Prepare Commonlib 0.1.12

[vrtmrz]

This release preparation updates Commonlib to 0.1.12 so Fast Fetch tombstones and inconsistent Metadata identities can be handled safely in an exact staged package.

Changes

• Bump package.json and package-lock.json from 0.1.11 to 0.1.12.
• Record the Fast Fetch tombstone fix from PR fix: do not decrypt deletion tombstones during fast fetch #108. Thank you to @KennethLloyd for the contribution.
• Record the Metadata identity validation, inspection, and explicit one-entry repair from PR Handle stale Metadata document identities safely #109.

Impact

Fast Fetch now writes deletion tombstones to the local database without attempting to decrypt their absent payload. Old deletions therefore no longer abort an initial fetch, while the deletion remains represented locally.

Offline scans now validate each decoded Metadata document against its actual database ID before target filtering or pair construction. An inconsistent entry remains unchanged and cannot trigger reflection, deletion, expired-history cleanup, or last-seen persistence. A separate, consistent entry for the same logical path continues normally.

Maintained hosts can inspect an inconsistent entry by its actual ID and explicitly repair one unambiguous entry at a time. This release does not infer how a mismatch arose, perform batch repair, rename Vault storage, choose between case variants, coordinate devices, or alter Fast Setup and CLI completion policy.

Verification

• npm ci with npm 11.18.0 succeeded.
• NODE_OPTIONS=--max-old-space-size=3072 npm run verify:package — 71 test files and 1,283 tests passed, together with seven boundary tests, 20 release-selection tests, type checks, package-boundary checks, 117 generated compatibility exports, and clean-consumer checks.
• npm run check:package — succeeded.
• npm publish --dry-run .package --tag next --access public — succeeded.
• Dry-run package: 500 files, 404,246 bytes packed, and 1,737,880 bytes unpacked.
• Integrity: sha512-7EQy1lsxQPGL5aBxx0aliBszZqF3XKzf+sHcEcS94oZF2MoFugoyxwqoxB/SuZ9gRbGAZDQYiD5R8Y+i6FRivA==
• The Metadata identity implementation package passed focused downstream Self-hosted LiveSync tests, its type check, and its production build.

The dependency graph is unchanged. Production audit reports 18 existing moderate advisories. The full development audit reports 19 moderate advisories and one high advisory; the high advisory is confined to the Vitest development dependency chain.