BitcoinTX v1.2.5

[DigiMonk73]

Hello Start9 team,

This is BitcoinTX 1.2.5, package 1.2.5:0: the next release after your community audit (#1). It builds on your merge (8c030d8) with one sync commit, so this pull request shows only our changes. Everything from your review is kept as you wrote it.

What changes in the package

• Version: 1.2.5:0, image ghcr.io/digimonk73/btctx-mcp:v1.2.5 (published, amd64 and arm64).
• Version graph: 1.2.4:1's migration (clearing the retired btctx:show-credentials task) moves unchanged to startos/versions/v1.2.4_1.ts and is added to other, per the packaging guide's versions.md: a version that carries a migration keeps it. The new current.ts has an empty up and down: IMPOSSIBLE. Checked with SDK 2.0.9's VersionGraph:
  • 1.2.4:0 and older run v1.2.4_1's up, then current's;
  • 1.2.4:1 runs current's only;
  • a fresh install runs none.
• Release notes in en_US, es_ES, de_DE, pl_PL and fr_FR, using the action names from translations.ts.
• Docs: AGENTS.md, TODO.md and UPDATING.md now describe how we work today (changes reach develop by pull request, to-dos are GitHub issues). Only the outdated lines changed; your structure stays.

No change to actions, interfaces, volumes, dependencies or the i18n dictionaries.

What changes in the app (1.2.5)

• A preview of the 2026 tax forms: the IRS drafts, marked "DRAFT — DO NOT FILE", until the end of 2026.
• A redesigned Complete Tax Report, with the same figures.
• The Transaction History as a PDF from Reports.
• A close button on the transaction panel on phones.
• Every shipped Python package locked with hashes.

No database migration (schema 0005, as in 1.2.4).

Release notes (en_US, as StartOS shows them)

BitcoinTX 1.2.5 brings a preview of the 2026 tax forms. Until the IRS publishes the final ones, Reports offers 2026 filled in on the IRS's draft Form 8949 and Schedule D, marked "DRAFT — DO NOT FILE" on every page: use them to check your figures, never to file. The preview ends by itself at the end of 2026; the final forms come in an update. On a phone, the panel for adding or editing a transaction now has a close button (✕). The Complete Tax Report is redesigned, with the same figures: a cover with the year's key figures, a one-page summary showing each Form 8949 box with its Schedule D line, and clearer tables with totals; its almost always empty "Expenses" section is gone. Reports also offers the Transaction History as a PDF (choose the format), now fitting the page. Every component BitcoinTX is built from is now locked to an exact, verified version. Coming from 1.2.4:0 or earlier? Set Login Credentials replaces Show Credentials and Reset Login Credentials: it makes a new password and shows it once. Your login stays; only if StartOS keeps no password for you, stop BitcoinTX and run Set Login Credentials before starting it again; it replaces any username and password you set inside BitcoinTX. Coming from 1.2.1 or earlier? After updating, open Settings > Ledger Review in BitcoinTX, and if it lists figures a recalculation would change, run Recalculate Ledger. Everything: https://github.com/DigiMonk73/BTCTX-MCP/blob/main/docs/CHANGELOG.md

How it was tested

• npm run check, npm run lint, npm run build, check-manifest (btctx 1.2.5:0) and prettier --check.
• Our full CI is green: Python tests, click-through tests in Chromium and WebKit, the Docker image, an x86_64 pack, and the macOS build.
• On a StartOS 0.4.0.1 test VM (aarch64), with an s9pk built from the release commit, 27 tests passed and 0 failed:
  • updates from 1.2.4:0 (with its Show Credentials task still pending: cleared) and from 1.2.4:1, with every stored figure and report identical;
  • a downgrade to 1.2.4 refused;
  • a fresh install: Set Login Credentials critical, start refused until the login exists, then healthy;
  • the 2026 draft forms with "DRAFT — DO NOT FILE" on every page;
  • the redesigned report;
  • the AI-key refusals, the MCP connector, Recalculate Ledger;
  • public prices over Tor.

Full release: https://github.com/DigiMonk73/BTCTX-MCP/releases/tag/v1.2.5 · CHANGELOG: https://github.com/DigiMonk73/BTCTX-MCP/blob/main/docs/CHANGELOG.md

Thank you for the review and for hosting BitcoinTX.

— DigiMonk73

🤖 Prepared with Claude Code

[MattDHill]

Heads-up: the SDK 3.0.3 migration (#3) touches the same files and will merge first. After it lands, please rebase this onto main: keep your 1.2.5:0 bump, and carry the migration's two new release-note sentences into 1.2.5:0's notes (1.2.4:1 never reached community-prod, so its notes still count). Note the check/build npm scripts are gone — the SDK supplies the toolchain, so CI should run make javascript/index.js — and TODO.md is removed per the package template. Thanks for the 1.2.5 update.

[DigiMonk73]

Thanks, Matt. Done: the mirror's main now contains your #3, with 1.2.5:0 on start-sdk 3.0.3 on top. It's a merge rather than a rebase, because our mirror's main is protected against force-pushes; the diff against your main is only our 1.2.5 changes (7 files). 1.2.5:0's notes carry #3's two sentences in all five languages. Upstream, CI runs make javascript/index.js with start-cli 2.3.0, and TODO.md is gone. Tested on StartOS 0.4.0.2: an update from 1.2.4:0 with the ledger unchanged, a fresh install, the actions, and the dependencies following the price source.

— Claude

[helix-a]

Reviewed 76848ac against current main; it merges cleanly. No correctness regressions found. The 1.2.4:1 cleanup migration is preserved, and 1.2.5:0 retains both SDK-migration release-note additions in all five locales. SDK 3.0.3 matches the current npm release.

Executed the production version graph with SDK 3.0.3 and mocked effects: 12 upgrade/fresh-install and reinitialization cases passed, including exactly-once retired-task cleanup below 1.2.4:1; all ten downgrade targets were rejected without effects.

Verified the v1.2.5 image resolves for linux/amd64 and linux/arm64, with source-revision VERSION matching 1.2.5. Reused successful CI run 37783908339 for this head: typecheck, formatting, bundling, and actual x86/ARM package builds. No duplicate package build or VM run; CI does not establish lint success.

Helix-Harness: pi
Helix-Model: openai-codex/gpt-6.1-sol

[MattDHill]

Thanks, DigiMonk73 — merging.