
|
+
* neither stops nor dies, and the exploit needs a dishonest participant,
|
|
83
|
+
* which a head run entirely from one installation does not have. It
|
|
84
|
+
* matters the moment a head is shared — and that is what the text says.
|
|
85
|
+
*/
|
|
86
|
+
severity: 'warning',
|
|
87
|
+
// The reapply path landed in dc17f23fa (2026-06-08), first tagged in
|
|
88
|
+
// 2.3.0. Checked against the release tags: 2.1.0 and 2.2.0 do not
|
|
89
|
+
// contain it, 2.4.0 does, and 2.4.1 removes it. The advisory's own
|
|
90
|
+
// range (<= 2.4.0) is wider than the code.
|
|
91
|
+
affectedFrom: '2.3.0',
|
|
92
|
+
fixedIn: '2.4.1',
|
|
93
|
+
},
|
|
43
94
|
{
|
|
44
95
|
// No upstream issue: this is how the images are built, not a bug in the
|
|
45
96
|
// node. Our own record carries the source references and the timings.
|
|
46
97
|
url: 'https://github.com/Vtechcom/hexcore-v2/issues/7',
|
|
47
98
|
title: 'The official image is amd64-only and will not run on an arm64 host',
|
|
48
|
-
impact: 'Every image cardano-scaling
|
|
99
|
+
impact: 'Every image cardano-scaling published before 2.4.0 is built for amd64 alone. On Apple Silicon it ' +
|
|
49
100
|
'runs under Rosetta, and from 2.2.0 the node forces the whole KZG trusted setup into ' +
|
|
50
101
|
'memory before it installs a tracer or opens its API socket — under Rosetta blst loses ' +
|
|
51
102
|
'the CPU paths that make that fast, so the node stalls there printing nothing at all ' +
|
|
52
103
|
'and the head fails as a plain readiness timeout with no clue in the log. On arm64 ' +
|
|
53
104
|
'Linux the daemon simply refuses the image unless qemu is installed. Measured: the ' +
|
|
54
105
|
'warm-up takes 0.47s on an arm64 rebuild of the same source and was never observed to ' +
|
|
55
|
-
'finish under Rosetta. Use
|
|
56
|
-
'fixed — or 2.1.x, which predates the
|
|
106
|
+
'finish under Rosetta. Use the official 2.4.1 or later, which is published for arm64 too, or ' +
|
|
107
|
+
'hydra-node 2.3.x (arm64) — same code, architecture fixed — or 2.1.x, which predates the ' +
|
|
108
|
+
'warm-up but carries a double-spend defect.',
|
|
57
109
|
severity: 'blocker',
|
|
58
110
|
/**
|
|
59
111
|
* Keyed on the image and the host, not on the version range, and both
|
|
@@ -70,6 +122,10 @@ export const HYDRA_KNOWN_ISSUES = [
|
|
|
70
122
|
// The warm-up landed in 8ded45de4 / 016ec6ee2 (2026-05-27), tagged into
|
|
71
123
|
// 2.2.0. 2.1.0 predates it and boots under Rosetta.
|
|
72
124
|
affectedFrom: '2.2.0',
|
|
125
|
+
// hydra#2814: from 2.4.0 the release tags are manifest lists carrying
|
|
126
|
+
// linux/arm64 as well. `docker manifest inspect` on 2.4.0 and 2.4.1
|
|
127
|
+
// shows both architectures; on 2.3.0 a single amd64 manifest.
|
|
128
|
+
fixedIn: '2.4.0',
|
|
73
129
|
},
|
|
74
130
|
{
|
|
75
131
|
id: 2629,
|
|
@@ -185,6 +241,53 @@ export function knownIssuesFor(image, backend, platform = 'unknown') {
|
|
|
185
241
|
* specific pattern must come before a broader one.
|
|
186
242
|
*/
|
|
187
243
|
export const HYDRA_VERSION_PROFILES = [
|
|
244
|
+
/**
|
|
245
|
+
* 2.4.1 — the first release that is both safe to share a head on and
|
|
246
|
+
* published for arm64.
