v4.1.0

Minor Changes

• ee88f69: Add capability-free Relay v2 lifecycle diagnostics, typed safe errors, bounded SSE timeout recovery through /v2/result polling, and deterministic local support IDs while preserving existing v2 wire contracts.

v4.0.1

Patch Changes

• e276e58: Canonicalize official Relay v2 callback expectations to Wallet's capability-safe signed binding.

v4.0.0

Major Changes

• c49af80: Implement the breaking Glyph Connect request deep-link v2 contract.

  • Switch request URLs to glyph://v2/request with glyph-connect-request/2 envelopes.
  • Add deterministic JCS/RFC8785-compatible canonical JSON and sha256:<base64url> request/network hashing.
  • Bind requests and signed callback envelopes to typed Qubic networks, defaulting safely to mainnet.
  • Remove v1 request launch compatibility from documented and tested SDK behavior.

v3.0.0

Major Changes

• 87d2157: Add secure relay v2 sessions with separate read and callback capabilities, support verification of wallet-signed callback envelopes, and remove the legacy relay v1 subscribeViaRelay() and relayCallbackUrl() APIs.

v2.2.1

Patch Changes

• 8413b87: Harden SDK protocol validation, relay result handling, package ESM imports, and release checks to mirror wallet delivery policy.

v2.2.0

Minor Changes

• 3d2765d: Add relay-backed SSE transport for dApps without a server.

  • subscribeViaRelay(nonce, options?) opens a streaming fetch to the Glyph relay and returns a Promise<GlyphCallbackResponse>. Works in browsers, Node 18+, Bun, Deno, and service workers. No EventSource dependency.
  • relayCallbackUrl(nonce, relayUrl?) builds the callback URL for createEnvelope().
  • Supports onStatus progress callbacks: opening_wallet, awaiting_approval, completed, failed.

v2.1.0

Minor Changes

• 38d2d91: Add request lifecycle feedback, focus restoration, and configurable callback completion handling.

v2.0.0

Major Changes

• Rebrand the SDK for Glyph, publish under the @glyph-oss npm scope, switch canonical deep links to glyph://, and remove the old pre-adoption protocol/API names instead of keeping compatibility aliases.

v1.0.0

Major Changes

• 15faeb7: Remove proof/signing system and add async sigilRequest() API

  Breaking: SigilProof, SigilProofOptions, signEnvelope, verifyEnvelopeSignature, serializeSignedRequestPayload, hashSignedRequestPayload are all removed. The proof field is gone from SigilEnvelope.

  New: sigilRequest(req, options?) — launches Sigil via a link click and returns a Promise<SigilCallbackResponse> backed by BroadcastChannel. No server, no polling.

  New: handleRedirect() — call at your callbackPath route (default /__sigil__); reads ?result=, broadcasts to the waiting Promise, closes the tab.

  New: redirect_uri field on SigilEnvelope and createEnvelope options — Sigil opens the browser to this URL with the result as a ?result= query param after the user acts.

v0.3.0

Minor Changes

• de27362: Add callback response parsing, signature verification, and browser launch fix

  • parseCallbackResponse(body) — parse and type-narrow the five Sigil callback response shapes (signed transfer, signed message, connected, verified, rejected); throws on unknown or malformed payloads
  • verifyEnvelopeSignature(envelope, options?) — verify an ES256 signed envelope using the embedded public_jwk or a caller-supplied key; returns false for proof-less envelopes
  • Fix openSigilUrl to use an anchor-click instead of window.location.assign, which allows the sigil:// protocol handler to be triggered without navigating the current page
  • Export new callback response types: SigilSignedTransferCallback, SigilSignedMessageCallback, SigilConnectedCallback, SigilVerifiedCallback, SigilRejectedCallback, SigilCallbackResponse