Release v0.20.1

.ci-siblings

@@ -9,9 +9,9 @@
 # test/unit/sibling-coverage.test.js, which reports the surface this file leaves
 # uncovered; the same gap applies to a sibling that is declared but missing.
 #
-# ci-dispatch.sh ships each of these at its origin/master (falling back to local
-# HEAD) and REFUSES the push if one is not a checkout beside this repo, so a
-# declared sibling can never be silently absent.
+# ci-dispatch.sh ships each of these at the pushed branch (falling back to its
+# origin/master, then local HEAD) and REFUSES the push if one is not a checkout
+# beside this repo, so a declared sibling can never be silently absent.
 
 # Indexer schema conformance, list-edit resolution and reorg DDL, the
 # hub-connector contract, and federation read parity (which loads the indexer's

.github/workflows/ci.yml

@@ -28,7 +28,7 @@ jobs:
       # sibling snapshot against a sibling still declaring the old version. That
       # is unsatisfiable: the snapshot must move for the release, and develop
       # must not. Empty everywhere else, which keeps the existing behaviour.
-      siblings-ref: ${{ (startsWith(github.head_ref, 'release/') || startsWith(github.head_ref, 'hotfix/')) && github.head_ref || '' }}
+      siblings-ref: ${{ (startsWith(github.head_ref, 'release/') || startsWith(github.head_ref, 'hotfix/')) && github.head_ref || github.base_ref || '' }}
     # Override the Node version for a repo if ever needed:
     #   node-version: "20"
 
@@ -147,15 +147,15 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: XChain-Platform/xchain-indexer
-          ref: ${{ (startsWith(github.head_ref, 'release/') || startsWith(github.head_ref, 'hotfix/')) && github.head_ref || (github.ref == 'refs/heads/master' && 'master' || 'develop') }}
+          ref: ${{ (startsWith(github.head_ref, 'release/') || startsWith(github.head_ref, 'hotfix/')) && github.head_ref || github.base_ref || (github.ref == 'refs/heads/master' && 'master' || 'develop') }}
           ssh-key: ${{ secrets.XCHAIN_INDEXER_DEPLOY_KEY }}
           path: xchain-indexer
 
       - name: Check out the real hub DDL (xchain-hub)
         uses: actions/checkout@v4
         with:
           repository: XChain-Platform/xchain-hub
-          ref: ${{ startsWith(github.head_ref, 'release/') && github.head_ref || (startsWith(github.head_ref, 'hotfix/') && 'master') || (github.ref == 'refs/heads/master' && 'master' || 'develop') }}
+          ref: ${{ startsWith(github.head_ref, 'release/') && github.head_ref || (startsWith(github.head_ref, 'hotfix/') && 'master') || github.base_ref || (github.ref == 'refs/heads/master' && 'master' || 'develop') }}
           ssh-key: ${{ secrets.XCHAIN_HUB_DEPLOY_KEY }}
           path: xchain-hub
 
@@ -208,7 +208,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: XChain-Platform/xchain-hub
-          ref: ${{ startsWith(github.head_ref, 'release/') && github.head_ref || (startsWith(github.head_ref, 'hotfix/') && 'master') || (github.ref == 'refs/heads/master' && 'master' || 'develop') }}
+          ref: ${{ startsWith(github.head_ref, 'release/') && github.head_ref || (startsWith(github.head_ref, 'hotfix/') && 'master') || github.base_ref || (github.ref == 'refs/heads/master' && 'master' || 'develop') }}
           ssh-key: ${{ secrets.XCHAIN_HUB_DEPLOY_KEY }}
           path: xchain-hub
 
@@ -240,7 +240,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: XChain-Platform/xchain-indexer
-          ref: ${{ (startsWith(github.head_ref, 'release/') || startsWith(github.head_ref, 'hotfix/')) && github.head_ref || (github.ref == 'refs/heads/master' && 'master' || 'develop') }}
+          ref: ${{ (startsWith(github.head_ref, 'release/') || startsWith(github.head_ref, 'hotfix/')) && github.head_ref || github.base_ref || (github.ref == 'refs/heads/master' && 'master' || 'develop') }}
           ssh-key: ${{ secrets.XCHAIN_INDEXER_DEPLOY_KEY }}
           path: xchain-indexer
 
@@ -271,7 +271,7 @@ jobs:
         # suite, so a sibling pinned at develop makes it measure the bundled
         # snapshot against a version develop is never going to carry.
         with:
-          ref: ${{ (startsWith(github.head_ref, 'release/') || startsWith(github.head_ref, 'hotfix/')) && github.head_ref || '' }}
+          ref: ${{ (startsWith(github.head_ref, 'release/') || startsWith(github.head_ref, 'hotfix/')) && github.head_ref || github.base_ref || '' }}
 
