chore[notask]: move Holepunch libs to peerDependencies by yuranich · Pull Request #1905 · tetherto/qvac

yuranich · 2026-05-05T15:00:45Z

What problem does this PR solve?

@qvac/registry-client, @qvac/rag, and @qvac/registry-schema declared Holepunch singleton libraries (hyperswarm, corestore, hyperdb, hyperblobs, hyperdht) as hard dependencies while the SDK declared them as peerDependencies. Range drift between these declarations (e.g. SDK hyperswarm ^4.12.1 vs registry-client ^4.14.0) caused npm to install duplicate copies of stateful singletons in consumer trees — separate DHT nodes, separate corestores, broken connectivity.

How does it solve it?

Reclassify Holepunch singletons as peerDependencies in the three internal packages; mirror in devDependencies so packages still build and test in isolation.
Bump SDK peerDependencies.hyperswarm floor ^4.12.1 → ^4.14.0; add hyperblobs (required) and hyperdht (optional) to SDK peers so the SDK manifest is the single source of truth for every Holepunch singleton range.
Keep ready-resource as a hard dep — generic base class, not a stateful singleton.
Mark hyperdht optional in @qvac/rag (currently unused at runtime; reserved for the unwired replicateWith path).

Skips @qvac/dl-hyperdrive (being phased out, zero in-repo runtime consumers). SDK overrides removal was already done as fallout from QVAC-14392.

Install note

@qvac/sdk consumers and any tooling that auto-installs required peers (npm 7+, pnpm, bun) are unaffected — the peers resolve transparently. Direct standalone consumers of @qvac/registry-client using yarn or legacy-peer-deps=true will see missing-peer warnings and need to add corestore, hyperblobs, hyperdb, and hyperswarm to their own dependencies.

How was it tested?

@qvac/registry-client unit tests: 19/19 pass.
@qvac/rag unit tests: 104/104 pass.
@qvac/sdk bun run typecheck: clean.
Phase 4 acceptance: packages/sdk/node_modules contains exactly one copy each of hyperswarm@4.17.0, corestore@7.9.2, hyperdb@4.22.3, hyperblobs@2.11.1, hyperdrive@13.3.2, hyperdht@6.31.0.

Co-authored-by: Cursor <cursoragent@cursor.com>

yuranich · 2026-05-06T14:00:49Z

/review

github-actions · 2026-05-06T17:17:25Z

Tier-based Approval Status

**PR Tier:** TIER1

**Current Status:** ✅ APPROVED

**Requirements:**
- 1 Team Member approval ✅ (1/1)
- 1 Team Lead OR Management approval ✅ (1/1)



---
*This comment is automatically updated when reviews change.*

yuranich · 2026-05-06T17:28:19Z

/review

yuranich · 2026-05-07T06:17:09Z

/review

Move hyperdb from dependencies to peerDependencies (tetherto#1905). Minor bump so 0.x ^-ranges don't auto-promote — install contract changed for standalone yarn-1 / legacy-peer-deps consumers. Co-authored-by: Cursor <cursoragent@cursor.com>

Move hyperdb from dependencies to peerDependencies (#1905). Minor bump so 0.x ^-ranges don't auto-promote — install contract changed for standalone yarn-1 / legacy-peer-deps consumers.

Move corestore, hyperblobs, hyperdb, hyperswarm from dependencies to peerDependencies (#1905). Bump @qvac/registry-schema to ^0.2.0 to pull in its matching peers-cleaned release. Minor bump so 0.x ^-ranges don't auto-promote — install contract changed for standalone yarn-1 / legacy-peer-deps consumers. Co-authored-by: Cursor <cursoragent@cursor.com>

Pulls in the peers-cleaned registry-client release (#1905, #2035) so hyperswarm, corestore, hyperdb, hyperblobs are not duplicated in consumer apps. Pairs with the @qvac/rag@^0.5.0 bump already on main from #2011. Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Dmytro Medvinskyi <functionsilence@gmail.com>

Move hyperdb from dependencies to peerDependencies (#1905). Minor bump so 0.x ^-ranges don't auto-promote — install contract changed for standalone yarn-1 / legacy-peer-deps consumers. (cherry picked from commit d5f5723)

Move corestore, hyperblobs, hyperdb, hyperswarm from dependencies to peerDependencies (#1905). Bump @qvac/registry-schema to ^0.2.0 to pull in its matching peers-cleaned release. Minor bump so 0.x ^-ranges don't auto-promote — install contract changed for standalone yarn-1 / legacy-peer-deps consumers. (cherry picked from commit 9229cdc) Co-authored-by: Cursor <cursoragent@cursor.com>

Move corestore, hyperblobs, hyperdb, hyperswarm from dependencies to peerDependencies (#1905). Bump @qvac/registry-schema to ^0.2.0 to pull in its matching peers-cleaned release. Minor bump so 0.x ^-ranges don't auto-promote — install contract changed for standalone yarn-1 / legacy-peer-deps consumers. Co-authored-by: Cursor <cursoragent@cursor.com>

Move hyperdb from dependencies to peerDependencies (#1905). Minor bump so 0.x ^-ranges don't auto-promote — install contract changed for standalone yarn-1 / legacy-peer-deps consumers.