|
|
247
|
+
*
|
|
248
|
+
* 2.4.1 rather than 2.4.0: it fixes GHSA-cg83-6w6r-6hx3, and the two carry
|
|
249
|
+
* different script transactions in `networks.json`, so the patch version is
|
|
250
|
+
* what gets pinned. 2.4.0 still resolves here by tag and gets the advisory.
|
|
251
|
+
*
|
|
252
|
+
* Flags read from `hydra-node --help` on the actual image and diffed against
|
|
253
|
+
* 2.3.0: the Blockfrost timeout flags are gone (passing them aborts option
|
|
254
|
+
* parsing) and `--deposit-activation` is new. Nothing else changed.
|
|
255
|
+
*
|
|
256
|
+
* Not carried over from 2.3 and worth knowing before changing a head's
|
|
257
|
+
* image: script hashes and the snapshot signature changed, so a 2.4 node
|
|
258
|
+
* cannot join a head of 2.3 nodes, and `hydra.db` migrates to CBOR on first
|
|
259
|
+
* start, one way. Moving a head across needs a reset.
|
|
260
|
+
*/
|
|
261
|
+
{
|
|
262
|
+
id: '2.4',
|
|
263
|
+
label: 'hydra-node 2.4.x',
|
|
264
|
+
image: 'ghcr.io/cardano-scaling/hydra-node:2.4.1',
|
|
265
|
+
tagPattern: /^2\.4(\.|-|$)/,
|
|
266
|
+
flags: {
|
|
267
|
+
unsyncedPeriod: true,
|
|
268
|
+
blockfrostTimeouts: false,
|
|
269
|
+
network: true,
|
|
270
|
+
blockfrost: true,
|
|
271
|
+
offline: true,
|
|
272
|
+
depositActivation: true,
|
|
273
|
+
},
|
|
274
|
+
args: {
|
|
275
|
+
unsyncedPeriod: 180,
|
|
276
|
+
// Carried for completeness — the flags above gate them out of argv.
|
|
277
|
+
blockfrostQueryTimeout: 30,
|
|
278
|
+
blockfrostRetryTimeout: 300,
|
|
279
|
+
extraArgs: [],
|
|
280
|
+
},
|
|
281
|
+
summary: 'Current release. Fixes the snapshot security advisory in 2.3–2.4.0, and the official ' +
|
|
282
|
+
'image runs natively on Apple Silicon and arm64 Linux.',
|
|
283
|
+
/**
|
|
284
|
+
* Every platform, `darwin-arm64` included: the tag is a manifest list
|
|
285
|
+
* with linux/arm64 (hydra#2814), measured booting natively on an M1 —
|
|
286
|
+
* see docs/FIELD_NOTES.md. That retires the recommendation of the
|
|
287
|
+
* community-built 2.3 rebuild, and the personal registry with it.
|
|
288
|
+
*/
|
|
289
|
+
recommendedOn: ['darwin-arm64', 'darwin-x64', 'linux-arm64', 'linux-x64', 'unknown'],
|
|
290
|
+
},
|
|
188
291
|
/**
|
|
189
292
|
* 2.3.0 rebuilt for arm64 — the same source, the architecture fixed.
|
|
190
293
|
*
|
|
@@ -206,8 +309,10 @@ export const HYDRA_VERSION_PROFILES = [
|
|
|
206
309
|
* Silicon is a version with a known double spend, and because it is
|
|
207
310
|
* reproducible: `tagPattern` matches the TAG, so anyone who rebuilds 2.3.0
|
|
208
311
|
* themselves and pushes `you/hydra-node:2.3.0-arm64` lands on this exact
|
|
209
|
-
* profile.
|
|
210
|
-
*
|
|
312
|
+
* profile.
|
|
313
|
+
*
|
|
314
|
+
* No longer recommended anywhere: from 2.4.0 the upstream image is
|
|
315
|
+
* multi-arch. Kept so heads already pinned to it still resolve by profile.
