Release v0.21.0

.ci-siblings

@@ -6,9 +6,9 @@
 # checks against it. An undeclared sibling is not a neutral omission - the gate
 # would fail loud (bin/ci-full.sh need_sib) rather than silently skip.
 #
-# ci-dispatch.sh ships each of these at its origin/master (falling back to local
-# HEAD) and REFUSES the push if one is not a checkout beside this repo, so a
-# declared sibling can never be silently absent.
+# ci-dispatch.sh ships each of these at its canonical origin head (falling back
+# to local HEAD) and REFUSES the push if one is not a checkout beside this repo,
+# so a declared sibling can never be silently absent.
 
 # Vendored coins-registry byte-identity: BTC/LTC/DOGE/index/consensus_pin.
 xchain-hub
@@ -18,3 +18,7 @@ xchain-hub
 # src/rollcall_activation.js). Both guards throw under XCHAIN_REQUIRE_SIBLINGS=1
 # when this checkout is absent, which is exactly what CI run 35020607785 did.
 xchain-indexer
+# The migrationMode parity guard (migration_precondition_service.test) holds
+# this tool's copy to the decoder runner's src/db/migration_statements.js, and
+# throws under XCHAIN_REQUIRE_SIBLINGS=1 when this checkout is absent.
+xchain-decoder

.github/workflows/ci.yml

@@ -20,9 +20,9 @@ on:
 jobs:
   ci:
     uses: XChain-Platform/.github/.github/workflows/ci-reusable.yml@fd9160695d677f0538e959460ba5d8dfbb7f3c8e # pin: XChain-Platform/.github @ master 2026-08-31; bump deliberately
-    # Override the Node version for a repo if ever needed:
-    # with:
-    #   node-version: "20"
+    with:
+      # The fleet's consensus runtime; a floating "22" now resolves 22.23.3, which the VM runtime gate refuses.
+      node-version: "22.22.3"
 
   # Cross-repo drift guards: this repo vendors the canonical
   # coin registry from xchain-hub, and per-repo CI cannot see sibling repos, so
@@ -49,7 +49,7 @@ jobs:
       - name: Use Node.js 22
         uses: actions/setup-node@v4
         with:
-          node-version: "22"
+          node-version: "22.22.3"
 
       - name: Coin-registry byte-identity vs canonical
         run: xchain-hub/bin/sync-coins.sh --check --only xchain-node
@@ -89,40 +89,15 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      # Re-runs the same suite the `ci` job runs, so it needs the same
-      # sibling checkout that job's shared workflow does elsewhere.
-      # Mirrored verbatim (same roster, same clone) so they cannot drift.
+      # Re-runs the same suite the `ci` job runs, so it needs the same siblings.
       - name: Check out declared sibling repositories
         id: siblings
-        env:
-          SIBLINGS_REF: ${{ github.ref == 'refs/heads/master' && 'master' || 'develop' }}
-          OWNER: ${{ github.repository_owner }}
-        run: |
-          set -euo pipefail
-          if [ ! -f .ci-siblings ]; then
-            echo "no .ci-siblings in this repo; single-repo layout"
-            exit 0
-          fi
-          repos=$(sed 's/#.*//' .ci-siblings | tr -d '\r' | awk 'NF')
-          cd "$GITHUB_WORKSPACE/.."
-          for repo in $repos; do
-            rm -rf "$repo"
-            url="https://github.com/$OWNER/$repo.git"
-            git clone --quiet --depth 1 --branch "$SIBLINGS_REF" "$url" "$repo" 2>/dev/null \
-              || git clone --quiet --depth 1 "$url" "$repo"
-            echo "sibling $repo @ $(git -C "$repo" rev-parse --abbrev-ref HEAD) $(git -C "$repo" rev-parse --short HEAD)"
-            if [ -f "$repo/package.json" ]; then
-              ( cd "$repo" && npm ci --omit=dev --ignore-scripts --no-audit --no-fund >/dev/null 2>&1 ) \
-                || ( cd "$repo" && npm install --omit=dev --ignore-scripts --no-audit --no-fund >/dev/null 2>&1 ) \
-                || echo "sibling $repo: dependency install failed, guards needing its modules will say so"
-            fi
-          done
-          echo "checked-out=1" >> "$GITHUB_OUTPUT"
+        uses: XChain-Platform/.github/actions/checkout-siblings@master # one definition for every call site; see the action for why this tracks master
 
       - name: Use Node.js 22
         uses: actions/setup-node@v4
         with:
-          node-version: "22"
+          node-version: "22.22.3"
           cache: npm
 
