release: @parity/truapi 0.14.0, @parity/truapi-host 0.11.0, @parity/truapi-debugger 0.1.0, @parity/ios-host 0.14.0, @parity/android-host 0.2.0

CHANGELOG.md

@@ -5,10 +5,32 @@ All notable changes to the TrUAPI protocol are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 generated from [Conventional Commits](https://www.conventionalcommits.org/).
 
+## [0.14.0] - 2026-09-04
+
+### Added
+
+- wire trace engine, standalone inspector, and in-app panel (#536)
+- payload-blind wire-debug tap, sinks, and the codegen decode surface (#295)
+- persist /log level (#583)
+
+### Changed
+
+- speed up UniFFI binding generation (#590)
+
+### Fixed
+
+- adopt current People proof contexts (#587)
+- announce the boot auth state after the initial session restore (#571)
+
 ## [0.13.1] - 2026-09-02
 
+### Changed
+
+- @parity/truapi 0.13.1, @parity/truapi-host 0.10.1, @parity/ios-host 0.13.1 (#581)
+
 ### Fixed
 
+- strip the provider xcframework modulemaps (#553)
 - resolve the dotNS controller whether the gateway stores a dispatcher or the controller (#564)
 - follow previewnet and paseo-next-v2 through their wipes (#579)
 - read Resources parameters through view functions (#577)

android/truapi-host/README.md

@@ -28,7 +28,7 @@ dependencyResolutionManagement {
 ```kotlin
 // app/build.gradle.kts
 dependencies {
-    implementation("io.parity:truapi-host-android:0.1.0")
+    implementation("io.parity:truapi-host-android:0.2.0")
 }
 ```
 

js/packages/truapi-debugger/README.md

@@ -138,6 +138,28 @@ target are rejected — and `localhost` passes that check but resolves `::1` fir
 on macOS, while the server binds `127.0.0.1` alone. A native host then dials an
 address nothing is listening on and logs nothing.
 
+## Enable the dial in a web host
+
+A browser host reads its debugger URL from `localStorage`:
+
+```js
+localStorage.setItem("truapi:debugger", "ws://127.0.0.1:9231");
+```
+
+Two things have to hold for that key to be read at all:
+
+- **The bundle must be a development build.** The gate is the literal
+  `import.meta.env.DEV`, so a production bundle compiles the dial out and a stray
+  key does nothing. `vite build` defaults to production mode, so build the host
+  with `NODE_ENV=development` to keep the dial in.
+- **The key is per-origin and per-browser-profile.** A key set on
+  `http://localhost:5173` is invisible to a host served from any other origin,
+  and invisible to a different browser profile on the same origin.
+
+The host reports which of those failed rather than going quiet: `production-build`
+when the gate compiled the dial out, `production-build-switch-set` when the key is
+set but the gate is still off. Read the host console before suspecting the server.
+
 For the in-app mount, feed frames straight to the session:
 
 ```ts

js/packages/truapi-debugger/package.json

@@ -15,6 +15,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "default": "./dist/server.js"
     }
   },
   "files": [
@@ -33,6 +37,25 @@
     "typescript": "^6.0"
   },
   "dependencies": {
-    "@parity/truapi": "^0.13.1"
-  }
+    "@parity/truapi": "^0.14.0"
+  },
+  "bin": {
+    "truapi-debugger": "dist/server.js"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/paritytech/host-rust-core.git",
+    "directory": "js/packages/truapi-debugger"
+  },
+  "homepage": "https://github.com/paritytech/host-rust-core/tree/main/js/packages/truapi-debugger",
+  "bugs": {
+    "url": "https://github.com/paritytech/host-rust-core/issues"
+  },
+  "keywords": [
+    "truapi",
+    "polkadot",
+    "debugger",
+    "wire",
+    "devtools"
+  ]
 }

js/packages/truapi-debugger/src/server.ts

@@ -1,3 +1,4 @@
+#!/usr/bin/env bun
 /**
  * The runnable debugger app: the WS server a host dials into, plus a minimal
  * trace view.

js/packages/truapi-host/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @parity/truapi-host
 
+## 0.11.0
+
+### Minor Changes
+
+- Add `createWorkerHostRuntime` for hosting the runtime in a Web Worker, and forward the Rust core's wire tap to the debugger. The dial is off unless the host page is a dev build and the host origin's `localStorage` carries a `ws://` loopback URL under `truapi:debugger`; anything else is rejected as an inert link. At boot the core now restores the `AuthSession` slot itself and reports the outcome through the `auth` callback, `Disconnected` included, so a host waits for the first `authStateChanged` instead of reading silence as signed out.
+
+### Patch Changes
+
+- Updated dependencies
+  - @parity/truapi@0.14.0
+
 ## 0.10.1
 
 ### Patch Changes

js/packages/truapi-host/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parity/truapi-host",
-  "version": "0.10.1",
+  "version": "0.11.0",
   "description": "WASM-backed TrUAPI host runtime: embeds the Rust core, with web iframe and Web Worker entry points",
   "license": "MIT",
   "author": "Parity Technologies <admin@parity.io>",
@@ -49,7 +49,7 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@parity/truapi": "^0.13.1"
+    "@parity/truapi": "^0.14.0"
   },
   "devDependencies": {
     "@types/bun": "^1.3.0",

js/packages/truapi/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @parity/truapi
 
+## 0.14.0
+
+### Minor Changes
+
+- Add the `@parity/truapi/wire-decode` entry point: a generated `WIRE_DECODE_TABLE` that turns raw SCALE frame bytes into typed values. It sits on its own subpath rather than the package barrel, so importing `@parity/truapi` never pulls a decoder into a product bundle, and the product transport keeps no debug seam of its own. The wire metadata also marks which methods carry sensitive payloads.
+
 ## 0.13.1
 
 ### Patch Changes

js/packages/truapi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parity/truapi",
-  "version": "0.13.1",
+  "version": "0.14.0",
   "description": "TrUAPI TypeScript transport, SCALE codecs, and generated API client",
   "license": "MIT",
   "author": "Parity Technologies <admin@parity.io>",