|
|
211
316
|
*/
|
|
212
317
|
{
|
|
213
318
|
id: '2.3-arm64',
|
|
@@ -220,6 +325,7 @@ export const HYDRA_VERSION_PROFILES = [
|
|
|
220
325
|
network: true,
|
|
221
326
|
blockfrost: true,
|
|
222
327
|
offline: true,
|
|
328
|
+
depositActivation: false,
|
|
223
329
|
},
|
|
224
330
|
args: {
|
|
225
331
|
unsyncedPeriod: 180,
|
|
@@ -229,22 +335,6 @@ export const HYDRA_VERSION_PROFILES = [
|
|
|
229
335
|
},
|
|
230
336
|
summary: '2.3.0 rebuilt for arm64. Identical code and flags, but it boots natively on Apple ' +
|
|
231
337
|
'Silicon instead of stalling under Rosetta. Community-built image.',
|
|
232
|
-
/**
|
|
233
|
-
* macOS on Apple Silicon only, and not arm64 Linux — which the image
|
|
234
|
-
* would also run on.
|
|
235
|
-
*
|
|
236
|
-
* The narrowing is about what happens when we say nothing. On Docker
|
|
237
|
-
* Desktop the amd64 image *starts* and then stalls in silence, so an
|
|
238
|
-
* operator with no recommendation is left with a head that failed for
|
|
239
|
-
* no visible reason: that is worth spending a third-party image on. On
|
|
240
|
-
* arm64 Linux the daemon rejects the image immediately and says exactly
|
|
241
|
-
* why, so the operator can see the problem and choose — including by
|
|
242
|
-
* rebuilding it themselves, which the known-issue text points at.
|
|
243
|
-
*
|
|
244
|
-
* Pointing people at an account this project does not own is a cost.
|
|
245
|
-
* It is paid where it buys the most and nowhere else.
|
|
246
|
-
*/
|
|
247
|
-
recommendedOn: ['darwin-arm64'],
|
|
248
338
|
},
|
|
249
339
|
{
|
|
250
340
|
id: '2.3',
|
|
@@ -257,6 +347,7 @@ export const HYDRA_VERSION_PROFILES = [
|
|
|
257
347
|
network: true,
|
|
258
348
|
blockfrost: true,
|
|
259
349
|
offline: true,
|
|
350
|
+
depositActivation: false,
|
|
260
351
|
},
|
|
261
352
|
args: {
|
|
262
353
|
// 180s is upstream's tested value: it clears Blockfrost's 50-80s tip
|
|
@@ -269,23 +360,12 @@ export const HYDRA_VERSION_PROFILES = [
|
|
|
269
360
|
extraArgs: [],
|
|
270
361
|
},
|
|
271
362
|
summary: 'Full Blockfrost drift tolerance. No commit phase (ADR-33), SQLite event store.',
|
|
272
|
-
|
|
273
|
-
* Upstream's own build, and the default everywhere except macOS on
|
|
274
|
-
* Apple Silicon. `unknown` gets it too: when we cannot tell what the
|
|
275
|
-
* machine is, the image published by the project is more defensible
|
|
276
|
-
* than one rebuilt by an individual.
|
|
277
|
-
*
|
|
278
|
-
* `linux-arm64` is in this list knowingly. The image will not run there
|
|
279
|
-
* either — but the daemon says so immediately and by name, and that is
|
|
280
|
-
* a better place to leave someone than pointed at a personal registry.
|
|
281
|
-
* The known-issue entry still fires and names the alternative.
|
|
282
|
-
*/
|
|
283
|
-
recommendedOn: ['darwin-x64', 'linux-x64', 'linux-arm64', 'unknown'],
|
|
363
|
+
// No longer recommended: 2.4.1 fixes the security advisory this carries.
|
|
284
364
|
},
|
|
285
365
|
/**
|
|
286
366
|
* 2.1 is the one concession to machines that cannot run 2.3.0's image.
