chore: pin published Commonlib 0.1.33

docs/design_docs/time_bound_setup_uri.md

@@ -1,6 +1,6 @@
 ---
 date: 2026-09-28
-commonlib-version: "0.1.32"
+commonlib-version: "0.1.33"
 feasibility-probe-version: "0.1.27"
 self-hosted-livesync-version: "1.0.32"
 status: implementing
@@ -23,9 +23,9 @@ the entered passphrase. Neither the mode nor a timestamp is stored in the URI.
 
 The design is technically feasible with the existing encryption primitives.
 An executable protocol probe passes 22 cases against Commonlib 0.1.27 and
-octagonal-wheels 0.1.54. The implementation is published as Commonlib 0.1.32
+octagonal-wheels 0.1.54. The implementation was first published as Commonlib 0.1.32
-on the npm `next` tag. LiveSync pins that exact release in its npm dependency
+on the npm `next` tag. LiveSync now pins Commonlib 0.1.33 from that tag in its npm
-and independent Deno tool imports. A mobile performance bound remains
+dependency and independent Deno tool imports. A mobile performance bound remains
 outstanding.
 
 This document records the proposed key derivation and integration contract. The
@@ -402,6 +402,12 @@ passphrase and cancellation. The WebPeer browser test confirms that its monitor
 remains available after the URI window ends for a device which has already
 imported the URI.
 
+The subsequent update to published Commonlib 0.1.33 passes a clean `npm ci`,
+matching npm and frozen Deno lock integrity, source checks, the production build,
+1,042 unit tests, and eight Deno setup-tool tests. A consumer check of the public
+hashing entry covers key changes, E2EE suspension, and cache retirement. The real
+Obsidian two-Vault workflow also passes ordinary and encrypted note transfers.
+
 The downstream change depends on PR #1222's host compatibility integration;
 relaxing only the version check would bypass its compatibility contract. These
 results do not establish a mobile performance bound. The first implementation

package-lock.json

@@ -23,7 +23,7 @@
                 "@smithy/types": "^4.14.3",
                 "@smithy/util-retry": "^4.4.5",
                 "@vrtmrz/browser-ui-kit": "0.1.0",
-                "@vrtmrz/livesync-commonlib": "0.1.32",
+                "@vrtmrz/livesync-commonlib": "0.1.33",
                 "@vrtmrz/obsidian-plugin-kit": "0.1.4",
                 "@vrtmrz/ui-interactions": "0.1.2",
                 "diff-match-patch": "^1.0.5",
@@ -4567,9 +4567,9 @@
             }
         },
         "node_modules/@vrtmrz/livesync-commonlib": {
-            "version": "0.1.32",
+            "version": "0.1.33",
-            "resolved": "https://registry.npmjs.org/@vrtmrz/livesync-commonlib/-/livesync-commonlib-0.1.32.tgz",
+            "resolved": "https://registry.npmjs.org/@vrtmrz/livesync-commonlib/-/livesync-commonlib-0.1.33.tgz",
-            "integrity": "sha512-gzjhd7bg+DKHhd/24WGxBM7557wsw3HJkc0YjKll1n8/8vuhqPnlLuZmM33fj+4bv9nGFUnDlnoVowpQrTns6w==",
+            "integrity": "sha512-jziEUYCrGty3btR8pj/nkQrfLIGsQBbMug9opN8vCwAZmAznS0Zuh/l1TJpoKl8nqijZT1AJ4w5jkgU9pEyz4Q==",
             "license": "MIT",
             "dependencies": {
                 "@aws-sdk/client-s3": "^3.808.0",

package.json

@@ -187,7 +187,7 @@
         "@smithy/types": "^4.14.3",
         "@smithy/util-retry": "^4.4.5",
         "@vrtmrz/browser-ui-kit": "0.1.0",
-        "@vrtmrz/livesync-commonlib": "0.1.32",
+        "@vrtmrz/livesync-commonlib": "0.1.33",
         "@vrtmrz/obsidian-plugin-kit": "0.1.4",
         "@vrtmrz/ui-interactions": "0.1.2",
         "diff-match-patch": "^1.0.5",

