From 780e1ed6872a1bc8cd051578cc4e1e30e05200e3 Mon Sep 17 00:00:00 2001 From: Lann Martin Date: Mon, 7 Sep 2026 08:18:12 -0400 Subject: [PATCH] @polymorph/iroh 0.6.1 The host module API and its @polyengine constraints (runtime ^0.6.3, protocol ^0.3.1) are unchanged, so this is a patch under the caret-honest scheme. It carries the endpoint's move to upstream iroh 1.1.0 / noq 1.2.0 (#104) -- a new iroh_endpoint.wasm, paired with iroh-relay 1.1.0 -- and the native host's move to wasmtime 48 with the sibling host crates at their wasmtime-48 commits (#105). --- host-polyengine/deno.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/host-polyengine/deno.json b/host-polyengine/deno.json index f95d1be..05ae7ee 100644 --- a/host-polyengine/deno.json +++ b/host-polyengine/deno.json @@ -1,6 +1,6 @@ { "name": "@polymorph/iroh", - "version": "0.6.0", + "version": "0.6.1", "license": "Apache-2.0", "exports": { ".": "./src/mod.ts" }, "//": "MODULE-IDENTITY CONSTRAINT: this package instantiates the packaged endpoint component, so it still loads @polyengine/runtime/embedder — every consumer's resolver must still resolve exactly ONE @polyengine/runtime version for stateful-handle interop (a component instantiated under one embedder copy is refused by another). @polyengine/wasi@0.5.0 is protocol-only internally (A22) and the sibling @polymorph host modules (@polymorph/{webcrypto,websocket,webrtc-datachannels}@0.5.0) depend only on @polyengine/protocol — neither couples to @polyengine/runtime at all, so they no longer contribute to that constraint; @polyengine/protocol copies are harmless by construction (A22, contracts/embedder-api.md). Every dependency constraint here is a caret range on one minor line (published-package convention, polyengine's own precedent); deno.lock carries integrity, --frozen enforced in the repo. The exam gate (justfile: exam-polyengine) asserts the repo's deno.locks resolve to one @polyengine/runtime version and one @polyengine/protocol version, and pipes the resolved graph through scripts/polyengine-identity-gate.ts (one runtime module, no raw URLs). src/endpoint_component.ts is GENERATED by `just build-components` (gitignored; the publish workflow regenerates it) — the packaged endpoint component, base64 in the module graph. minimumDependencyAge keeps Deno's default supply-chain gate for everything else while letting same-day @polyengine/@polymorph publishes resolve.",