|
|
287
367
|
*
|
|
288
|
-
* Every hydra-node image is amd64-only, and from 2.2.0 on the node forces
|
|
368
|
+
* Every hydra-node image before 2.4.0 is amd64-only, and from 2.2.0 on the node forces
|
|
289
369
|
* the entire KZG trusted setup into memory before it opens a socket or
|
|
290
370
|
* installs a tracer — under Rosetta that outlasts the readiness budget
|
|
291
371
|
* without printing a single line, so the node simply never greets. 2.1.0
|
|
@@ -298,9 +378,8 @@ export const HYDRA_VERSION_PROFILES = [
|
|
|
298
378
|
* by hand still works, and HYDRA_KNOWN_ISSUES still warns, because that
|
|
299
379
|
* matches by version range rather than by profile.
|
|
300
380
|
*
|
|
301
|
-
* The real answer for arm64 is
|
|
302
|
-
*
|
|
303
|
-
* `you/hydra-node:2.3.0` resolves to the 2.3 profile with no probe needed.
|
|
381
|
+
* The real answer for arm64 is now upstream's 2.4.1, which is multi-arch;
|
|
382
|
+
* before it, a rebuilt 2.3 image taken as a custom reference.
|
|
304
383
|
*
|
|
305
384
|
* Flags below were read from `hydra-node --help` on the actual image, not
|
|
306
385
|
* inferred from the version line: 2.1.0 accepts everything 2.3.0 does,
|
|
@@ -317,6 +396,7 @@ export const HYDRA_VERSION_PROFILES = [
|
|
|
317
396
|
network: true,
|
|
318
397
|
blockfrost: true,
|
|
319
398
|
offline: true,
|
|
399
|
+
depositActivation: false,
|
|
320
400
|
},
|
|
321
401
|
args: {
|
|
322
402
|
unsyncedPeriod: 180,
|
|
@@ -342,6 +422,7 @@ export const HYDRA_VERSION_PROFILES = [
|
|
|
342
422
|
// Offline mode predates both lines, so it is the one advanced
|
|
343
423
|
// capability 0.22.x shares with 2.x.
|
|
344
424
|
offline: true,
|
|
425
|
+
depositActivation: false,
|
|
345
426
|
},
|
|
346
427
|
args: {
|
|
347
428
|
// Carried for completeness — the flags above gate them out of argv.
|
|
@@ -351,7 +432,7 @@ export const HYDRA_VERSION_PROFILES = [
|
|
|
351
432
|
extraArgs: [],
|
|
352
433
|
},
|
|
353
434
|
summary: 'Legacy protocol (commit phase, older scripts). Runs with a 60s unsynced budget ' +
|
|
354
|
-
'inside Blockfrost’s 50-80s drift band — prefer 2.
|
|
435
|
+
'inside Blockfrost’s 50-80s drift band — prefer 2.4.x on Blockfrost.',
|
|
355
436
|
},
|
|
356
437
|
];
|
|
357
438
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hydra-versions.js","sourceRoot":"","sources":["../../src/hydra-versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAuCH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAA4B;IACnD,cAAc;IACd,YAAY;IACZ,aAAa;IACb,WAAW;IACX,SAAS;CACZ,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,OAAO,CAAC,QAAsB;IAC1C,OAAO,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,aAAa,CAAC;AACrE,CAAC;
|
|
1
|
+
{"version":3,"file":"hydra-versions.js","sourceRoot":"","sources":["../../src/hydra-versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAuCH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAA4B;IACnD,cAAc;IACd,YAAY;IACZ,aAAa;IACb,WAAW;IACX,SAAS;CACZ,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,OAAO,CAAC,QAAsB;IAC1C,OAAO,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,aAAa,CAAC;AACrE,CAAC;AAgED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC1D;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,4EAA4E;QACnF,MAAM,EACF,4FAA4F;YAC5F,8FAA8F;YAC9F,+FAA+F;YAC/F,4FAA4F;YAC5F,gGAAgG;YAChG,oCAAoC;QACxC;;;;WAIG;QACH,QAAQ,EAAE,SAAS;QACnB,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,YAAY,EAAE,OAAO;QACrB,6DAA6D;QAC7D,QAAQ,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;KAC3C;IACD;QACI,qEAAqE;QACrE,+CAA+C;QAC/C,GAAG,EAAE,kFAAkF;QACvF,KAAK,EAAE,kFAAkF;QACzF,MAAM,EACF,iGAAiG;YACjG,+FAA+F;YAC/F,kGAAkG;YAClG,gGAAgG;YAChG,gGAAgG;YAChG,iGAAiG;YACjG,+FAA+F;YAC/F,+EAA+E;QACnF;;;;;WAKG;QACH,QAAQ,EAAE,SAAS;QACnB,qEAAqE;QACrE,kEAAkE;QAClE,mEAAmE;QACnE,2CAA2C;QAC3C,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,OAAO;KACnB;IACD;QACI,wEAAwE;QACxE,sEAAsE;QACtE,GAAG,EAAE,iDAAiD;QACtD,KAAK,EAAE,oEAAoE;QAC3E,MAAM,EACF,mGAAmG;YACnG,sFAAsF;YACtF,wFAAwF;YACxF,sFAAsF;YACtF,oFAAoF;YACpF,oFAAoF;YACpF,uFAAuF;YACvF,8FAA8F;YAC9F,0FAA0F;YAC1F,4CAA4C;QAChD,QAAQ,EAAE,SAAS;QACnB;;;;;;;;;WASG;QACH,YAAY,EAAE,wCAAwC;QACtD,aAAa,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;QAC9C,wEAAwE;QACxE,oDAAoD;QACpD,YAAY,EAAE,OAAO;QACrB,sEAAsE;QACtE,oEAAoE;QACpE,8DAA8D;QAC9D,OAAO,EAAE,OAAO;KACnB;IACD;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,sDAAsD;QAC7D,MAAM,EACF,4FAA4F;YAC5F,0FAA0F;YAC1F,4FAA4F;YAC5F,+EAA+E;QACnF,QAAQ,EAAE,SAAS;QACnB,kEAAkE;QAClE,oEAAoE;QACpE,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,OAAO;KACnB;IACD;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,8CAA8C;QACrD,MAAM,EACF,4FAA4F;YAC5F,+FAA+F;YAC/F,qFAAqF;YACrF,8DAA8D;QAClE,QAAQ,EAAE,SAAS;QACnB,sEAAsE;QACtE,sBAAsB;QACtB,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,OAAO;KACnB;IACD;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,yEAAyE;QAChF,MAAM,EACF,yFAAyF;YACzF,4FAA4F;YAC5F,qFAAqF;QACzF,QAAQ,EAAE,SAAS;QACnB,wEAAwE;QACxE,oCAAoC;QACpC,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,CAAC,YAAY,CAAC;KAC3B;IACD;QACI,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,sDAAsD;QAC3D,KAAK,EAAE,6DAA6D;QACpE,MAAM,EACF,6FAA6F;YAC7F,8FAA8F;YAC9F,6EAA6E;QACjF,QAAQ,EAAE,SAAS;QACnB,kEAAkE;QAClE,iCAAiC;QACjC,YAAY,EAAE,OAAO;QACrB,OAAO,EAAE,OAAO;KACnB;CACJ,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,KAAa;IACtD,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAC,CAAE;YAAE,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC1B,KAAa,EACb,OAAsB,EACtB,WAAyB,SAAS;IAElC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7C,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACrC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,KAAK,CAAC,YAAY,IAAI,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE;;;;;WAKG;QACH,IAAI,KAAK,CAAC,aAAa,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3G,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;AACP,CAAC;AAkED;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IAClE;;;;;;;;;;;;;;;;OAgBG;IACH;QACI,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,0CAA0C;QACjD,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE;YACH,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,KAAK;YACzB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,IAAI;SAC1B;QACD,IAAI,EAAE;YACF,cAAc,EAAE,GAAG;YACnB,oEAAoE;YACpE,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EACH,uFAAuF;YACvF,uDAAuD;QAC3D;;;;;WAKG;QACH,aAAa,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC;KACvF;IACD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH;QACI,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,0BAA0B;QACjC,KAAK,EAAE,iCAAiC;QACxC,UAAU,EAAE,sBAAsB;QAClC,KAAK,EAAE;YACH,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,KAAK;SAC3B;QACD,IAAI,EAAE;YACF,cAAc,EAAE,GAAG;YACnB,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EACH,oFAAoF;YACpF,mEAAmE;