space-data-module-sdk 0.8.13 → 0.8.14

package/README.md

@@ -779,6 +779,8 @@ inspect the parsed `REC`, `PNM`, and `ENC` records produced by the real
 
 - [`spacedatastandards.org`](https://spacedatastandards.org)
 - [`hd-wallet-wasm`](https://github.com/nicktj-dev/hd-wallet-wasm)
+- [`flatsql`](https://github.com/DigitalArsenal/flatsql) — the FlatBuffer-native
+  query engine behind `createFlatSqlRuntimeStore()`
 
 ## Development
 
@@ -817,4 +819,19 @@ helpers for serialized command execution and virtual filesystem access.
 
 ## License
 
-[MIT](./LICENSE)
+[Apache-2.0](./LICENSE)
+
+### Dependency licenses
+
+The SDK's own license (above) does not change, but one runtime dependency is
+no longer permissive: as of `flatsql` **2.0.0** the FlatSQL engine is licensed
+under the [PolyForm Noncommercial License
+1.0.0](https://polyformproject.org/licenses/noncommercial/1.0.0/) — source-available
+and free for any noncommercial purpose, with commercial use requiring a separate
+license from DigitalArsenal.io, Inc.
+([tj@digitalarsenal.io](mailto:tj@digitalarsenal.io)). Installing this package
+installs `flatsql`, so a commercial deployment of anything built on the SDK's
+FlatSQL-backed runtime-host storage needs that license. Every `flatsql` release
+before 2.0.0 has been withdrawn from npm, so `^2.0.0` is the only resolvable
+floor — see [`docs/flatsql-host-contract.md`](./docs/flatsql-host-contract.md)
+for why the major bump changes no API.

package/docs/flatsql-host-contract.md

@@ -1,4 +1,9 @@
-# The FlatSQL host contract (why the floor moved to ^1.4.4)
+# The FlatSQL host contract (why the floor moved to ^1.4.4, then to ^2.0.0)
+
+The current floor is **`^2.0.0`**. The 1.x history below is what made the
+contract, and it still describes the contract 2.0.0 ships — see
+[The 2.0.0 floor is a licence change, not a port](#the-200-floor-is-a-licence-change-not-a-port)
+at the end for why the major bump costs nothing here.
 
 ## The defect the bump repairs
 
@@ -93,3 +98,31 @@ consumer would actually load. At 1.4.4 it reports `in-surface (WASI + declared
 capabilities: 7)`, `satisfied` in the real-browser lane and
 `runner-cannot-supply-declared-capability` under the bare WasmEdge CLI, naming
 `env.flatsql_io_open` as the single blocker.
+
+## The 2.0.0 floor is a licence change, not a port
+
+`flatsql` 2.0.0 is 1.4.5's code republished under the [PolyForm Noncommercial
+License 1.0.0](https://polyformproject.org/licenses/noncommercial/1.0.0/).
+The major is semver signalling the licence, not an API break. Measured on the
+two published tarballs, every file is byte-identical except three:
+
+```
+LICENSE       Apache-2.0 -> PolyForm Noncommercial 1.0.0
+package.json  "version" and "license" only
+README.md     licence + contact section
+```
+
+The host contract above therefore carries over unchanged. On
+`wasm/flatsql-wasi.wasm`, 2.0.0 imports the same **13** — the seven
+`flatsql_io_*` on `env` plus six WASI preview1 — and exports the same **102**
+as 1.4.4, so the parity gate classifies the 2.0.0 engine exactly as it
+classified 1.4.4.
+
+Two consequences for anyone reading this floor:
+
+- **Every pre-2.0.0 `flatsql` is withdrawn from npm.** A pin below `^2.0.0`
+  resolves to nothing. There is no supported lower floor.
+- **Commercial use of the engine needs a licence** from DigitalArsenal.io, Inc.
+  ([tj@digitalarsenal.io](mailto:tj@digitalarsenal.io)). The SDK stays MIT and
+  consumes flatsql through its JS API only, but installing the SDK installs the
+  engine, so the obligation reaches the SDK's consumers.

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "space-data-module-sdk",
-  "version": "0.8.13",
+  "version": "0.8.14",
+  "license": "Apache-2.0",
   "description": "Module SDK for building, validating, signing, and deploying WebAssembly modules on the Space Data Network.",
   "type": "module",
   "types": "./src/index.d.ts",
@@ -109,7 +110,7 @@
   "dependencies": {
     "flatbuffers": "^25.9.23",
     "flatc-wasm": "^26.1.32",
-    "flatsql": "^1.4.4",
+    "flatsql": "^2.0.0",
     "hd-wallet-wasm": "2.0.28",
     "sdn-emception": "1.0.0",
     "spacedatastandards.org": "https://github.com/DigitalArsenal/spacedatastandards.org/archive/06deda5079204a46bd97a7ce6ac2868e991c6b8f.tar.gz"
@@ -121,4 +122,4 @@
   "engines": {
     "node": ">=20.0.0"
   }
-}
+}

package/templates/propagator-module/package.json

@@ -13,7 +13,7 @@
     "test": "node --test tests/*.test.mjs"
   },
   "dependencies": {
-    "space-data-module-sdk": "^0.8.12"
+    "space-data-module-sdk": "^0.8.14"
   },
   "private": true
 }