passkey-kit v0.18.3

This patch replaces the broken 0.18.2 npm artifact.

Runtime dependencies now use exact package versions instead of workspace protocols. CI and publication verify that these versions match their workspace packages.

The release also updates vitest to 4.1.11. This change removes GHSA-82fw-gwwq-j7x9 from the development dependency audit.

Runtime behavior, the wallet contract, passkey-kit-sdk@0.9.0, and sac-sdk@0.4.4 remain unchanged from 0.18.2.

See CHANGELOG.md for details.

passkey-kit v0.18.2

This patch cleans every published package output before each build. It removes stale generated files from reused worktrees.

Runtime behavior, the wallet contract, passkey-kit-sdk@0.9.0, and sac-sdk@0.4.4 remain unchanged from v0.18.1.

See CHANGELOG.md for details.

passkey-kit v0.18.1

This release removed the vulnerable consumer-only relayer dependency tree and preserved relayer transport diagnostics.

The published tarball contained eight stale, unexported generated files from an earlier build. Use v0.18.2 instead.

passkey-kit v0.18.0

Changes

• Bound package support to @stellar/stellar-sdk ^16.3.0.
• Removed the ignored indexer compatibility option.
• Updated vulnerable npm and safe Cargo dependencies.
• Added dependency audits, relayer type checking, pinned actions, and secret scanning.
• Added an admin-root mismatch regression test.

The canonical contract, passkey-kit-sdk@0.9.0, and sac-sdk@0.4.4 remain unchanged. Read CHANGELOG.md before updating.

passkey-kit v0.17.3

Changes

• Mercury schema-2 credential discovery uses the v2 lookup route.
• Connection rejects passkey signers after their inclusive expiration boundary.
• The parser rejects incomplete, ambiguous, or colliding lookup results.

The contract and generated bindings remain unchanged.

passkey-kit v0.17.2

Security

• Generic signing refuses wallet administration and contract-deploy authority.
• Administrative roots must match the transaction host function exactly.
• Dedicated administrative signing methods declare this authority.

The contract and canonical wallet WASM remain unchanged.

passkey-kit v0.17.1

This patch prepares the additive Mercury schema-2 rollout.

• MercuryIndexer prefers schema-2 candidates when legacy wallets are also present.
• The SDK rejects mismatched dual-field contract sets.
• Public documentation now shows the canonical WASM and live indexer status.
• Private coordination material is removed from the public documentation.

The smart-wallet contract is unchanged. This release uses the v0.17.0 WASM, passkey-kit-sdk@0.9.0, and sac-sdk@0.4.4.

passkey-kit v0.17.0

Security release

This release closes accepted-code wallet redirection during passkey wallet discovery.

The smart wallet now verifies a GENESIS WebAuthn proof inside __constructor.
The add_secp256r1 function requires a separate ADD proof.
Each proof binds the network, wallet address, purpose, and complete signer value.

The SDK now verifies the wallet creation transaction before connection.
It also verifies current code, signer state, the stored proof, and fresh passkey possession.
The SDK rejects incomplete, stale, ambiguous, and derivation-only discovery.

This design keeps direct CreateContractV2 and __constructor.
It does not use a factory contract.

Compatibility

This alpha release has no migration path for pre-0.17.0 wallets.
Fresh-device discovery fails closed until the indexer serves the schema-2 candidate response.

Packages

• passkey-kit@0.17.0
• passkey-kit-sdk@0.9.0
• sac-sdk@0.4.4

Smart-wallet WASM

The attached smart_wallet.wasm has this SHA-256 hash:

97ce047884106b1c6c3bb40b8973cc48db1c4dad95c9e20462bf2c701daa764e

The same bytes exist on Stellar testnet and mainnet.
See docs/deployments-2026-09-01.md for the upload transactions.

Validation

• 272 TypeScript tests pass.
• 136 smart-wallet tests pass.
• Two real-WASM constructor tests pass.
• Rust formatting and clippy pass.
• GitHub CI, CodeQL, and Socket checks pass.

passkey-kit 0.16.5

Browser deployment safety release.

• Uses DataView for shared-deployer authorization nonces in browsers.
• Keeps a newly created wallet disconnected until deployment confirmation.
• Checks code identity for primary predictions and legacy storage rows.
• Preserves the upgrade exception for explicit secondary passkey associations.

No contract, WASM, binding, relayer, or hosted service changed.

Published package:

• passkey-kit@0.16.5

passkey-kit 0.16.4

Security status documentation release.

• Adds visible unaudited-software and value-risk guidance.
• Adds private vulnerability reporting instructions in SECURITY.md.
• Replaces the generated binding placeholder with a curated package README.
• Preserves the curated binding README during regeneration.

No contract, WASM, SDK behavior, or relayer behavior changed.

Published packages:

• passkey-kit-sdk@0.8.2
• passkey-kit@0.16.4