{"path":"CHANGELOG.md","size":2531,"locked":false,"binary":false,"truncated":false,"content":"# Changelog\n\nAll notable changes to Mappers Protocol are documented here. The project follows semantic versioning for release tags.\n\n## [0.1.0] - 2026-08-18\n\nThe first public repository release establishes the Solana escrow program, Oracle middleware, API/dashboard workspace, SDK, security gates, and contributor documentation as a reproducible baseline.\n\n### Added\n\n- Anchor-based Solana escrow program with separate GigEscrow and Vault PDAs.\n- Devnet deployment at `52yt1gCbPeiKP4JYjUVKmMJSgBMMcUx8xRGqozMKX2Mu`.\n- Oracle middleware for Helius Yellowstone gRPC event streaming and dual-model Gemini/Claude verification.\n- Express 5 API server with PostgreSQL and Drizzle ORM integration.\n- React 19 dashboard with generated TanStack Query client libraries.\n- TypeScript SDK and shared API schema packages.\n- Version-controlled wiki documentation under `docs/wiki/` with automated synchronization to the GitHub Wiki.\n- Required CI, Anchor, security, CodeQL, semantic-title, and DCO validation workflows.\n- Dependabot coverage for the root pnpm workspace, Cargo program, and GitHub Actions.\n\n### Changed\n\n- Oracle is now a first-class member of the root pnpm workspace and uses the root `pnpm-lock.yaml`.\n- Root validation commands include Oracle typechecking and tests through `pnpm run typecheck:oracle` and `pnpm run test:oracle`.\n- Anchor test execution uses the repository’s pinned TypeScript configuration and CI compatibility toolchain.\n- PDA derivation and initialization enforce the Solana 32-byte seed boundary for job IDs.\n- Documentation now reflects the actual monorepo layout, current toolchain, release process, and CI/CD gates.\n\n### Fixed\n\n- Dependabot’s unsupported nested pnpm workspace updater failure.\n- Oracle’s strict Express middleware and Yellowstone client type compatibility issues.\n- Missing direct Oracle runtime dependency for `bn.js` under pnpm’s strict workspace resolution.\n- Anchor test runner compatibility with the repository TypeScript toolchain.\n- DCO and semantic-title validation for Dependabot-generated pull requests.\n\n### Security\n\n- Root workspace installs enforce a minimum package release age and an explicit build-script allowlist.\n- Security Audit runs Cargo and pnpm audits with only documented Solana transitive advisories ignored.\n- CodeQL and DCO checks run as protected repository gates.\n- Secrets remain environment-provided; private keys and model credentials are not included in the release.\n\n[0.1.0]: https://github.com/mrphatom/mappers_contract/releases/tag/v0.1.0\n"}