# Changelog
All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
## [0.2.6] - 2026-04-15
### Changed
- Documentation and log messages: prefer **secret webcash** / **webcash string**
wording over “token” when referring to bearer `e…:secret:…` values.
- `docs/PROTOCOL.md`: section title clarified (“Webcash string format”).
### Meta
- Publishes to **crates.io** (index was still at **0.2.4** after git tag `v0.2.5`).
Downstream crates should depend on `webylib = "0.2"` and run `cargo update -p webylib`
after this release.
## [0.2.5] - 2026-04-15
_Unpublished to crates.io; changes rolled into **0.2.6**._
## [0.2.4] - 2026-04-14
### Fixed
- **Send-safe futures**: `server_client` changed from `std::sync::Mutex` to
`tokio::sync::Mutex` so wallet operations produce `Send` futures. Fixes
compatibility with axum 0.8+ handler requirements.
## [0.2.3] - 2026-04-14
### Fixed
- **insert depth tracking**: `insert_with_validation` now reads RECEIVE depth
from `walletdepths` table instead of counting rows in `unspent_outputs`.
The old query returned wrong depths after pay/merge/spend operations, which
could cause HD-derived secrets to collide or skip indices.
- **insert depth increment**: RECEIVE depth is now incremented after successful
insert, matching the Python reference wallet behavior.
- **merge uses CHANGE chain**: `merge()` now derives output secrets from the
CHANGE chain code (HD-recoverable) instead of generating random secrets.
Single server replace instead of the previous double-replace pattern.
- **depth increment after server**: All operations (insert, pay, merge) now
read depths before the server call and increment only after server success,
inside a single SQLite transaction. No depth is burned on server failure.
- **pay/merge atomicity**: Post-server DB updates (mark spent, store change,
increment depths) are now wrapped in SQLite transactions via
`connection.transaction()`.
- **mark_inputs_spent atomicity**: Wrapped in transaction to prevent
partial spent state.
- **derive_next_secret atomicity**: Read + increment wrapped in a transaction.
### Changed
- Default wallet path changed from `./wallet.db` to `~/.webyc/wallet.db`
- Added `dirs-next` dependency (CLI feature only) for cross-platform home directory
- Install scripts now create `~/.webyc/` default wallet directory
## [0.2.1] - 2026-04-14
### Changed
- Production documentation overhaul: clean docs/ with ARCHITECTURE, FFI, PROTOCOL, SECURITY, DEVELOPMENT
- FFI reference with complete examples for Python, Node.js, C#, Go, Swift, Java, Kotlin
- README rewritten with ASCII header, platform table, module structure, quick start in Rust/C/CLI
- CONTRIBUTING rewritten with design principles table and harmoniis-wallet conventions
- Removed stale docs (ARCHITECTURE_FIXES, IMPLEMENTATION_STATUS, ROADMAP)
- All license references updated to MIT, all MSRV references updated to 1.85
- reqwest: `default-features = false` — drops OpenSSL, fixes all cross-compilation
- Android releases use NDK toolchain directly (no Docker/cross)
- Linux aarch64 release uses native ARM runner
## [0.2.0] - 2026-04-13
### Added
- **FFI layer** (`src/ffi/`) — full C ABI exports for cross-platform SDK consumption
- `weby_wallet_open`, `weby_wallet_open_with_seed`, `weby_wallet_free`
- `weby_wallet_balance`, `weby_wallet_insert`, `weby_wallet_pay`
- `weby_wallet_check`, `weby_wallet_merge`, `weby_wallet_recover`
- `weby_wallet_stats`, `weby_wallet_export_snapshot`
- `weby_wallet_encrypt_seed`, `weby_amount_parse`, `weby_amount_format`
- `weby_version`, `weby_last_error_message`, `weby_free_string`
- Thread-local error message storage with `WebyErrorCode` enum
- `Wallet::open_with_seed()` — inject a caller-provided 32-byte seed
- `ChainCode::as_str()` — canonical string names (RECEIVE, PAY, CHANGE, MINING)
- `CheckResult` / `RecoveryResult` structured return types
- WAL mode (`PRAGMA journal_mode=WAL`) enabled on every wallet open
- `protocol.rs` — VERSION and TERMS_OF_SERVICE constants
- Feature flags: `bundled-sqlite`, `ffi`, `cli`, `passkey`
- `cdylib` + `staticlib` crate types for shared/static library builds
- CI: Windows, FreeBSD, MSRV 1.75, release builds, crates.io publish
- CI: iOS (aarch64-apple-ios) and Android (aarch64-linux-android) cross-compilation
- `log` crate integration — library never prints to stdout
### Changed
- **License changed from MPL-2.0 to MIT**
- **lib.rs is now pure re-exports** — no implementation code
- `wallet.rs` (1,615 lines) split into `wallet/` module:
- `wallet/mod.rs` — struct definition, constructors
- `wallet/schema.rs` — database initialization, WAL mode
- `wallet/operations.rs` — insert, pay, merge, recover, check, balance
- `wallet/encryption.rs` — database/seed encryption
- `wallet/snapshot.rs` — JSON export/import
- `ChainCode` unified (was duplicated as `KeyType` in `hd.rs`)
- `HDWallet::derive_secret()` now takes `ChainCode` enum instead of raw `u64`
- All 57 `println!` calls in wallet replaced with `log::info!`/`log::debug!`
- `ServerClient` now implements `ServerClientTrait` — wallet owns it via trait object
- `check()` returns `CheckResult` (struct) instead of `()`
- `recover()` / `recover_from_wallet()` return `RecoveryResult` instead of `String`
- `HDWallet` now derives `Zeroize` + `ZeroizeOnDrop` (was manual)
- `endpoints` module moved from `lib.rs` to `server.rs`
- MSRV bumped from 1.70 to 1.85
- `clap` and `rpassword` are now optional (`cli` feature)
### Removed
- `src/server/ios.rs` — 166-line stub (every method returned error)
- `tests/unit/server_ios.rs` — tests for deleted stub
- `KeyType` enum (unified into `ChainCode`)
- `generate_receive_secret`, `generate_pay_secret`, `generate_change_secret`, `generate_mining_secret` — use `derive_secret(ChainCode::*, depth)` directly
- Dead dependencies: `aes = "0.7"`, `block-modes = "0.8"` (zero imports)
## [0.1.1] - 2025-12-01
### Added
- Biometric encryption module (password-based Argon2 + AES-256-GCM)
- HD wallet with 4-chain derivation (Python-compatible)
- SQLite-backed wallet with snapshot export/import
- CLI tool (`webyc`) with setup, insert, pay, check, recover, merge, encrypt, decrypt
## [0.1.0] - 2025-10-01
### Added
- Initial release: Amount type, SecretWebcash/PublicWebcash parsing, server client