utils/couchdb/livesync-commonlib.ts

@@ -1,5 +1,5 @@
 // Keep CouchDB database-version negotiation isolated from Setup URI generation.
 // The exact release must match utils/livesync-commonlib-version.ts; the setup
 // tool suite checks every static specifier before release.
-export { checkRemoteVersion } from "npm:@vrtmrz/livesync-commonlib@0.1.32/compat/pouchdb/negotiation";
+export { checkRemoteVersion } from "npm:@vrtmrz/livesync-commonlib@0.1.33/compat/pouchdb/negotiation";
-export { PouchDB } from "npm:@vrtmrz/livesync-commonlib@0.1.32/compat/pouchdb/pouchdb-browser";
+export { PouchDB } from "npm:@vrtmrz/livesync-commonlib@0.1.33/compat/pouchdb/pouchdb-browser";

utils/flyio/deno.lock

@@ -1,7 +1,7 @@
 {
   "version": "5",
   "specifiers": {
-    "npm:@vrtmrz/livesync-commonlib@0.1.32": "0.1.32"
+    "npm:@vrtmrz/livesync-commonlib@0.1.33": "0.1.33"
   },
   "npm": {
     "@aws-sdk/checksums@3.1000.18": {
@@ -284,8 +284,8 @@
         "@trystero-p2p/core"
       ]
     },
-    "@vrtmrz/livesync-commonlib@0.1.32": {
+    "@vrtmrz/livesync-commonlib@0.1.33": {
-      "integrity": "sha512-gzjhd7bg+DKHhd/24WGxBM7557wsw3HJkc0YjKll1n8/8vuhqPnlLuZmM33fj+4bv9nGFUnDlnoVowpQrTns6w==",
+      "integrity": "sha512-jziEUYCrGty3btR8pj/nkQrfLIGsQBbMug9opN8vCwAZmAznS0Zuh/l1TJpoKl8nqijZT1AJ4w5jkgU9pEyz4Q==",
       "dependencies": [
         "@aws-sdk/client-s3",
         "@smithy/fetch-http-handler",

utils/livesync-commonlib-version.ts

@@ -2,4 +2,4 @@
 // Commonlib registry release. Static npm specifiers cannot interpolate this
 // value, so livesync-commonlib-version.test.ts verifies the domain-specific
 // facades against it.
-export const LIVESYNC_COMMONLIB_VERSION = "0.1.32";
+export const LIVESYNC_COMMONLIB_VERSION = "0.1.33";

utils/setup/livesync-commonlib.ts

@@ -5,10 +5,10 @@ export {
   decodeSettingsFromSetupURI,
   encodeTimeBoundSetupURI,
   isTimeBoundSetupURIUsableNow,
-} from "npm:@vrtmrz/livesync-commonlib@0.1.32/setup-uri";
+} from "npm:@vrtmrz/livesync-commonlib@0.1.33/setup-uri";
-export type { TimeBoundSetupURIMode } from "npm:@vrtmrz/livesync-commonlib@0.1.32/setup-uri";
+export type { TimeBoundSetupURIMode } from "npm:@vrtmrz/livesync-commonlib@0.1.33/setup-uri";
-export { generateP2PRoomId } from "npm:@vrtmrz/livesync-commonlib@0.1.32/compat/common/utils";
+export { generateP2PRoomId } from "npm:@vrtmrz/livesync-commonlib@0.1.33/compat/common/utils";
-export { upsertRemoteConfigurationInPlace } from "npm:@vrtmrz/livesync-commonlib@0.1.32/remote-configurations";
+export { upsertRemoteConfigurationInPlace } from "npm:@vrtmrz/livesync-commonlib@0.1.33/remote-configurations";
 export {
   createNewVaultSettings,
   DEFAULT_SETTINGS,
@@ -16,5 +16,5 @@ export {
   PREFERRED_BASE,
   PREFERRED_JOURNAL_SYNC,
   PREFERRED_SETTING_SELF_HOSTED,
-} from "npm:@vrtmrz/livesync-commonlib@0.1.32/settings";
+} from "npm:@vrtmrz/livesync-commonlib@0.1.33/settings";
-export type { ObsidianLiveSyncSettings } from "npm:@vrtmrz/livesync-commonlib@0.1.32/settings";
+export type { ObsidianLiveSyncSettings } from "npm:@vrtmrz/livesync-commonlib@0.1.33/settings";