KAC1E;IACD;QACI,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,0CAA0C;QACjD,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE;YACH,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,KAAK;SAC3B;QACD,IAAI,EAAE;YACF,qEAAqE;YACrE,mEAAmE;YACnE,mEAAmE;YACnE,6BAA6B;YAC7B,cAAc,EAAE,GAAG;YACnB,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EAAE,gFAAgF;QACzF,yEAAyE;KAC5E;IACD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH;QACI,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,0CAA0C;QACjD,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE;YACH,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,KAAK;SAC3B;QACD,IAAI,EAAE;YACF,cAAc,EAAE,GAAG;YACnB,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EACH,2FAA2F;YAC3F,6EAA6E;KACpF;IACD;QACI,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,2CAA2C;QAClD,UAAU,EAAE,gBAAgB;QAC5B,KAAK,EAAE;YACH,mEAAmE;YACnE,0DAA0D;YAC1D,cAAc,EAAE,KAAK;YACrB,kBAAkB,EAAE,KAAK;YACzB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,8DAA8D;YAC9D,qCAAqC;YACrC,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,KAAK;SAC3B;QACD,IAAI,EAAE;YACF,oEAAoE;YACpE,cAAc,EAAE,GAAG;YACnB,sBAAsB,EAAE,EAAE;YAC1B,sBAAsB,EAAE,GAAG;YAC3B,SAAS,EAAE,EAAE;SAChB;QACD,OAAO,EACH,iFAAiF;YACjF,qEAAqE;KAC5E;CACJ,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqB;IACjD,cAAc,EAAE,GAAG;IACnB,sBAAsB,EAAE,EAAE;IAC1B,sBAAsB,EAAE,GAAG;IAC3B,SAAS,EAAE,EAAE;CAChB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa;IAClC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC5B,OAAwC,EACxC,YAA+B,EAAE;IAEjC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,mBAAmB,CAAC;IAClD,OAAO;QACH,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;QAC/D,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,IAAI,IAAI,CAAC,sBAAsB;QACvF,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,IAAI,IAAI,CAAC,sBAAsB;QACvF,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;KACjC,CAAC;AACN,CAAC;AAmBD,MAAM,UAAU,aAAa,CAAC,OAA4B,EAAE,WAAyB,SAAS;IAC1F,OAAO;QACH,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK;QAC/D,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE;QAC3B,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;QACjE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;KACrF,CAAC;AACN,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB;IACzC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAClD,OAAO,IAAI,CAAC;AAChB,CAAC;AAoBD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,IAAY;IACnD,IAAI,EAAE,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,cAAc,CAAC;IAC/D,IAAI,EAAE,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,YAAY,CAAC;IAC3D,IAAI,EAAE,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC;IAC7D,IAAI,EAAE,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IACzD,OAAO,SAAS,CAAC;AACrB,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@vtechcom/hexcore",
|
|
3
|
-
"version": "2.0.0-beta.
|
|
3
|
+
"version": "2.0.0-beta.2",
|
|
4
4
|
"description": "Boot and operate Cardano Hydra Heads — control-plane and web UI in one command",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"cardano",
|
|
@@ -45,7 +45,7 @@
|
|
|
45
45
|
"@nestjs/core": "^11.0.11",
|
|
46
46
|
"@nestjs/platform-fastify": "^11.0.11",
|
|
47
47
|
"@nestjs/swagger": "^11.0.6",
|
|
48
|
-
"better-sqlite3": "^11.
|
|
48
|
+
"better-sqlite3": "^12.11.1",
|
|
49
49
|
"dockerode": "^4.0.4",
|
|
50
50
|
"dotenv": "^16.4.7",
|
|
51
51
|
"fastify": "^5.2.1",
|