       - name: Use Node.js 22
         uses: actions/setup-node@v4

CHANGELOG.md

@@ -6,6 +6,15 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.20.1] - 2026-09-23
+
+### Fixed
+- Re-slid BTC/DOGE testnet activations with LTC inert; canonical admission is non-throwing, and INERT legacy-signature mismatches stay on the invalid-row path.
+
+
+### Added
+- List rows mark what a reader cannot judge at a glance: a multi-recipient send, a multi-leg destroy and a batch carry a count badge that opens the legs or members under the row, and a batch member names its batch.
+
 ## [0.20.0] - 2026-09-17
 
 ### Changed

Dockerfile

@@ -1,7 +1,10 @@
-# Pinned to node:22-bookworm: the optional xchain-vm dependency's isolated-vm
-# native build only succeeds against Node 22 V8 headers (same pin as
-# xchain-indexer / xchain-utxo-tracker). The explorer itself runs on any >=22.
-FROM node:22-bookworm
+# Pinned by digest to the node:22.23.2-bookworm build whose V8/ICU/unicode/cldr
+# match xchain-vm's consensus runtime pin: the floating node:22-bookworm tag
+# moved to a Node patch whose V8/ICU no longer match, which fails that check.
+# The optional xchain-vm dependency's isolated-vm native build also needs
+# Node 22 V8 headers (same pin as xchain-indexer / xchain-utxo-tracker); the
+# explorer itself runs on any >=22.
+FROM node:22.23.2-bookworm@sha256:dd5847a04b0deee391fa145f1f4c6d214196668b6bcc7988ebed67249f226844
 
 RUN mkdir /XChainExplorer/
 # xchain-vm is staged into the build context by xchain-node's install path

README.md

@@ -4,7 +4,7 @@
 # XChain Platform Explorer
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-0.20.0-blue" alt="Version">
+  <img src="https://img.shields.io/badge/version-0.20.1-blue" alt="Version">
   <img src="https://img.shields.io/badge/tests-5%2C275%2B%20passing-brightgreen" alt="Tests">
   <img src="https://img.shields.io/badge/node-%3E%3D22-green" alt="Node">
   <img src="https://img.shields.io/badge/license-AGPL--3.0--or--later-blue" alt="License">

bin/ci-full.sh

@@ -40,14 +40,11 @@
 # which publishes the same port with the same fixture credentials. Docker is
 # therefore REQUIRED for those tiers, never skipped, and the fixture is recycled
 # between them so each tier meets a fresh database the way each GitHub job does.
-# The conformance tier is the one that reads env, and it goes to the SAME
-# fixture rather than to the venue's own MariaDB. It creates four databases of
-# its own (XChain_Conformance_*) and builds the real DDL inside them, which
-# needs a privileged user; the venue's `ci` user holds CREATE globally but ALL
-# only on ci_%, so pointing this at CI_DB_* got the databases created and then
-# failed mid-DDL with "INDEX command denied" (measured on DankServer). GitHub
-# gives this job its own throwaway container with root for exactly that reason,
-# and the fixture is that container. Nothing here echoes or logs a password.
+# The conformance tier uses the fixture selected by fixture-preflight.js. On a
+# venue that is the shared CI database identity and conformance uses disposable
+# ci_* schemas covered by its grants. Everywhere else it is the root identity
+# of the throwaway container. bin/run-conformance.js passes the password only
+# in the child environment.
 #
 # SKIPPED-BY-DESIGN: none. Every run-step in ci.yml has a twin below. The
 # actions-only steps (actions/checkout, setup-node, npm ci, and the two
@@ -70,7 +67,37 @@ SELF="$(pwd)"
 SIB="$(cd .. && pwd)"
 