* chore[bc]: move Holepunch libs to peerDependencies * chore: add hyperblobs and hyperdht to SDK peerDependencies

Pulls in the peers-cleaned registry-client release (#1905, #2035) so hyperswarm, corestore, hyperdb, hyperblobs are not duplicated in consumer apps. Pairs with the @qvac/rag@^0.5.0 bump already on main from #2011. Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Dmytro Medvinskyi <functionsilence@gmail.com>

Move hyperdb from dependencies to peerDependencies (#1905). Minor bump so 0.x ^-ranges don't auto-promote — install contract changed for standalone yarn-1 / legacy-peer-deps consumers. (cherry picked from commit bb5519a)

Move corestore, hyperblobs, hyperdb, hyperswarm from dependencies to peerDependencies (#1905). Bump @qvac/registry-schema to ^0.2.0 to pull in its matching peers-cleaned release. Minor bump so 0.x ^-ranges don't auto-promote — install contract changed for standalone yarn-1 / legacy-peer-deps consumers. (cherry picked from commit c133b64) Co-authored-by: Cursor <cursoragent@cursor.com>

yuranich requested a review from a team as a code owner May 5, 2026 15:00

yuranich had a problem deploying to release May 5, 2026 15:01 — with GitHub Actions Failure

yuranich had a problem deploying to release May 5, 2026 15:28 — with GitHub Actions Failure

yuranich had a problem deploying to release May 5, 2026 15:40 — with GitHub Actions Failure

yuranich and others added 2 commits May 6, 2026 11:25

chore[bc]: move Holepunch libs to peerDependencies

69d6479

Co-authored-by: Cursor <cursoragent@cursor.com>

chore: add hyperblobs and hyperdht to SDK peerDependencies

728d4db

Co-authored-by: Cursor <cursoragent@cursor.com>

yuranich force-pushed the feat/td-holepunch-peer-deps branch from 9dd7a88 to 728d4db Compare May 6, 2026 05:25

yuranich had a problem deploying to release May 6, 2026 05:25 — with GitHub Actions Failure

yuranich had a problem deploying to release May 6, 2026 05:32 — with GitHub Actions Failure

yuranich had a problem deploying to release May 6, 2026 05:36 — with GitHub Actions Failure

yuranich changed the title ~~chore[bc|notask]: move Holepunch libs to peerDependencies~~ chore[notask]: move Holepunch libs to peerDependencies May 6, 2026

yuranich had a problem deploying to release May 6, 2026 05:56 — with GitHub Actions Failure

yuranich added verify safe-to-test Reviewer has verified safety of packages & github actions in this PR labels May 6, 2026

yuranich had a problem deploying to release May 6, 2026 06:00 — with GitHub Actions Failure

simon-iribarren approved these changes May 6, 2026

View reviewed changes

NamelsKing approved these changes May 6, 2026

View reviewed changes

Merge branch 'main' into feat/td-holepunch-peer-deps

2708f2a

yuranich added the tier1 label May 6, 2026

yuranich had a problem deploying to release May 6, 2026 14:01 — with GitHub Actions Failure

yuranich temporarily deployed to release May 6, 2026 14:01 — with GitHub Actions Inactive

yuranich temporarily deployed to release May 6, 2026 17:28 — with GitHub Actions Inactive

opaninakuffo approved these changes May 6, 2026

View reviewed changes

Merge branch 'main' into feat/td-holepunch-peer-deps

1f6b5c7

yuranich had a problem deploying to release May 7, 2026 06:17 — with GitHub Actions Failure

yuranich merged commit 2b9a0cb into tetherto:main May 7, 2026
23 of 25 checks passed

yuranich had a problem deploying to release May 7, 2026 06:20 — with GitHub Actions Failure

opaninakuffo mentioned this pull request May 8, 2026

QVAC-18674 chore[skiplog]: rag v0.5.0 release, changelog & NOTICE #1954

Merged

This was referenced May 13, 2026

chore[notask|skiplog]: release @qvac/registry-schema v0.2.0 #2034

Merged

chore[notask|skiplog]: release @qvac/registry-client v0.5.0 #2035

Merged

yuranich mentioned this pull request May 15, 2026

fix[notask]: bump @qvac/registry-client to ^0.5.0 in SDK #2076

Merged

This was referenced May 15, 2026

chore[skiplog|notask]: backmerge release-qvac-registry-schema-0.2.0 — version bump & changelog #2078

Merged

chore[skiplog|notask]: backmerge release-qvac-registry-client-0.5.0 — version bump & changelog #2079

Merged

yuranich mentioned this pull request May 16, 2026

fix[notask]: bump drifted peer ranges + trim redundant SDK peer entries #2089

Merged

opaninakuffo mentioned this pull request May 19, 2026

QVAC-19141 fix: drop SDK peerDependencies; enforce in CI #2126

Merged

Proletter pushed a commit that referenced this pull request May 24, 2026

chore[notask]: move Holepunch libs to peerDependencies (#1905)

cd0a0df

* chore[bc]: move Holepunch libs to peerDependencies * chore: add hyperblobs and hyperdht to SDK peerDependencies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore[notask]: move Holepunch libs to peerDependencies#1905

chore[notask]: move Holepunch libs to peerDependencies#1905
yuranich merged 5 commits into
tetherto:mainfrom
yuranich:feat/td-holepunch-peer-deps

yuranich commented May 5, 2026 •

edited

Loading

Uh oh!

yuranich commented May 6, 2026

Uh oh!

github-actions Bot commented May 6, 2026 •

edited

Loading

Uh oh!

yuranich commented May 6, 2026

Uh oh!

yuranich commented May 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

yuranich commented May 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What problem does this PR solve?

How does it solve it?

Install note

How was it tested?

Uh oh!

yuranich commented May 6, 2026

Uh oh!

github-actions Bot commented May 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Tier-based Approval Status

Uh oh!

yuranich commented May 6, 2026

Uh oh!

yuranich commented May 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

yuranich commented May 5, 2026 •

edited

Loading

github-actions Bot commented May 6, 2026 •

edited

Loading