From 85680d921d536556b858d4438071e1b574d6f877 Mon Sep 17 00:00:00 2001
From: Glenn Gore <glenn.g@affinidi.com>
Date: Sun, 31 May 2026 10:37:04 +0800
Subject: [PATCH] chore(core): adopt @openvtc/vti-didcomm-js 0.4.2
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Picks up the WS-upgrade close-code diagnostics (so a CORS/ACL/proxy
failure surfaces its 1006/1008 cause + endpoint in the plugin instead
of an opaque "WebSocket failed to open") and the per-frame inbound
resilience (a bad message is logged via the library's onError hook —
default console.warn — and skipped rather than silently dropped).

No code change needed: the default onError already logs to console, and
the diagnostics ride on the existing connect path. Bumps pnm-core (and
the private app packages that ship it) to 0.1.2.

Signed-off-by: Glenn Gore <glenn.g@affinidi.com>
---
 package-lock.json               | 18 +++++++++---------
 package.json                    |  2 +-
 packages/core/package.json      |  4 ++--
 packages/extension/package.json |  2 +-
 packages/pwa/package.json       |  2 +-
 5 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 0d0c304..40fff7f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "pnm-browser-plugin",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pnm-browser-plugin",
-      "version": "0.1.1",
+      "version": "0.1.2",
       "workspaces": [
         "packages/core",
         "packages/pwa",
@@ -2276,9 +2276,9 @@
       "link": true
     },
     "node_modules/@openvtc/vti-didcomm-js": {
-      "version": "0.4.1",
-      "resolved": "https://registry.npmjs.org/@openvtc/vti-didcomm-js/-/vti-didcomm-js-0.4.1.tgz",
-      "integrity": "sha512-JBdQoOul7T5iHoRx1t5pGs+7rZIeDVuF6PQOmxS4c7Vp54ave4KJGi0C8i1NDMBCL1cvA0KjhpOBz5Qy8VUepg==",
+      "version": "0.4.2",
+      "resolved": "https://registry.npmjs.org/@openvtc/vti-didcomm-js/-/vti-didcomm-js-0.4.2.tgz",
+      "integrity": "sha512-zlYJEmbo6VH9J9628VS61uCJn79RuMq6ym3pbjjYpwZYMeKrML91ClkovKbnExPryzThtgypBFXfHwr2ti1Urw==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/curves": "^2.2.0",
@@ -6980,13 +6980,13 @@
     },
     "packages/core": {
       "name": "@openvtc/pnm-core",
-      "version": "0.1.1",
+      "version": "0.1.2",
       "license": "Apache-2.0",
       "dependencies": {
         "@hpke/chacha20poly1305": "^1.8.0",
         "@hpke/core": "^1.9.0",
         "@noble/curves": "^2.2.0",
-        "@openvtc/vti-didcomm-js": "^0.4.1",
+        "@openvtc/vti-didcomm-js": "^0.4.2",
         "@scure/base": "^1.1.9",
         "cbor-x": "^1.6.4"
       },
@@ -7003,7 +7003,7 @@
     },
     "packages/extension": {
       "name": "@openvtc/pnm-extension",
-      "version": "0.1.1",
+      "version": "0.1.2",
       "dependencies": {
         "@openvtc/pnm-core": "^0.1.0",
         "react": "^19.0.0",
@@ -7023,7 +7023,7 @@
     },
     "packages/pwa": {
       "name": "@openvtc/pnm-pwa",
-      "version": "0.1.1",
+      "version": "0.1.2",
       "dependencies": {
         "@openvtc/pnm-core": "^0.1.0",
         "@tanstack/react-query": "^5.62.0",
diff --git a/package.json b/package.json
index fc0dc53..24f259e 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "pnm-browser-plugin",
   "private": true,
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Browser-side bridge between WebAuthn passkeys and VTA-managed DIDs. Ships as a PWA and as an MV3 browser extension on a shared TypeScript core.",
   "type": "module",
   "workspaces": [
diff --git a/packages/core/package.json b/packages/core/package.json
index 3072d14..4a48740 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openvtc/pnm-core",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Browser-side bridge between WebAuthn passkeys and VTA-managed DIDs. Wire types, WebAuthn ceremony helpers, COSE→Multikey conversion, DID verificationMethod builder, REST + DIDComm transports, mediator client, SIOP / RP-login / provision-integration flows.",
   "license": "Apache-2.0",
   "repository": {
@@ -46,7 +46,7 @@
     "@hpke/chacha20poly1305": "^1.8.0",
     "@hpke/core": "^1.9.0",
     "@noble/curves": "^2.2.0",
-    "@openvtc/vti-didcomm-js": "^0.4.1",
+    "@openvtc/vti-didcomm-js": "^0.4.2",
     "@scure/base": "^1.1.9",
     "cbor-x": "^1.6.4"
   },
diff --git a/packages/extension/package.json b/packages/extension/package.json
index be1d6da..69ee43c 100644
--- a/packages/extension/package.json
+++ b/packages/extension/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openvtc/pnm-extension",
   "private": true,
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Manifest v3 browser extension shell sharing @openvtc/pnm-core.",
   "type": "module",
   "scripts": {
diff --git a/packages/pwa/package.json b/packages/pwa/package.json
index 96dbd4d..09a7239 100644
--- a/packages/pwa/package.json
+++ b/packages/pwa/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@openvtc/pnm-pwa",
   "private": true,
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "PWA shell for pnm-browser-plugin — operator-facing wallet UI.",
   "type": "module",
   "scripts": {