 FAILED=""
+# >>> ci-tier (generated block; re-run the tier wirer to update) >>>
+# Tier classes. A push grades the FAST tier only: the unit job, the pin and
+# drift guards, and the structure and hygiene checks the hook runs before it
+# dispatches. The tiers named below (coverage re-runs, perf scenarios) are
+# skipped when the gate sets CI_TIER=fast, and each skip is recorded so the
+# closing verdict can never claim a green it did not earn. Nothing stops
+# being graded: a scheduled sweep re-runs this same script with CI_TIER=full
+# on every repo every three hours and before any release or deploy, and a
+# red there is tracked down and fixed first. CI_TIER is unset for a hand
+# run, so a bare `npm run ci:full` still runs every tier as it always did.
+CI_TIER_FULL_ONLY=(
+  "db fixture for perf (mariadb on 3307)"
+  "perf (test:performance)"
+  "coverage ratchet (coverage:check)"
+)
+DEFERRED=""
+ci_tier_deferred() {
+  [ "${CI_TIER:-full}" = "fast" ] || return 1
+  local t
+  for t in ${CI_TIER_FULL_ONLY[@]+"${CI_TIER_FULL_ONLY[@]}"}; do
+    if [ "$t" = "$1" ]; then
+      DEFERRED="$DEFERRED [$1]"
+      echo; echo "ci:full ===== $1 DEFERRED (CI_TIER=fast, runs in the full sweep) ====="
+      return 0
+    fi
+  done
+  return 1
+}
+# <<< ci-tier <<<
 run_tier() {
+  ci_tier_deferred "$1" && return 0  # ci-tier guard (generated)
   local name="$1"; shift
   echo; echo "ci:full ===== $name ====="
   if "$@"; then
@@ -93,11 +120,6 @@ need_sib() {
   done
 }
 
-export CONFORMANCE_DB_HOST="${CONFORMANCE_DB_HOST:-127.0.0.1}"
-export CONFORMANCE_DB_PORT="${CONFORMANCE_DB_PORT:-3307}"
-export CONFORMANCE_DB_USER="${CONFORMANCE_DB_USER:-root}"
-export CONFORMANCE_DB_PASS="${CONFORMANCE_DB_PASS:-testpass}"
-
 need_sib xchain-indexer xchain-vm xchain-sdk xchain-decoder xchain-documentation \
          xchain-encoder xchain-hub
 
@@ -158,17 +180,10 @@ db_tier "integration (test:integration)" npm run test:integration
 # --- job: conformance (needs: ci) ------------------------------------------
 # Loads the REAL indexer, hub and decoder DDL from the sibling checkouts (the
 # suite resolves them as ../xchain-*/src/sql, which is why the layout above is
-# not optional) into a real MariaDB. The fixture is recycled here too; when
-# CONFORMANCE_DB_* points somewhere else, the suite follows the env and simply
-# leaves the fresh fixture unused.
-# A run that points CONFORMANCE_DB_* somewhere other than the fixture address
-# does not need the fixture at all, so a failed bring-up must not stop it.
+# not optional) into a real MariaDB. The fixture is recycled here too, and the
+# launcher inherits the same identity selected by fixture-preflight.js.
 run_tier "db fixture for conformance (mariadb on 3307)" db_fixture_reset
-if [ "$CONFORMANCE_DB_HOST" = "127.0.0.1" ] && [ "$CONFORMANCE_DB_PORT" = "3307" ]; then
-  db_tier  "conformance: schema canary (test:conformance)" npm run test:conformance
-else
-  run_tier "conformance: schema canary (test:conformance)" npm run test:conformance
-fi
+db_tier "conformance: schema canary (test:conformance)" npm run test:conformance
 
 npm run test:integration:down >/dev/null 2>&1
 echo "ci:full: db fixture torn down (no DB tiers remain)"
@@ -193,8 +208,20 @@ run_tier "drift: hub-mirror-client byte-identity" sync_mirror_check
 run_tier "coverage ratchet (coverage:check)" npm run coverage:check
 
 echo
+# >>> ci-tier summary (generated) >>>
+echo "ci:full: tier class ${CI_TIER:-full}"
+if [ -n "${DEFERRED:-}" ]; then
+  echo "ci:full: DEFERRED to the full sweep:$DEFERRED"
+fi
+# <<< ci-tier summary <<<
 if [ -n "$FAILED" ]; then
   echo "ci:full: RED tiers:$FAILED"
   exit 1
 fi
-echo "ci:full: all tiers green (same set GitHub CI runs)"
+# >>> ci-tier verdict (generated) >>>
+if [ "${CI_TIER:-full}" = "fast" ]; then
+  echo "ci:full: all FAST tiers green; the DEFERRED tiers above were NOT graded here"
+else
+  echo "ci:full: all tiers green (same set GitHub CI runs)"
+fi
+# <<< ci-tier verdict <<<

bin/db-fixture.js

@@ -41,13 +41,15 @@ const { spawnSync } = require('child_process');
 const path          = require('path');
 
 const pre = require('../test/integration/helpers/fixture-preflight.js');
+const fixturePorts = require('./fixture-ports.js');
 
 const REPO = path.join(__dirname, '..');
 
 function compose(args, opts) {
     return spawnSync('docker', ['compose', '-f', pre.COMPOSE_FILE, ...args], {
         cwd:      REPO,
         encoding: 'utf8',
+        env:      fixturePorts.composeEnvironment(pre.COMPOSE_FILE),
         ...(opts || {})
     });
 }

