[martindale]

Implement the complete user story for ARCs, Relays, and Hubs.

Summary by CodeRabbit

• New Features

  • Added structured execution programs, opcode controls, contract capabilities, payment observation, withdrawals, Taproot policies, state attestations, and Bitcoin hallmarks.
  • Added contract synchronization, delivery tracking, encrypted group and onion-routed chat, blinded execution, Beacon safeguards, group governance, and safer sidechain registry patches.
  • Added interactive setup with encrypted wallets, locking, backups, restoration, and network-specific identity derivation.
  • Added wallet lock/unlock controls and expanded CLI setup options.

• Bug Fixes & Security

  • Improved authorization, signature validation, self-connection prevention, relay safety, message handling, and network compatibility checks.

• Documentation

  • Updated protocol, API, installation, security, identity, and release documentation. npm 12+ is now required.

---

Note

High Risk
Changes contract publish authorization, P2P document handling, and new Bitcoin Taproot spend paths—security-sensitive areas that affect funds and mesh trust.

Overview
Adds contract Taproot tooling (contractTaproot, tier when predicates) plus Contract / Federation toAddress / toTaprootContract so spend policies compile to deterministic P2TR ladders (failover, decay/migrate, PSBT prep). Introduces contract-scoped capability tokens (OP_CONTRACT_READ / OP_CONTRACT_SIGN), k-of-n ContractStateTip signing, and new shared CONTRACT_MESSAGE body types (group journal catch-up, capability grants, withdrawal request/witness).

Peer / wire: contract:message events now carry wireMessage / messageHex for journal attach; contract publish/patch allow-lists are tightened (wire signer must match body authority arrays; publisher no longer auto-granted). Document private relay gains _sendPrivateRelayedDocumentRequest; peeled/relayed document requests stay observe-only via delivery options. SIDECHAIN_STATE_PATCH gains optional patchesCanonical for multi-op RFC6902 fidelity; message decodeBody defaults missing optional fields.

Chores: root .npmrc allow-git=all and install reporting for npm 12+ GitHub consumers; developer docs note npm 12+ requirement.

^{Reviewed by Cursor Bugbot for commit a97e752. Configure here.}