       - name: Install dependencies

.github/workflows/mutation.yml

@@ -0,0 +1,41 @@
+# Scheduled Stryker mutation run over the modules listed in stryker.config.json.
+# Too slow for the push gate, so it runs weekly and on demand. The report is
+# uploaded even when the break threshold fails the run, so a score drop can be
+# inspected from the artifact.
+name: mutation
+
+permissions:
+  contents: read
+
+on:
+  schedule:
+    - cron: "0 3 * * 0"
+  workflow_dispatch:
+
+jobs:
+  stryker:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Use Node.js 22
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run Stryker
+        run: npm run test:mutation
+
+      - name: Upload mutation report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: mutation-report
+          path: reports/mutation/
+          if-no-files-found: warn
+          retention-days: 30

.github/workflows/nightly-e2e.yml

@@ -190,7 +190,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: "22.22.3"
 
       # WHY THE COIN LIST IS EVENT-DEPENDENT. A scheduled run carries NO inputs, so
       # without this it would silently test bitcoin alone and the nightly would be
@@ -245,6 +245,10 @@ jobs:
       COIN: ${{ matrix.coin }}
       SHARD: ${{ matrix.shard }}
       PLAN_JSON: ${{ needs.plan.outputs.plan }}
+      # Every node src/index.js call below (validator init, install, e2etest) reads
+      # api.github.com; anonymous reads share 60 per hour per runner IP, which a busy
+      # day exhausts, and the job token raises that to 5000.
+      GITHUB_TOKEN: ${{ github.token }}
       # The anchor-reward attestation barrier holds each block until the hub-mirror
       # stream watermark is 120s past that block's own timestamp. On a shared ledger
       # that is free, because blocks are ten minutes apart and the watermark is long
@@ -357,7 +361,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: "22.22.3"
 
       - name: Reclaim runner disk (coin daemon + per-service images are large)
         run: |
@@ -773,7 +777,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: "22.22.3"
 
       # A shard that never uploaded simply has no artifact here; the merge names
       # it as missing, so a failed download is not allowed to stop the job first.

CHANGELOG.md

@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.21.0] - 2026-09-29
+
+### Added
+- Published the hub peer port in validator mode.
+
+### Changed
+- Validated the running indexer's migration status before service use.
+- Passed the anchor fold arming variable to the regtest indexer and hub.
+
+### Fixed
+- Used regtest namespaces and the correct encoder URL in validator links.
+- Started module containers under an init process and bounded health-check requests.
+
 ## [0.20.1] - 2026-09-23
 
 ### Fixed

README.md

@@ -4,7 +4,7 @@
 # XChain Platform Node
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-0.20.1-blue" alt="Version">
+  <img src="https://img.shields.io/badge/version-0.21.0-blue" alt="Version">
   <img src="https://img.shields.io/badge/tests-3%2C387%2B%20passing-brightgreen" alt="Tests">
   <img src="https://img.shields.io/badge/node-%3E%3D22-green" alt="Node">
   <img src="https://img.shields.io/badge/license-AGPL--3.0--or--later-blue" alt="License">

bin/ci-full.sh

@@ -66,17 +66,29 @@ ci_tier_deferred() {
   return 1
 }
 # <<< ci-tier <<<
+fast_defer() {
+  DEFERRED="$DEFERRED [$1]"
+  echo; echo "ci:full ===== $1 DEFERRED (CI_TIER=fast, runs in the full sweep) ====="
+}
+
+# >>> ci-tier timer (generated block; re-run the tier wirer to update) >>>
 run_tier() {
   ci_tier_deferred "$1" && return 0  # ci-tier guard (generated)
   local name="$1"; shift
+  local __ci_tier_t0=$SECONDS
   echo; echo "ci:full ===== $name ====="
-  if "$@"; then
-    echo "ci:full ----- $name PASS"
+  local root
+  root="$(mktemp -d "${TMPDIR:-/tmp}/xchain-node-ci-full.XXXXXX")"
+  mkdir -p "$root/config" "$root/data"
+  if ( export XCHAIN_NODE_CONFIG_DIR="$root/config" XCHAIN_NODE_DATA_DIR="$root/data"; "$@" ); then
+    echo "ci:full ----- $name PASS ($(( SECONDS - __ci_tier_t0 ))s)"
   else
     FAILED="$FAILED [$name]"
-    echo "ci:full ----- $name FAIL"
+    echo "ci:full ----- $name FAIL ($(( SECONDS - __ci_tier_t0 ))s)"
   fi
+  rm -rf -- "$root"
 }
+# <<< ci-tier timer <<<
 need_sib() {
   local s
   for s in "$@"; do
@@ -104,14 +116,52 @@ if [ "${#DECLARED_SIBLINGS[@]}" -gt 0 ]; then
   need_sib "${DECLARED_SIBLINGS[@]}"
 fi
 
