* **New Features**
* App registry: register apps with owner signature and per-app approval
setting
* APIs to submit app versions and to list apps (filters: app_id,
owner_wallet) with pagination
* Optional owner signature path for creating app sessions when required

* **Database**
* App registry table added; app session records include version, status,
and timestamps

* **Tests & Docs**
  * Expanded tests and API docs for app registry and owner-sign flows

…ths, add tests for them (#599)

* **New Features**
* Action gateway enforcing per-action 24h allowances (scales with staked
tokens and app count).
  * Action logging and per-blockchain staking to support allowances.
  * CLI: commands to view action allowances and manage app registry.
  * New RPC/API and SDK methods to fetch a wallet's action allowances.

* **Configuration**
  * Environment-specific action gateway config and schema added.

* **Breaking Changes**
* App identifier fields renamed to application_id and app metadata now
nested under an app definition in responses.

---------

Co-authored-by: Anton Filonenko <philanton@users.noreply.github.com>

* **New Features**
* Added lifespan metrics storage, total-value-locked metric, and
active-user/app-session metrics with day/week/month windows.

* **Enhancements**
* Standardized/renamed session and channel metrics and added setters;
exporter now emits additional metrics and runs less frequently.
* Improved parsing for session and channel status inputs; expanded
intent constants.

* **Performance**
  * Added indexes to speed metric collection and aggregation.

* **Tests**
* Added comprehensive tests for metric recording, retrieval, ID
behavior, and activity counts.

---------

Co-authored-by: Anton Filonenko <philanton@users.noreply.github.com>

Bumps the gomod-dependencies group with 3 updates: [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum), [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go).


Updates `github.com/ethereum/go-ethereum` from 1.17.0 to 1.17.1
- [Release notes](https://github.com/ethereum/go-ethereum/releases)
- [Commits](ethereum/go-ethereum@v1.17.0...v1.17.1)

Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0)

Updates `go.opentelemetry.io/otel/trace` from 1.40.0 to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0)

---
updated-dependencies:
- dependency-name: github.com/ethereum/go-ethereum
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

…mples Updates, SigValidators Registration (#606)

* **New Features**
* Security token escrow: lock, relock, unlock, withdraw, approve, and
balance queries across chains (SDK & CLI)
* New CLI commands for security token management and WS URL/config
handling
  * Added "Yellow" asset support on Ethereum Sepolia
* Per-chain locking contract configuration and client support (Go/TS
SDKs)

* **Refactors**
* Reorganized blockchain client and event handling to separate
channel-hub and locking contract flows

---------

Co-authored-by: Anton Filonenko <philanton@users.noreply.github.com>

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Added an automated deployment script to deploy ChannelHub and its
associated components.

* **Chores**
* Added comprehensive deployment records and run traces across sandbox
and test networks for ChannelHub, validators, engines, session/key
validators, and premint tokens.

* **Documentation**
* Updated example and default WebSocket endpoints in docs and client
examples to point to the sandbox connection URL.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Dmytro Steblyna <dsteblyna@openware.center>

…stry, gated actions (#609)

## Summary

Reconciles `@yellow-org/sdk-compat` with `@yellow-org/sdk` v1.2.0,
adding all missing API surface and fixing several issues. Version bump:
**1.1.1 → 1.2.0** (minor, no breaking changes).

### New Compat Methods (15+)

- **Security Token Locking:** `lockSecurityTokens`,
`initiateSecurityTokensWithdrawal`, `cancelSecurityTokensWithdrawal`,
`withdrawSecurityTokens`, `approveSecurityToken`, `getLockedBalance` —
accept raw `bigint` amounts (v0.5.3 style), convert to `Decimal`
internally, with `amount > 0` validation
- **App Registry:** `getApps`, `registerApp`
- **Queries:** `getBlockchains`, `getActionAllowances`,
`getEscrowChannel`, `checkTokenAllowance`
- **Channel:** `acknowledge`
- **App Sessions:** `rebalanceAppSessions`
- **Lifecycle:** `waitForClose`

### Bug Fixes

- Fix `application` → `applicationId` field rename in `AppDefinitionV1`
(was broken against SDK v1.2.0)
- Export `OngoingStateTransitionError` from barrel + add to
`classifyError` detection
- Add `console.warn` when locking token decimals lookup falls back to
default (6)

### Improvements

- Add `ensureBlockchains()` cache to avoid redundant RPC calls in
locking methods
- Update stale `@layer-3/nitrolite` package references to
`@yellow-org/sdk` (keep old name only in v0.5.3 migration context)
- Peer dep tightened to `@yellow-org/sdk >=1.2.0`

### Files Changed

| File | Change |
|------|--------|
| `src/client.ts` | 15+ new methods, bugfixes, caching |
| `src/index.ts` | `OngoingStateTransitionError` export, package name
updates |
| `package.json` | Version bump, peer dep update |
| `README.md` | New method cheat sheet sections |
| `docs/migration-overview.md` | Package name fixes |
| `docs/migration-offchain.md` | Package name fix |
| `examples/lifecycle.ts` | Package name fix |
| `examples/tsconfig.json` | Path alias updates |

## Test Plan

- [x] `npm run typecheck` passes
- [x] `npm run build` passes
- [ ] Manual verification with clearnode sandbox

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Security token locking flows (lock, approve, initiate/cancel/withdraw,
check locked balance)
  * App registry (discover & register apps) and app session rebalancing
* New client endpoints: blockchains, token allowances, action
allowances, escrow lookup, and wait-for-close lifecycle

* **Documentation**
* Expanded README with examples, usage and amount conventions; migration
guides and examples updated to new package names

* **Behavior Changes**
* App session APIs now require quorum signatures; optional owner
signature supported

* **Chores**
  * Package bumped to 1.2.0 and peer requirement updated

* **Other**
  * Added ongoing-state-transition error type
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

- Bump @yellow-org/sdk, @yellow-org/sdk-compat, @yellow-org/sdk-mcp to 1.3.0
- Set appVersion 1.3.0 on nitronode, playground, faucet-app Helm charts

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>