feat(wallet-toolbox): add BRC-177 noSend expiry

docs/about/contributing.md

@@ -4,7 +4,7 @@ title: 'Contributing'
 kind: meta
 version: '2.0.0'
 last_updated: '2026-07-30'
-last_verified: '2026-07-30'
+last_verified: '2026-08-30'
 review_cadence_days: 30
 status: stable
 tags: [about, contributing, development, community]

docs/about/doc-agent.md

@@ -4,7 +4,7 @@ title: 'Documentation Maintenance'
 kind: meta
 version: '2.1.0'
 last_updated: '2026-07-30'
-last_verified: '2026-07-30'
+last_verified: '2026-08-30'
 review_cadence_days: 30
 status: stable
 tags: [about, documentation, maintenance, automation]

docs/infrastructure/service-edge-security.md

@@ -4,7 +4,7 @@ title: 'Public Service Edge Security'
 kind: reference
 version: '1.0.0'
 last_updated: '2026-07-30'
-last_verified: '2026-07-30'
+last_verified: '2026-08-30'
 review_cadence_days: 30
 status: stable
 tags: [infrastructure, security, cors, rate-limits, authentication, operations]

docs/packages/wallet/wallet-toolbox-client.md

@@ -3,9 +3,9 @@ id: pkg-wallet-toolbox-client
 title: '@bsv/wallet-toolbox-client'
 kind: package
 domain: wallet
-version: '2.10.4'
-last_updated: '2026-08-26'
-last_verified: '2026-08-26'
+version: '2.11.0'
+last_updated: '2026-08-31'
+last_verified: '2026-08-31'
 review_cadence_days: 30
 npm: 'https://www.npmjs.com/package/@bsv/wallet-toolbox-client'
 repo: 'https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox/client'
@@ -18,6 +18,10 @@ tags: [wallet, browser, indexeddb, storage, brc-100]
 `@bsv/wallet-toolbox-client` is the browser-safe Wallet Toolbox distribution.
 It includes the BRC-100 wallet, signer, services, IndexedDB storage, and remote
 storage client without Node-only Knex, SQLite, MySQL, or filesystem adapters.
+The built-in BRC-177 `p nosend expiry` module works with local IndexedDB or a
+2.11-compatible remote storage service; the active provider owns durable
+expiry monitoring, synchronized lifecycle state, and pre-signed reclaim
+submission.
 IndexedDB `listOutputs` results keep `totalOutputs` equal to the full matching
 count across short final and out-of-range pages.
 Related browser `noSend` chains retain local action batching, while unrelated

docs/packages/wallet/wallet-toolbox-mobile.md

@@ -3,9 +3,9 @@ id: pkg-wallet-toolbox-mobile
 title: '@bsv/wallet-toolbox-mobile'
 kind: package
 domain: wallet
-version: '2.10.4'
-last_updated: '2026-08-26'
-last_verified: '2026-08-26'
+version: '2.11.0'
+last_updated: '2026-08-31'
+last_verified: '2026-08-31'
 review_cadence_days: 30
 npm: 'https://www.npmjs.com/package/@bsv/wallet-toolbox-mobile'
 repo: 'https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wallet-toolbox/mobile'
@@ -18,6 +18,10 @@ tags: [wallet, react-native, mobile, storage, brc-100]
 `@bsv/wallet-toolbox-mobile` is the React Native and mobile-safe Wallet
 Toolbox distribution. It includes wallet, signer, services, monitoring, and
 remote storage surfaces without Knex, SQLite/MySQL, IndexedDB, or Node-only IO.
+The built-in BRC-177 `p nosend expiry` module delegates durable expiry
+monitoring and pre-signed reclaim submission to its 2.11-compatible active
+remote storage service, so mobile process suspension does not restart or lose
+an expiry.
 Related mobile `noSend` chains retain local action batching, while unrelated
 actions cannot join or commit the active workspace. Supported remote providers
 can resume a soft-expired workspace using its exact persisted inputs.

