From 10a2ba0862914c278cd326411f413dadc1fa3be4 Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 27 Oct 2026 05:33:45 +0000 Subject: [PATCH 1/5] Rename sweep: FlashyLabs is AgenteLabs The GitHub owner was renamed and these clone commands, badges and manifest fields still pointed at an owner that 404s. Rewritten by tools/estate-rename-sweep.mjs in flashyos (--fix); packages with no published successor and prose are reported and left as they were. Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01T2LtjRauY7RENs18aztY6V --- .github/workflows/backlog.yml | 4 ++-- .github/workflows/secret-scan.yml | 2 +- README.md | 6 +++--- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/backlog.yml b/.github/workflows/backlog.yml index 6667ca0..f3bfafb 100644 --- a/.github/workflows/backlog.yml +++ b/.github/workflows/backlog.yml @@ -114,10 +114,10 @@ jobs: TOKEN: ${{ secrets.ESTATE_DISPATCH_TOKEN }} run: | if [ -z "$TOKEN" ]; then - echo "::warning title=Fan-out is not configured::The record changed and the estate graph was not told. The daily merge still finds it, so this is a delay of up to 24 hours rather than a loss. Set ESTATE_DISPATCH_TOKEN (an org secret with contents:write on FlashyLabs/flashyos) to close it." + echo "::warning title=Fan-out is not configured::The record changed and the estate graph was not told. The daily merge still finds it, so this is a delay of up to 24 hours rather than a loss. Set ESTATE_DISPATCH_TOKEN (an org secret with contents:write on AgenteLabs/flashyos) to close it." exit 0 fi - code=$(curl -sS -o /tmp/dispatch.out -w '%{http_code}' -X POST -H 'Accept: application/vnd.github+json' -H "Authorization: Bearer $TOKEN" https://api.github.com/repos/FlashyLabs/flashyos/dispatches -d '{"event_type":"estate-fragment-updated"}') + code=$(curl -sS -o /tmp/dispatch.out -w '%{http_code}' -X POST -H 'Accept: application/vnd.github+json' -H "Authorization: Bearer $TOKEN" https://api.github.com/repos/AgenteLabs/flashyos/dispatches -d '{"event_type":"estate-fragment-updated"}') if [ "$code" != "204" ]; then echo "::error title=Fan-out failed::flashyos returned $code to the dispatch. The daily merge is the fallback." cat /tmp/dispatch.out diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml index 2243386..8cdcd33 100644 --- a/.github/workflows/secret-scan.yml +++ b/.github/workflows/secret-scan.yml @@ -17,4 +17,4 @@ permissions: jobs: secrets: - uses: FlashyLabs/flashy-infra/.github/workflows/secret-scan-reusable.yml@main + uses: AgenteLabs/flashy-infra/.github/workflows/secret-scan-reusable.yml@main diff --git a/README.md b/README.md index a60d5f8..d6ccba8 100644 --- a/README.md +++ b/README.md @@ -32,13 +32,13 @@ chain — without its rules changing. ### In the Flashy ecosystem -- Powered by [@flashylabs/rails](https://github.com/flashylabs/flashy-rails) (consent-gated settlement on ledger) +- Powered by [@flashylabs/rails](https://github.com/AgenteLabs/flashy-rails) (consent-gated settlement on ledger) - Adopted by [ClaimYour.Gold](https://claimyour.gold) (rewards settlement) - Foundation for the full integration example at [flashy-network](https://flashynetwork.com) ### See also -- [@flashylabs/rails](https://github.com/flashylabs/flashy-rails) — Consent layer on top of ledger +- [@flashylabs/rails](https://github.com/AgenteLabs/flashy-rails) — Consent layer on top of ledger - [Flashy Finance](https://flashy.financial) — Live financial rail (built on ledger + rails) - [flashy.tools](https://flashy.tools) — Full package catalog with discovery @@ -312,7 +312,7 @@ has not been built. ## Publishing **Not yet on the public registry, and not under the old name.** The package is -`@flashyos/ledger`. `@flashylabs/ledger` was published to GitHub Packages up to +`@flashyos/ledger`. `@flashyos/ledger` was published to GitHub Packages up to 0.8.0 and that scope stopped resolving when the GitHub account was renamed, so nothing is installable under it any more. `npm view @flashyos/ledger --registry https://registry.npmjs.org/` answered 404 on 2026-10-26; the first release From 5099f587945ee9ba9be9782c4d343ce10ab04474 Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 27 Oct 2026 05:46:01 +0000 Subject: [PATCH 2/5] Rename sweep: the pin exemption names the new owner tests/workflow-pins.test.ts exempts first-party reusable workflows from SHA-pinning by owner; the first sweep moved the uses: lines to AgenteLabs and left the exemption on FlashyLabs, so the test refused the estate's own convention. Rule and prose move together now. Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01T2LtjRauY7RENs18aztY6V --- CHANGELOG.md | 8 ++++---- RELEASES.md | 2 +- flashyos.roles.json | 2 +- tests/workflow-pins.test.ts | 4 ++-- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 651556b..670ec19 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,7 +10,7 @@ versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ### Changed - **The package is now `@flashyos/ledger`.** The GitHub account was renamed and - GitHub Packages ties a scope to the account, so `@flashylabs/ledger` stopped + GitHub Packages ties a scope to the account, so `@flashyos/ledger` stopped resolving for every consumer (claimyour.gold's `npm ci` 404'd on 2026-10-26). Publishing is to the public npm registry under the `@flashyos` organisation. No API changes: this is the 1.0.0 tree below under a new name and version @@ -22,7 +22,7 @@ versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html). `package.json` has declared 1.0.0 since `eac50d8` (2026-09-25). [`RELEASES.md`](./RELEASES.md) records it as on neither registry, with the three publish runs of 2026-09-25 failing with `ENEEDAUTH` against GitHub Packages. -`npm view @flashylabs/ledger` answered 404 on the public registry on 2026-10-20, +`npm view @flashyos/ledger` answered 404 on the public registry on 2026-10-20, when this section was written; GitHub Packages was not queried. Nothing has been published since 0.8.0, so this section lists everything since it, and it describes the tree as `package.json` declares it today rather than any tag. @@ -162,7 +162,7 @@ fragments, tests) is not listed; `DEVLOG.md` carries the commit history. repository secret in place, the publish workflow's mirror step stops skipping: this and every future release lands on GitHub Packages (the authenticated home) and on the public npm registry as - [`@flashylabs/ledger`](https://www.npmjs.com/package/@flashylabs/ledger), + [`@flashyos/ledger`](https://www.npmjs.com/package/@flashyos/ledger), so a stranger can take the open ledger rules with zero auth — which was the point of opening them. @@ -366,7 +366,7 @@ a `SKILL_XP` asset at all. ### Changed -- Package renamed to `@flashylabs/ledger` to match the GitHub account. +- Package renamed to `@flashyos/ledger` to match the GitHub account. ## [0.1.1] — 2026-08-14 diff --git a/RELEASES.md b/RELEASES.md index 788b5b2..2ba272b 100644 --- a/RELEASES.md +++ b/RELEASES.md @@ -26,7 +26,7 @@ because the real diagnosis points at a different fix: requires its presence. - **The untagged versions did not "ship untraceable" — their publishes failed.** `.github/workflows/publish.yml` records that every publish since the - token change (0.6.3, 0.8.0) died with **E401 on the PUT**. `@flashylabs/ledger` + token change (0.6.3, 0.8.0) died with **E401 on the PUT**. `@flashyos/ledger` was created by manual PAT publishes, and the package's own *Actions access list* — not the workflow's `permissions:` block — decides who may PUT new versions. `GITHUB_TOKEN` can read the package but cannot publish to it. diff --git a/flashyos.roles.json b/flashyos.roles.json index 35a4d59..147eda2 100644 --- a/flashyos.roles.json +++ b/flashyos.roles.json @@ -41,7 +41,7 @@ "repositories": [ { "name": "flashy-ledger", - "url": "github.com/FlashyLabs/flashy-ledger", + "url": "github.com/AgenteLabs/flashy-ledger", "holds": [ "domain", "ports", diff --git a/tests/workflow-pins.test.ts b/tests/workflow-pins.test.ts index dd24295..3c089e7 100644 --- a/tests/workflow-pins.test.ts +++ b/tests/workflow-pins.test.ts @@ -9,7 +9,7 @@ import { describe, expect, it } from 'vitest'; * compromises their account) and CI would silently start running whatever * that tag now points to. A commit SHA can't move. * - * `FlashyLabs/flashy-infra/.github/workflows/secret-scan-reusable.yml@main` + * `AgenteLabs/flashy-infra/.github/workflows/secret-scan-reusable.yml@main` * is exempt: it is an internal, org-owned reusable workflow, not a * third-party action, so it does not carry the same retargeting risk this * test exists to catch. @@ -22,7 +22,7 @@ import { describe, expect, it } from 'vitest'; const root = join(__dirname, '..'); const workflowsDir = join(root, '.github', 'workflows'); const SHA_PIN = /^[0-9a-f]{40}$/; -const INTERNAL_REUSABLE = /^FlashyLabs\//; +const INTERNAL_REUSABLE = /^AgenteLabs\//; function findUsesLines(text: string) { return text From 8291d70ccb0fd743fff351467097fcc8b18a915e Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 27 Oct 2026 05:54:15 +0000 Subject: [PATCH 3/5] Copy the served charter beside the root the sweep rewrote The rename sweep moved the owner in flashyos.roles.json and left its served twin behind, which the frontdoor job catches (diff -q). Nothing in this repository produces the served copy, so it is copied byte-for-byte from the root, which is what the job asserts. Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01T2LtjRauY7RENs18aztY6V --- public/.well-known/flashyos-charter.json | 2 +- public/flashyos.roles.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/public/.well-known/flashyos-charter.json b/public/.well-known/flashyos-charter.json index 35a4d59..147eda2 100644 --- a/public/.well-known/flashyos-charter.json +++ b/public/.well-known/flashyos-charter.json @@ -41,7 +41,7 @@ "repositories": [ { "name": "flashy-ledger", - "url": "github.com/FlashyLabs/flashy-ledger", + "url": "github.com/AgenteLabs/flashy-ledger", "holds": [ "domain", "ports", diff --git a/public/flashyos.roles.json b/public/flashyos.roles.json index 35a4d59..147eda2 100644 --- a/public/flashyos.roles.json +++ b/public/flashyos.roles.json @@ -41,7 +41,7 @@ "repositories": [ { "name": "flashy-ledger", - "url": "github.com/FlashyLabs/flashy-ledger", + "url": "github.com/AgenteLabs/flashy-ledger", "holds": [ "domain", "ports", From 5dc6b9fcd4f8873c9ee3733717f579cc4bec400e Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 27 Oct 2026 05:59:20 +0000 Subject: [PATCH 4/5] Bump vitest and @vitest/coverage-v8 to 4.1.12 and regenerate the lockfile The Dependency audit job is red on main on four advisories, all in the test toolchain: @vitest/mocker GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp (moderate, <=4.1.11) vite GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw and four more (high, 8.2.0 - 8.2.2) vitest and @vitest/coverage-v8 move one patch, to ^4.1.12, the first release whose mocker is patched; vite is a transitive dependency and the lockfile now resolves it to 8.3.5, inside vitest's own range. Lockfile regenerated with npm 10.9.8 (Corepack, as packageManager declares); `npm audit` reads 0 vulnerabilities and `npm run check` (typecheck, lint, coverage, standalone) passes. CHANGELOG and RELEASES untouched: nothing shipped changes. Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01T2LtjRauY7RENs18aztY6V (cherry picked from commit 7d0f51ebaa2b840664e86f56e467ced3489c3fd3) --- package-lock.json | 282 +++++++++++++++++++++++----------------------- package.json | 4 +- 2 files changed, 143 insertions(+), 143 deletions(-) diff --git a/package-lock.json b/package-lock.json index 63e78ed..86f1587 100644 --- a/package-lock.json +++ b/package-lock.json @@ -11,12 +11,12 @@ "devDependencies": { "@eslint/js": "^9.17.0", "@types/node": "^26.2.0", - "@vitest/coverage-v8": "^4.1.11", + "@vitest/coverage-v8": "^4.1.12", "eslint": "^9.17.0", "mongodb": "^6.21.0", "typescript": "^5.7.3", "typescript-eslint": "^8.19.0", - "vitest": "^4.1.11" + "vitest": "^4.1.12" }, "engines": { "node": ">=22" @@ -339,19 +339,19 @@ } }, "node_modules/@oxc-project/types": { - "version": "0.146.0", - "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.146.0.tgz", - "integrity": "sha512-XC0QsnnhVe7sLIWmYmdPw7x5P0h4W8vUU3Nv1ySgWXtvCz8NizoAEpGXA0sOYoJQV2Rl13LgURAHQ5cI5ILCSA==", + "version": "0.155.0", + "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.155.0.tgz", + "integrity": "sha512-SeE8JPwW1xs1tHeNycjUtUBdhorRa8o4jlvjwk49R7/Z291i+4DQa7JJIgOm/TaYQZx+QrPQbVJ/9c8dMIZN8Q==", "dev": true, "license": "MIT", "funding": { - "url": "https://github.com/sponsors/Boshen" + "url": "https://github.com/sponsors/oxc-project" } }, "node_modules/@rolldown/binding-android-arm-eabi": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.5.tgz", - "integrity": "sha512-DLe/i+l8ynIBY7XEQ191TeZvCoowIGa18R+dIV30GW7DiOtp74i/xX8hs8GUjW5ARV7VZuie3d6AumSmCwbeRA==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.15.tgz", + "integrity": "sha512-aLcgK9gIJ3YRvrrtfSBbRa27F5WrpiTaPulnFpsHPxpUHgFlSgnU4854MHwoRGEBhfRJDWCS2WQ7lIjskE9Olw==", "cpu": [ "arm" ], @@ -366,9 +366,9 @@ } }, "node_modules/@rolldown/binding-android-arm64": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.5.tgz", - "integrity": "sha512-zXcwKlQApYAOELHd8PwKDFkagYF9Wy4e0RJ+0qnzl9Pjnpj75TEG8ufv40p2J7kCEfwZAsNiuzRIyNNMWT38ig==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.15.tgz", + "integrity": "sha512-xD7DdZCrbThKuxNg7ooQmvp07ys4J/pnSEMTG3/OdOWl6daC67m/Q4fL78sRHMxTH/N4fGUbYhcPM0MF5WFHkg==", "cpu": [ "arm64" ], @@ -383,9 +383,9 @@ } }, "node_modules/@rolldown/binding-darwin-arm64": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.5.tgz", - "integrity": "sha512-dK4QakI42nzWgJT5sm4y4y/O//D4OxM75/cH28RLV+nzIN9AY+YsbuUVrUTjlLjXR6vpyxFbSsbmNuJ6BP9sww==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.15.tgz", + "integrity": "sha512-m2WuQ6r0B4OTYxyPpNLtXaMRbRDUbG8YQV2Q3KTdSSK8Th6KHCnC8jVCJt8bvYeSB5WivkkNbc85mKadaSdOxA==", "cpu": [ "arm64" ], @@ -400,9 +400,9 @@ } }, "node_modules/@rolldown/binding-darwin-x64": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.5.tgz", - "integrity": "sha512-fqSALaUu1Wjd1nK2uW2kJDWdLCc8lx1IcY+MTY26Aurfdx19anlzhqXOgCFbBFQnlFDTn4TC1/7Nz4Bl2mLP3A==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.15.tgz", + "integrity": "sha512-5RtnsHM36nodM9WbMy+zip0LGS/G+y5wro5RHrpOlr4ac24+1zSi9kiV2MP1myZeZ/ifEHfulQcWjnAXzc2C2A==", "cpu": [ "x64" ], @@ -417,9 +417,9 @@ } }, "node_modules/@rolldown/binding-freebsd-x64": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.5.tgz", - "integrity": "sha512-/vCnNxlkxs9tKxNDcyWUePpJ/PgTzxIaVhoM5SmG8UV+GR/IcPam4VYxi7GIMo7PSDuNqlJqvprqii9NqqVCMw==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.15.tgz", + "integrity": "sha512-g3l09pyFqhu+135JKkbkwiKGQmwU5hUMUPJ4VdBADvuqR8d33L6H578rh8m7rtxbdp+VmX/+nzI7nvhSZlzpUQ==", "cpu": [ "x64" ], @@ -434,9 +434,9 @@ } }, "node_modules/@rolldown/binding-linux-arm-gnueabihf": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.5.tgz", - "integrity": "sha512-abk0NLA519LxRCszmbE0jYKuQ9YPocOXTiOXOo6Yr+YAT95VH+PtqYAjOJvGKt3viEd/x4qzabAlwd5bHOOARg==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.15.tgz", + "integrity": "sha512-nIe3VugI97nGQtspPxDqA4sXMUpeiocKIP/CqpY/u/vgbT+alX+cVxu1C/oVBPKg4feNTmYovE91v4DgXvXNwQ==", "cpu": [ "arm" ], @@ -451,9 +451,9 @@ } }, "node_modules/@rolldown/binding-linux-arm64-gnu": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.5.tgz", - "integrity": "sha512-Y7eALiJ8lr0M2HH103Js+g7V34wf6snlpZLAsHI90uLhr3PVlNsbFVAXJC9d/V6BnPyKtpSwI+NcB/RLxsQxuA==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.15.tgz", + "integrity": "sha512-iTBjXx+B5QSvgI89lJfmqh4wTh8NabR1YZIIN3hNx4zSG0EVfVqkOvLulNpG4251pbd6/IAmZ/LefVk1Y4rPhw==", "cpu": [ "arm64" ], @@ -468,9 +468,9 @@ } }, "node_modules/@rolldown/binding-linux-arm64-musl": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.5.tgz", - "integrity": "sha512-xMvZgnbZg4YVnR/AX2b3oOPDTFYJvUVaJg5FedA/LuvexAtXibZQej4cnTkw3rjsJ/ggUROB64TdtETiim+FYA==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.15.tgz", + "integrity": "sha512-uN26XOnVR7rqQupG3V9oAG2EGGatWjcJHOeDOHUFCh4TBWmP2tHTFoVN13aYbwfm0aHqJAEmcwhAu6sooIjfqQ==", "cpu": [ "arm64" ], @@ -485,9 +485,9 @@ } }, "node_modules/@rolldown/binding-linux-ppc64-gnu": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.5.tgz", - "integrity": "sha512-GRjeqTUDHTo5GwntsLaAMcBahG3nlpjftXWZLN73HiYQlhwEowvarFgQnRnQZtIp4keXX7quXFbG38uPZBa2EA==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.15.tgz", + "integrity": "sha512-9nWkcdd+H+XhaA3fQIwpHnKIrfx/PQ6rO0pivr78Og07tXlUlctBBJoEYLPfhTmCR/QxEVdn6uPjHV5SymPhdw==", "cpu": [ "ppc64" ], @@ -502,9 +502,9 @@ } }, "node_modules/@rolldown/binding-linux-s390x-gnu": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.5.tgz", - "integrity": "sha512-vLNTR45F2Uwc8AufkNXPmB4VliaXs+FvcheEogIzOXzO4l+LzieXF5A/TWxLy5HtqpsRCHUfd0lPVrrdgXdLHQ==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.15.tgz", + "integrity": "sha512-Ggh0ciFjLwIusLSLz7LZYEaGdxOAUJXI+Qu5JCbhPJJHEt8vP+IjRATTJheiJsdzzTYgUiHUiw3X1Ea3ZpMBdA==", "cpu": [ "s390x" ], @@ -519,9 +519,9 @@ } }, "node_modules/@rolldown/binding-linux-x64-gnu": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.5.tgz", - "integrity": "sha512-Mgj59/HTuYeK9Gz2MA+mBWKnHsAgkBSec15ZMb1st3oIfFbX7gCjOae7GydHhzcyQi9Z/7M1QuN9bR3oFqF0jQ==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.15.tgz", + "integrity": "sha512-FHg60rS6DBePAYZ9X9F67x+JObFdmgn6tupA1C/a3B+CufFmTD4mX+e8M75tCiAO3foR/6xwVBI0KQiI7sn/rw==", "cpu": [ "x64" ], @@ -536,9 +536,9 @@ } }, "node_modules/@rolldown/binding-linux-x64-musl": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.5.tgz", - "integrity": "sha512-mY8AP0/ichsbhAxGnLa3d3+MwV0EfgrPND2bplI3Ym8T6R2pJ0N87bvrKVwNXmdy3jnr6eQBecdqx/HMknBmpA==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.15.tgz", + "integrity": "sha512-/cvV/7v5VGz/moiz0XKRj2dE8DzsKyhIu1KpOvJGPjRywg3yscON889UGvAe8zfiJLHup7VLjBduoGWi3HusWQ==", "cpu": [ "x64" ], @@ -553,9 +553,9 @@ } }, "node_modules/@rolldown/binding-openharmony-arm64": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.5.tgz", - "integrity": "sha512-8SLssA2oweAxyRgDp789ACfRb/3P+zNRJpzZxSizxF9m8NUDQ4+3xjo8ttjhVGGw6Qxb70oZiEtIjaKikCO7Yw==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.15.tgz", + "integrity": "sha512-MyzC5Hrv/sm+Z7TSGKP/j8001RO2xQm1zOpCNVL4j0cY/VhBZviludA2YFQ7i4lH6ZAXxQm0lcMdBzM+99mE7w==", "cpu": [ "arm64" ], @@ -570,9 +570,9 @@ } }, "node_modules/@rolldown/binding-win32-arm64-msvc": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.5.tgz", - "integrity": "sha512-vGbruD5zquhoc8D9SViXgN2FBJtNdTyQ4DtG+SWiEGlJiAzoKcZ2xp+xuXCffhubVdt0NJlTZqkeRuERy7g8Cw==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.15.tgz", + "integrity": "sha512-+PgYiS+AH5omy6L45ZLxybasauJaj3M8buoT83D+nzPmCayXlxUV9hydhciCKVyIg0B/v0BtXPDE1uGqNwCPpg==", "cpu": [ "arm64" ], @@ -587,9 +587,9 @@ } }, "node_modules/@rolldown/binding-win32-x64-msvc": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.5.tgz", - "integrity": "sha512-e/SXpgISz+IoqVcSSI0rx/d/he8zqLex+/rCWpnHpmVfmPIUjag9H6P7zotf0gJHwPUhQxZ/mF8tr6acebT9yw==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.15.tgz", + "integrity": "sha512-HFZd2QNQYn1JbIi+Hpd7H+r/lkWxcfIu28nirZ6eCn2LafuvmExMlb/P96Sfx5tf7pPArw39IdhmCF8vmV+NhQ==", "cpu": [ "x64" ], @@ -959,14 +959,14 @@ } }, "node_modules/@vitest/coverage-v8": { - "version": "4.1.11", - "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.11.tgz", - "integrity": "sha512-8MVGEFnJIcdGjcbfKmeq8z0pZHH0JlVtoVZH9Q/qwUp6wyFnEJUBMrw9DCaj+ra3vShGmhavjalMIhPNxZAUcw==", + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.12.tgz", + "integrity": "sha512-6S7/iVknKglLAxMFxQGNppBI0iqJS2NgM6FBxavitj7KaDq/vywOWGf6dGu7F2L1Qy0G6S3uTp7aGshHrzK8JA==", "dev": true, "license": "MIT", "dependencies": { "@bcoe/v8-coverage": "^1.0.2", - "@vitest/utils": "4.1.11", + "@vitest/utils": "4.1.12", "ast-v8-to-istanbul": "^1.0.0", "istanbul-lib-coverage": "^3.2.2", "istanbul-lib-report": "^3.0.1", @@ -980,8 +980,8 @@ "url": "https://opencollective.com/vitest" }, "peerDependencies": { - "@vitest/browser": "4.1.11", - "vitest": "4.1.11" + "@vitest/browser": "4.1.12", + "vitest": "4.1.12" }, "peerDependenciesMeta": { "@vitest/browser": { @@ -990,16 +990,16 @@ } }, "node_modules/@vitest/expect": { - "version": "4.1.11", - "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.11.tgz", - "integrity": "sha512-VX2x5vNJXET47KAFzwERI+KRMtTTCSWTfSMKsW7JsUsXV4psq++e3DvZpuTDOpHcxytiDs6p2nhVb2tVDiiUYw==", + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.12.tgz", + "integrity": "sha512-vFlTt+YEu9WBpNjdGayNmlMVzrWPi1+sv853/7t2FU7hpO5gAFBKHzQmkCq5Xjpr+evegF2994LQT3hF3mRlqQ==", "dev": true, "license": "MIT", "dependencies": { "@standard-schema/spec": "^1.1.0", "@types/chai": "^5.2.2", - "@vitest/spy": "4.1.11", - "@vitest/utils": "4.1.11", + "@vitest/spy": "4.1.12", + "@vitest/utils": "4.1.12", "chai": "^6.2.2", "tinyrainbow": "^3.1.0" }, @@ -1008,13 +1008,13 @@ } }, "node_modules/@vitest/mocker": { - "version": "4.1.11", - "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.11.tgz", - "integrity": "sha512-2XJVD55d1o5AZous5CCGKS74g/riOj9odEt2bQpCVZeblHyHdnMeFl4jl0XjU21stf4mbjUkew2eXQZt65g5CQ==", + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.12.tgz", + "integrity": "sha512-fKShNpKZzupWZuY0z7egydvL0sqW4INEZBEExMBMAa6izlENEVHwoXgdaTCaBZ5fwlr4xf2o1wXC83n9RpO+NA==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/spy": "4.1.11", + "@vitest/spy": "4.1.12", "estree-walker": "^3.0.3", "magic-string": "^0.30.21" }, @@ -1035,9 +1035,9 @@ } }, "node_modules/@vitest/pretty-format": { - "version": "4.1.11", - "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.11.tgz", - "integrity": "sha512-yiZzPbGTS9Sr/JpFl8zHrcIkAofNbFV6k21vIgQN/cY/oxZeXhJv5sc/MBJ5jFKWmWs+oJHw0UXLZjmf931+Vw==", + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.12.tgz", + "integrity": "sha512-XW9O8+Mxx4VpCtkYdMJLZQQwsVryP9wk7cPKDxtXFfwSak6yRh5+2fep/Y0XF/ElBvJHq8bcYdi6aeuai0opZA==", "dev": true, "license": "MIT", "dependencies": { @@ -1048,13 +1048,13 @@ } }, "node_modules/@vitest/runner": { - "version": "4.1.11", - "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.11.tgz", - "integrity": "sha512-LztvUgdwMNJMIkj3hQnnxiC2Xy1zNxq928W/xhjCLaNCzqTZOudjwbQf6v9IntZGPw132i2Lq2rgTRZHD3JHNw==", + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.12.tgz", + "integrity": "sha512-NKlVKCr5QnCe8jijdMnmkpHHU+WTqiLFR6G0pHji9uRjXK9xJl1k1nTw6F3pOOj2PDcsDt2GKQMI7wIsaT491w==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/utils": "4.1.11", + "@vitest/utils": "4.1.12", "pathe": "^2.0.3" }, "funding": { @@ -1062,14 +1062,14 @@ } }, "node_modules/@vitest/snapshot": { - "version": "4.1.11", - "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.11.tgz", - "integrity": "sha512-pN7ikn1ON7h8ee4gIAp4AzyK+zBtJPzVbqOgu5LCEh4VaJVbPQcgYQYJIMGQPXVeJJq1fnfazis7a5pFNPahog==", + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.12.tgz", + "integrity": "sha512-ko1y1Qgb/slzQ9mr+b89Cuqud8WG1TKtsPD8r7ZUBdvVOGt85Af2HwCqHujrhwJq95hs/9RM7fcAPg57o1vlzw==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/pretty-format": "4.1.11", - "@vitest/utils": "4.1.11", + "@vitest/pretty-format": "4.1.12", + "@vitest/utils": "4.1.12", "magic-string": "^0.30.21", "pathe": "^2.0.3" }, @@ -1078,9 +1078,9 @@ } }, "node_modules/@vitest/spy": { - "version": "4.1.11", - "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.11.tgz", - "integrity": "sha512-apNa/prQy2qCeywhnixOHPRCgGNhvg7T4Dapfl1GahLp/R+uhBm5cPyFoNVyqsNd2h1nJxL6BqqdIjiABL60YA==", + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.12.tgz", + "integrity": "sha512-RGq9x4JNGNTZHEJxvN0oSiJjeSCExm0n2gZKKJZHY9cX5AVA6M7VJILBT3ZJ/tJ/0J9uWT7fETV9/btoi//vSg==", "dev": true, "license": "MIT", "funding": { @@ -1088,13 +1088,13 @@ } }, "node_modules/@vitest/utils": { - "version": "4.1.11", - "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.11.tgz", - "integrity": "sha512-zTCVGpyFsGWBhllOyKlTw/vnr6D9qxsfSDyfbyZmTyjHw5N/VuvzHpHoQjm2ZJzn4RJgx5w4r7V0er69CmLgPQ==", + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.12.tgz", + "integrity": "sha512-Q3awXrwOfEV+qc3WmO5ONyE0yO7Q1gQ9/oyHxGLZ/pl7N3NO/ZztqQwKLuwMkV+CA1JYSIeO3gkHnRDIo4AVaA==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/pretty-format": "4.1.11", + "@vitest/pretty-format": "4.1.12", "convert-source-map": "^2.0.0", "tinyrainbow": "^3.1.0" }, @@ -1226,9 +1226,9 @@ } }, "node_modules/chai": { - "version": "6.2.2", - "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz", - "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==", + "version": "6.3.0", + "resolved": "https://registry.npmjs.org/chai/-/chai-6.3.0.tgz", + "integrity": "sha512-XWAtwJ6OHO+tj0EKCs0Y2UamnyOxseZWltU4x2U2wh8g4AigdjwvtUjvLP2tqkA/avxHEtzxNaqGq/YGNwckKg==", "dev": true, "license": "MIT", "engines": { @@ -2267,9 +2267,9 @@ "license": "MIT" }, "node_modules/nanoid": { - "version": "3.3.18", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", - "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", + "version": "3.3.20", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz", + "integrity": "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==", "dev": true, "funding": [ { @@ -2404,9 +2404,9 @@ "license": "ISC" }, "node_modules/picomatch": { - "version": "4.0.5", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz", - "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==", + "version": "4.0.7", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz", + "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==", "dev": true, "license": "MIT", "engines": { @@ -2417,9 +2417,9 @@ } }, "node_modules/postcss": { - "version": "8.5.26", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz", - "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==", + "version": "8.5.32", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.32.tgz", + "integrity": "sha512-LJlKCCAUFKOuZxipUdYw1NzIITEsPcgyOG9LkvRJvuKj/bRzbuRY0ARXvL0pWGpsZvn8jku+LMep2eU0seHp8g==", "dev": true, "funding": [ { @@ -2437,9 +2437,9 @@ ], "license": "MIT", "dependencies": { - "nanoid": "^3.3.17", + "nanoid": "^3.3.20", "picocolors": "^1.1.1", - "source-map-js": "^1.2.1" + "source-map-js": "^1.2.2" }, "engines": { "node": "^10 || ^12 || >=14" @@ -2476,13 +2476,13 @@ } }, "node_modules/rolldown": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.5.tgz", - "integrity": "sha512-VD2IE5PUG4Oj8zz2VGykiYd5wbnjdIiSsNQb8Qu5B+noEp+A78mu2iVvpp27g8es14Tk9rofNs5Tku9iQCS4fA==", + "version": "1.2.15", + "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.15.tgz", + "integrity": "sha512-6odND+fel5zVw3I4Yc2e69gvguDnX0CAAGiNDZSq4ik5WUcaLrkD2GLuog0XcODbor31hZ5ayEMgVDno+KPV5g==", "dev": true, "license": "MIT", "dependencies": { - "@oxc-project/types": "=0.146.0", + "@oxc-project/types": "=0.155.0", "@rolldown/pluginutils": "^1.0.0" }, "bin": { @@ -2492,21 +2492,21 @@ "node": "^20.19.0 || >=22.12.0" }, "optionalDependencies": { - "@rolldown/binding-android-arm-eabi": "1.2.5", - "@rolldown/binding-android-arm64": "1.2.5", - "@rolldown/binding-darwin-arm64": "1.2.5", - "@rolldown/binding-darwin-x64": "1.2.5", - "@rolldown/binding-freebsd-x64": "1.2.5", - "@rolldown/binding-linux-arm-gnueabihf": "1.2.5", - "@rolldown/binding-linux-arm64-gnu": "1.2.5", - "@rolldown/binding-linux-arm64-musl": "1.2.5", - "@rolldown/binding-linux-ppc64-gnu": "1.2.5", - "@rolldown/binding-linux-s390x-gnu": "1.2.5", - "@rolldown/binding-linux-x64-gnu": "1.2.5", - "@rolldown/binding-linux-x64-musl": "1.2.5", - "@rolldown/binding-openharmony-arm64": "1.2.5", - "@rolldown/binding-win32-arm64-msvc": "1.2.5", - "@rolldown/binding-win32-x64-msvc": "1.2.5" + "@rolldown/binding-android-arm-eabi": "1.2.15", + "@rolldown/binding-android-arm64": "1.2.15", + "@rolldown/binding-darwin-arm64": "1.2.15", + "@rolldown/binding-darwin-x64": "1.2.15", + "@rolldown/binding-freebsd-x64": "1.2.15", + "@rolldown/binding-linux-arm-gnueabihf": "1.2.15", + "@rolldown/binding-linux-arm64-gnu": "1.2.15", + "@rolldown/binding-linux-arm64-musl": "1.2.15", + "@rolldown/binding-linux-ppc64-gnu": "1.2.15", + "@rolldown/binding-linux-s390x-gnu": "1.2.15", + "@rolldown/binding-linux-x64-gnu": "1.2.15", + "@rolldown/binding-linux-x64-musl": "1.2.15", + "@rolldown/binding-openharmony-arm64": "1.2.15", + "@rolldown/binding-win32-arm64-msvc": "1.2.15", + "@rolldown/binding-win32-x64-msvc": "1.2.15" } }, "node_modules/semver": { @@ -2751,16 +2751,16 @@ } }, "node_modules/vite": { - "version": "8.2.2", - "resolved": "https://registry.npmjs.org/vite/-/vite-8.2.2.tgz", - "integrity": "sha512-cFKLV/PRgAUlIRm5WjMjJ86jrftzpqcgH+Us+DS8mI3CDNiH30Whrz8uHL3+MOLPAgqbMBAqWdAHAphOAM+z/Q==", + "version": "8.3.5", + "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.5.tgz", + "integrity": "sha512-z1YpjieJ9g0ebTmQpLBv/oq9E3F9EIlOe+7LahW8SrE3LTiG3udBRUXQOlYXP9b+IC2q2phHeVxj9xGlw34OEQ==", "dev": true, "license": "MIT", "dependencies": { "lightningcss": "^1.33.0", - "picomatch": "^4.0.5", - "postcss": "^8.5.26", - "rolldown": "~1.2.4", + "picomatch": "^4.0.7", + "postcss": "^8.5.30", + "rolldown": "~1.2.14", "tinyglobby": "^0.2.17" }, "bin": { @@ -2777,7 +2777,7 @@ }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", - "@vitejs/devtools": "^0.4.0 || ^0.5.0", + "@vitejs/devtools": "^0.7.1 || ^0.8.0", "esbuild": "^0.27.0 || ^0.28.0", "jiti": ">=1.21.0", "less": "^4.0.0", @@ -2829,19 +2829,19 @@ } }, "node_modules/vitest": { - "version": "4.1.11", - "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.11.tgz", - "integrity": "sha512-fhACrNXUidIbGSBr5FlbuBkO7VWC1ZyLl0DO4CU2DrQoAPxX84Ysxs+HeGQpii5lZWV1Q4gBZTTu49mF+A6Edw==", + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.12.tgz", + "integrity": "sha512-5eWdz2yb3ajxWF3C8C4TjkXl7FGm3n2E/VlazALrQHzK7nYMSGFnCZto0bbPNl77AwkOZVLk0YnBAejUu0NiWA==", "dev": true, "license": "MIT", "dependencies": { - "@vitest/expect": "4.1.11", - "@vitest/mocker": "4.1.11", - "@vitest/pretty-format": "4.1.11", - "@vitest/runner": "4.1.11", - "@vitest/snapshot": "4.1.11", - "@vitest/spy": "4.1.11", - "@vitest/utils": "4.1.11", + "@vitest/expect": "4.1.12", + "@vitest/mocker": "4.1.12", + "@vitest/pretty-format": "4.1.12", + "@vitest/runner": "4.1.12", + "@vitest/snapshot": "4.1.12", + "@vitest/spy": "4.1.12", + "@vitest/utils": "4.1.12", "es-module-lexer": "^2.0.0", "expect-type": "^1.3.0", "magic-string": "^0.30.21", @@ -2869,12 +2869,12 @@ "@edge-runtime/vm": "*", "@opentelemetry/api": "^1.9.0", "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0", - "@vitest/browser-playwright": "4.1.11", - "@vitest/browser-preview": "4.1.11", - "@vitest/browser-webdriverio": "4.1.11", - "@vitest/coverage-istanbul": "4.1.11", - "@vitest/coverage-v8": "4.1.11", - "@vitest/ui": "4.1.11", + "@vitest/browser-playwright": "4.1.12", + "@vitest/browser-preview": "4.1.12", + "@vitest/browser-webdriverio": "^4.1.11", + "@vitest/coverage-istanbul": "4.1.12", + "@vitest/coverage-v8": "4.1.12", + "@vitest/ui": "4.1.12", "happy-dom": "*", "jsdom": "*", "vite": "^6.0.0 || ^7.0.0 || ^8.0.0" diff --git a/package.json b/package.json index 2d2c023..b4b7e0f 100644 --- a/package.json +++ b/package.json @@ -51,12 +51,12 @@ "devDependencies": { "@eslint/js": "^9.17.0", "@types/node": "^26.2.0", - "@vitest/coverage-v8": "^4.1.11", + "@vitest/coverage-v8": "^4.1.12", "eslint": "^9.17.0", "mongodb": "^6.21.0", "typescript": "^5.7.3", "typescript-eslint": "^8.19.0", - "vitest": "^4.1.11" + "vitest": "^4.1.12" }, "peerDependencies": { "mongodb": "^6.21.0 || ^7.0.0" From 8166b16d670b4460f53a59d5faa68fb327ab3b54 Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 27 Oct 2026 10:36:18 +0000 Subject: [PATCH 5/5] Keep the historical package name in the release record CHANGELOG, RELEASES and README quote versions published under @flashylabs/ledger; they are a record kept in tense, not a reference to the owner, and the sweep had rewritten the name in them. Co-Authored-By: Claude Sonnet 5.5 Claude-Session: https://claude.ai/code/session_01T2LtjRauY7RENs18aztY6V --- CHANGELOG.md | 8 ++++---- README.md | 2 +- RELEASES.md | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 670ec19..651556b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,7 +10,7 @@ versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ### Changed - **The package is now `@flashyos/ledger`.** The GitHub account was renamed and - GitHub Packages ties a scope to the account, so `@flashyos/ledger` stopped + GitHub Packages ties a scope to the account, so `@flashylabs/ledger` stopped resolving for every consumer (claimyour.gold's `npm ci` 404'd on 2026-10-26). Publishing is to the public npm registry under the `@flashyos` organisation. No API changes: this is the 1.0.0 tree below under a new name and version @@ -22,7 +22,7 @@ versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html). `package.json` has declared 1.0.0 since `eac50d8` (2026-09-25). [`RELEASES.md`](./RELEASES.md) records it as on neither registry, with the three publish runs of 2026-09-25 failing with `ENEEDAUTH` against GitHub Packages. -`npm view @flashyos/ledger` answered 404 on the public registry on 2026-10-20, +`npm view @flashylabs/ledger` answered 404 on the public registry on 2026-10-20, when this section was written; GitHub Packages was not queried. Nothing has been published since 0.8.0, so this section lists everything since it, and it describes the tree as `package.json` declares it today rather than any tag. @@ -162,7 +162,7 @@ fragments, tests) is not listed; `DEVLOG.md` carries the commit history. repository secret in place, the publish workflow's mirror step stops skipping: this and every future release lands on GitHub Packages (the authenticated home) and on the public npm registry as - [`@flashyos/ledger`](https://www.npmjs.com/package/@flashyos/ledger), + [`@flashylabs/ledger`](https://www.npmjs.com/package/@flashylabs/ledger), so a stranger can take the open ledger rules with zero auth — which was the point of opening them. @@ -366,7 +366,7 @@ a `SKILL_XP` asset at all. ### Changed -- Package renamed to `@flashyos/ledger` to match the GitHub account. +- Package renamed to `@flashylabs/ledger` to match the GitHub account. ## [0.1.1] — 2026-08-14 diff --git a/README.md b/README.md index d6ccba8..2ed20de 100644 --- a/README.md +++ b/README.md @@ -312,7 +312,7 @@ has not been built. ## Publishing **Not yet on the public registry, and not under the old name.** The package is -`@flashyos/ledger`. `@flashyos/ledger` was published to GitHub Packages up to +`@flashyos/ledger`. `@flashylabs/ledger` was published to GitHub Packages up to 0.8.0 and that scope stopped resolving when the GitHub account was renamed, so nothing is installable under it any more. `npm view @flashyos/ledger --registry https://registry.npmjs.org/` answered 404 on 2026-10-26; the first release diff --git a/RELEASES.md b/RELEASES.md index 2ba272b..788b5b2 100644 --- a/RELEASES.md +++ b/RELEASES.md @@ -26,7 +26,7 @@ because the real diagnosis points at a different fix: requires its presence. - **The untagged versions did not "ship untraceable" — their publishes failed.** `.github/workflows/publish.yml` records that every publish since the - token change (0.6.3, 0.8.0) died with **E401 on the PUT**. `@flashyos/ledger` + token change (0.6.3, 0.8.0) died with **E401 on the PUT**. `@flashylabs/ledger` was created by manual PAT publishes, and the package's own *Actions access list* — not the workflow's `permissions:` block — decides who may PUT new versions. `GITHUB_TOKEN` can read the package but cannot publish to it.