+FAST_SELECTOR_MODE="full"
+if [ "${CI_TIER:-full}" = "fast" ]; then
+  FAST_PLAN=""
+  FAST_SELECTOR_REASON=""
+  if [ ! -f bin/ci_fast_select.js ]; then
+    FAST_SELECTOR_REASON="helper missing"
+  elif FAST_PLAN="$(node bin/ci_fast_select.js --plan 2>&1)"; then
+    FAST_PLAN_HEADER="${FAST_PLAN%%$'\n'*}"
+    case "$FAST_PLAN_HEADER" in
+      "consensus 0") FAST_SELECTOR_MODE="changed" ;;
+      "consensus 1") FAST_SELECTOR_MODE="consensus" ;;
+      *) FAST_SELECTOR_REASON="selector returned no consensus decision" ;;
+    esac
+    if [ -z "$FAST_SELECTOR_REASON" ]; then
+      printf '%s\n' "$FAST_PLAN"
+    fi
+  else
+    FAST_SELECTOR_STATUS=$?
+    FAST_SELECTOR_REASON="exit $FAST_SELECTOR_STATUS: ${FAST_PLAN//$'\n'/; }"
+  fi
+  if [ -n "$FAST_SELECTOR_REASON" ]; then
+    echo "ci:full: fast selector unavailable ($FAST_SELECTOR_REASON); running the full unit tier"
+  fi
+fi
+
 # --- job: ci (XChain-Platform/.github ci-reusable.yml -> npm run ci) -------
 # ci-reusable.yml arms XCHAIN_REQUIRE_SIBLINGS whenever it checked
 # siblings out, so every sibling guard fails loud on a miss instead of
 # skipping; match that here for a true local twin.
-if [ "${#DECLARED_SIBLINGS[@]}" -gt 0 ]; then
-  run_tier "ci" env XCHAIN_REQUIRE_SIBLINGS=1 npm run ci
+if [ "${CI_TIER:-full}" != "fast" ] || [ "$FAST_SELECTOR_MODE" != "changed" ]; then
+  if [ "${#DECLARED_SIBLINGS[@]}" -gt 0 ]; then
+    run_tier "ci" env XCHAIN_REQUIRE_SIBLINGS=1 npm run ci
+  else
+    run_tier "ci" npm run ci
+  fi
 else
-  run_tier "ci" npm run ci
+  if [ "${#DECLARED_SIBLINGS[@]}" -gt 0 ]; then
+    run_tier "ci (changed tests)" env XCHAIN_REQUIRE_SIBLINGS=1 node bin/ci_fast_select.js --run
+  else
+    run_tier "ci (changed tests)" node bin/ci_fast_select.js --run
+  fi
+  fast_defer "ci"
+fi
+
+if [ "${CI_TIER:-full}" = "fast" ]; then
+  run_tier "fast-tier selector self-test" ./node_modules/.bin/mocha --no-config --timeout 20000 --exit bin/test/ci_fast_select.test.js
 fi
 
 # --- job: drift-guards -------------------------------------------------------
@@ -128,14 +178,14 @@ run_tier "drift: coin consensus-pin conformance" node -e '
   console.log("consensus pin conformance OK (testnet, regtest)");
 '
 
-# --- identity pin (this gate only; no ci.yml job runs it) --------------------
-# bin/pins/identity.json holds the sha256 of every vendored coin file. Nothing
-# else reads it, so this tier re-hashes the tree against it and fails on any
-# moved, missing or unreadable file instead of letting the pin go stale.
+# --- identity pin (also the drift-guards job's identity pin step) ------------
+# bin/pins/identity.json holds the sha256 of every vendored coin file. This
+# tier re-hashes the tree against it and fails on any moved, missing or
+# unreadable file instead of letting the pin go stale.
 run_tier "identity pin (vendored coin bytes)" node bin/pin_identity.js --compare bin/pins/identity.json
 
 # --- job: coverage -----------------------------------------------------------
-run_tier "coverage ratchet (coverage:check)" npm run coverage:check
+run_tier "coverage ratchet (coverage:check)" env XCHAIN_REQUIRE_SIBLINGS=1 npm run coverage:check
 
 echo
 # >>> ci-tier summary (generated) >>>