bin/fixture-ports.js

@@ -0,0 +1,101 @@
+#!/usr/bin/env node
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+const REPO = path.join(__dirname, '..');
+const SPECS = Object.freeze({
+    'test/integration/fixtures/docker-compose.test.yml': Object.freeze({
+        XCHAIN_EXPLORER_DB_PORT: 3307
+    }),
+    'test/chaos/fixtures/docker-compose.chaos.yml': Object.freeze({
+        XCHAIN_EXPLORER_CHAOS_API_PORT: 8474,
+        XCHAIN_EXPLORER_CHAOS_DB_PORT: 3307
+    })
+});
+
+function integer(value, label) {
+    const text = String(value);
+    if (!/^(0|[1-9][0-9]*)$/.test(text)) {
+        throw new Error(`${label} must be a non-negative integer, got ${JSON.stringify(text)}`);
+    }
+    return Number(text);
+}
+
+function offset(env) {
+    const source = env || process.env;
+    return source.CI_PORT_OFFSET === undefined || source.CI_PORT_OFFSET === ''
+        ? 0
+        : integer(source.CI_PORT_OFFSET, 'CI_PORT_OFFSET');
+}
+
+function basePort(name) {
+    for (const spec of Object.values(SPECS)) {
+        if (Object.prototype.hasOwnProperty.call(spec, name)) return spec[name];
+    }
+    throw new Error(`unknown fixture port ${name}`);
+}
+
+function port(name, env) {
+    const source = env || process.env;
+    const value = source[name] === undefined || source[name] === ''
+        ? basePort(name) + offset(source)
+        : integer(source[name], name);
+    if (value < 1 || value > 65535) throw new Error(`${name} resolves outside the TCP port range: ${value}`);
+    return value;
+}
+
+function composeEnvironment(file, env) {
+    const spec = SPECS[file];
+    if (!spec) throw new Error(`unknown fixture compose file ${file}`);
+    const result = { ...(env || process.env) };
+    for (const name of Object.keys(spec)) result[name] = String(port(name, result));
+    return result;
+}
+
+function render(file, env) {
+    const spec = SPECS[file];
+    if (!spec) throw new Error(`unknown fixture compose file ${file}`);
+    let source = fs.readFileSync(path.join(REPO, file), 'utf8');
+    for (const [name, base] of Object.entries(spec)) {
+        source = source.split(`\${${name}:-${base}}`).join(String(port(name, env)));
+    }
+    return source;
+}
+
+function compose(file, args, env) {
+    const result = spawnSync('docker', ['compose', '-f', file, ...args], {
+        cwd: REPO,
+        env: composeEnvironment(file, env),
+        stdio: 'inherit'
+    });
+    if (result.error) throw result.error;
+    return result.status === null ? 1 : result.status;
+}
+
+function main(argv) {
+    const [command, name, ...args] = argv;
+    if (command === 'render' && name && args.length === 0) {
+        process.stdout.write(render(name));
+        return 0;
+    }
+    if (command === 'port' && name && args.length === 0) {
+        process.stdout.write(String(port(name)) + '\n');
+        return 0;
+    }
+    if (command === 'compose' && name && args.length > 0) return compose(name, args);
+    throw new Error('usage: fixture-ports.js <render FILE|port NAME|compose FILE ARGS...>');
+}
+
+if (require.main === module) {
+    try {
+        process.exitCode = main(process.argv.slice(2));
+    } catch (err) {
+        console.error(err.message);
+        process.exitCode = 1;
+    }
+}
+
+module.exports = { SPECS, offset, port, composeEnvironment, render };

bin/pins/at1-explorer-identity.json

@@ -5,8 +5,8 @@
   "twins": [
     {
       "path": "src/consensus/equivocation_header.js",
-      "bytes": 4171,
-      "sha256": "441998fc0d7cbf9cb94f79933224f1b5839981e79fb639bdda5eb0bacb07b46d"
+      "bytes": 4357,
+      "sha256": "33795d35b6133135745471fd00c93da001aef942dd1d894ff929a4ebc53fb81e"
     },
     {
       "path": "src/consensus/gates/mirror_admission_gate.js",
@@ -30,8 +30,8 @@
     },
     {
       "path": "src/consensus/stake_weighted_quorum.js",
-      "bytes": 10112,
-      "sha256": "ca074be59873a47b30da94c98a812771e3fb3252fea83fd5e56dbf2bd5b26ddf"
+      "bytes": 10294,
+      "sha256": "946191601217a7b2ac0e6c50d37eb6a111ba30544680aeff434f52b9f5c2d661"
     }
   ],
   "routes": {