docs/packages/wallet/wallet-toolbox.md

@@ -4,9 +4,9 @@ title: '@bsv/wallet-toolbox'
 kind: package
 domain: wallet
 npm: '@bsv/wallet-toolbox'
-version: '2.10.4'
-last_updated: '2026-08-26'
-last_verified: '2026-08-26'
+version: '2.11.0'
+last_updated: '2026-08-31'
+last_verified: '2026-08-31'
 review_cadence_days: 30
 status: stable
 tags: ['wallet', 'brc100']
@@ -19,6 +19,12 @@ repo: 'https://github.com/bsv-blockchain/ts-stack/tree/main/packages/wallet/wall
 
 Use this package when you are building a wallet product, a wallet-like service, or another implementation that must match BRC-100 behavior.
 
+Wallet Toolbox 2.11 adds the built-in BRC-177 `p nosend expiry` module. It
+pre-funds expiring `noSend` actions, stores a signed reclaim durably across
+active/backup storage and restarts, and lets the authoritative local or remote
+monitor reclaim an unbroadcast action after its time or block-height deadline.
+See [Expiring noSend actions](https://github.com/bsv-blockchain/ts-stack/blob/main/packages/wallet/wallet-toolbox/docs/no-send-expiry.md).
+
 Knex and IndexedDB `listOutputs` providers report `totalOutputs` as the full
 matching count on every page, including short final and out-of-range pages.
 

docs/reference/ci-performance.md

@@ -4,7 +4,7 @@ title: 'CI Performance Governance'
 kind: reference
 version: '1.1.0'
 last_updated: '2026-07-31'
-last_verified: '2026-07-31'
+last_verified: '2026-08-30'
 review_cadence_days: 30
 status: stable
 tags: [reference, ci, performance, github-actions]

docs/reference/dependency-policy.md

@@ -2,9 +2,9 @@
 id: dependency-release-policy
 title: 'Dependency and Release Policy'
 kind: reference
-version: '1.3.0'
-last_updated: '2026-08-04'
-last_verified: '2026-08-04'
+version: '1.3.1'
+last_updated: '2026-08-30'
+last_verified: '2026-08-30'
 review_cadence_days: 30
 status: stable
 tags: [reference, dependencies, security, releases]
@@ -139,15 +139,13 @@ frozen graph stayed clean without it. The machine-readable registry now maps
 every remaining selector and exact value to its exception. CI rejects a new,
 changed, stale, expired, unowned, or upstream-unlinked override.
 
-Wave 39 repeated the removal rehearsal by regenerating every standalone lock
-without its `gaxios`, `uuid`, and `brace-expansion` substitutions and checking
-the natural dependency graph. It also rechecked the root Jest/minimatch,
-typed-rest-client/qs, and isolated Redocly closures, then refreshed affected
-locks for the current `brace-expansion`, `fast-uri`, `ip-address`, and
-`socket.io-parser` advisories. All 19 remaining selectors still prevent a
-reproduced vulnerable resolution or preserve the governed reproducible
-generator, so none can be removed safely yet. The method, result, count, and next rehearsal are enforced in
-`governance/dependency-release-policy.json`.
+Wave 40 rechecked all 20 selectors against the frozen graphs, current upstream
+manifests, and the advisory audit. The supported graphs still select exact
+`gaxios@7.1.3`, admit `uuid@9`, and pin `qs@6.15.1` without their registered
+substitutions. New upstream majors can remove some legacy paths only through a
+coordinated Stryker or Google Cloud migration, so no selector can be removed
+safely in isolation. The method, result, count, and next rehearsal are enforced
+in `governance/dependency-release-policy.json`.
 
 The independently locked OpenAPI generator also carries a narrow Redocly
 compatibility override. It is isolated from runtime packages, registered with

docs/reference/index.md

@@ -4,7 +4,7 @@ title: 'Reference'
 kind: meta
 version: 'n/a'
 last_updated: '2026-07-29'
-last_verified: '2026-07-29'
+last_verified: '2026-08-30'
 review_cadence_days: 30
 status: stable
 tags: [reference, api, index]