release: @parity/truapi 0.14.0, @parity/truapi-host 0.11.0, @parity/truapi-debugger 0.1.0, @parity/ios-host 0.14.0, @parity/android-host 0.2.0

[pgherveou]

Release: @parity/truapi 0.14.0, @parity/truapi-debugger 0.1.0, @parity/truapi-host 0.11.0, @parity/ios-host 0.14.0, @parity/android-host 0.2.0

Summary

This release ships the wire observability work. @parity/truapi gains a ./wire-decode entry point whose generated WIRE_DECODE_TABLE turns raw SCALE frame bytes into typed values, kept off the package barrel so a product bundle never pulls a decoder in, and the wire metadata marks which methods carry sensitive payloads. @parity/truapi-host gains createWorkerHostRuntime for hosting the runtime in a Web Worker and forwards the Rust core's wire tap to the debugger, off unless the host page is a dev build and the host origin's localStorage carries a ws:// loopback URL under truapi:debugger. The core restores the AuthSession slot itself at boot and reports the outcome through the auth callback, Disconnected included, so a host waits for the first authStateChanged rather than reading silence as signed out. The host CLI persists its /log level, and the signing host follows the current People chain proof contexts.

@parity/ios-host 0.14.0 tracks the protocol version and carries the regenerated UniFFI bindings for the host callbacks. @parity/android-host 0.2.0 publishes the AAR with the same core; the README pin moves with it. @parity/truapi-debugger 0.1.0 publishes for the first time. It imports @parity/truapi/wire-decode, so it could not ship against any earlier protocol release: It runs under bunx rather than npx.

Checklist

• Ran npm run changeset and selected the package + bump type (patch / minor / major)
• Ran npm run version-packages to consume the changeset
• js/packages/truapi/package.json version is bumped
• js/packages/truapi-host/package.json version is bumped when releasing the host
• The PR title includes @parity/ios-host <version> when publishing the iOS host
• Regenerated iOS bindings and container outputs are committed; CI builds and simulator-tests the XCFramework, publishes it, then commits Package.swift
• The PR title includes @parity/android-host <version> when publishing the Android host AAR; nothing in the tree records that version, so there is no manifest to bump
• @parity/truapi-host depends on ^<current @parity/truapi version>
• js/packages/truapi/CHANGELOG.md has the new entry
• js/packages/truapi-host/CHANGELOG.md has the new entry when releasing the host
• rust/crates/truapi/Cargo.toml and rust/crates/truapi-host-cli/Cargo.toml versions match js/packages/truapi/package.json (npm run check-release-versions), and Cargo.lock records them
• Releasing @parity/truapi also publishes the prebuilt truapi-host binaries; no extra title entry is needed
• No leftover files under .changeset/ (other than config.json)
• The PR title includes @parity/truapi-debugger <version> when publishing the debugger; js/packages/truapi-debugger/package.json is 0.1.0 and that tag is unpublished, so the workflow publishes rather than skips

Also in this PR

• scripts/cut-version.sh took the 0.14.0 explorer snapshot and regenerated the root CHANGELOG.md.
• android/truapi-host/README.md pins io.parity:truapi-host-android:0.2.0, the version this release publishes.