@aotter/mantle 0.1.0-alpha.12 → 0.1.0-alpha.14

package/docs/adapter-guide.md

@@ -106,6 +106,15 @@ optional `/libsql` subpath adapts a caller-owned remote Turso/libSQL client to
 the canonical SQLite chain; the default entry has no database-vendor policy.
 Vercel's read-only filesystem and writable `/tmp` are never durable state.
 
+### Browser IndexedDB embedding
+
+`@aotter/mantle-indexeddb` implements the same required semantic storage ports
+over one application-owned IndexedDB database. It keeps browser globals out of
+Runtime Core, supports declarative Views with a documented O(n) collection
+scan, and exposes `deleteDatabase()` only on the concrete adapter. The host owns
+database naming, `navigator.storage` persistence requests, active-runtime
+selection, UI invalidation, and any remote synchronization.
+
 ## HTTP and MCP surfaces
 
 The runtime is a library, not an HTTP server. A new adapter must mount equivalent framework routes:

package/docs/adr/0019-sealed-manifest-runtime-pipeline.md

@@ -2,10 +2,12 @@
 
 **Status:** Accepted
 
-**Date:** 2026-08-16; last amended 2026-08-31
+**Date:** 2026-08-16; last amended 2026-09-01
 
 **Related:** [#656](https://github.com/aotter/mantle/issues/656),
 [#662](https://github.com/aotter/mantle/issues/662),
+[#759](https://github.com/aotter/mantle/issues/759),
+[#760](https://github.com/aotter/mantle/issues/760),
 [#546](https://github.com/aotter/mantle/issues/546), ADR-0008, ADR-0009,
 ADR-0011, ADR-0018
 
@@ -106,6 +108,15 @@ Concrete D1/SQLite drivers and SQL repositories remain implementation details.
 An existing application may either pass its already-owned database/client to
 an official adapter or implement the semantic ports over its own tables.
 
+`@aotter/mantle-indexeddb` is the optional browser storage implementation of
+the same semantic ports. One adapter exclusively owns one application-selected
+database name, uses structured-clone persistence and IndexedDB transaction
+completion as its write boundary, and exposes database deletion only on the
+concrete adapter. Runtime Core gains no browser global, browser facade,
+namespace, persistence request, reactive binding, or synchronization port.
+Declarative browser Views use a documented O(n) scan until measured use proves
+an IndexedDB query planner necessary.
+
 Declarative Views compile to logical plans once. Storage preparation lowers
 those plans to native queries. The v0.1 `View.spec.sql` form remains explicitly
 SQLite-only and is rejected by unsupported storage during preparation; Mantle
@@ -123,11 +134,18 @@ select a surface and bind transport or browser lifecycle, but do not rescan raw
 manifests or maintain a second registry.
 
 `@aotter/mantle-web/webmcp` is an opt-in host binding over that projection. It
-feature-detects `document.modelContext`, registers only public View
-capabilities, invokes the existing same-origin View REST route, and uses the
-registration `AbortSignal` for teardown. It does not add browser globals to
-runtime Core, expose staff/mutating capabilities, or introduce a second
-manifest/runtime path.
+feature-detects `document.modelContext`, adds public capabilities without
+replacing existing host tools, and uses the registration `AbortSignal` only for
+teardown. A browser-local host supplies the projected capabilities and a
+late-bound invoker; Procedure calls retain their explicit MCP Trigger identity.
+For a server-backed host, the Cloudflare adapter publishes a minimal public View
+catalog at `GET /api/views`; the binding validates that wire catalog and invokes
+the existing same-origin `GET /api/views/<name>` route. The catalog contains no
+raw manifest or staff capability.
+Invocation hooks may drive host UI effects but cannot replace Runtime
+validation, authorization, dispatch, or domain results. The binding does not
+add browser globals to Runtime Core, expose staff capabilities, or introduce a
+second manifest/runtime path.
 
 ### Naming and code generation
 

package/docs/release-process.md

@@ -99,15 +99,17 @@ rollback or unpublish behavior, or deploy Landing unless
 3. Set that exact version in every workspace package and in all four agent
    plugin manifests. Set `.agents/plugins/marketplace.json` to the immutable
    `v<version>` ref.
-4. Pin both the controller and Core CI to the exact reviewed
-   `mantle-starters/develop` commit intended for this release. Do not use a
-   branch, latest tag, or inferred fallback.
+4. Pin the controller to the exact reviewed `mantle-starters/develop` and
+   `mantle-landing/develop` commits intended for this release, and Core CI to
+   the same Starter commit. Do not use a branch, latest tag, or inferred
+   fallback.
 5. If an SDK type changed, audit downstream literal constructors and exhaustive
    switches before publication. CI in Core cannot prove downstream source
    compatibility by itself.
 6. Run `pnpm check`, inspect the packed umbrella package, and run the exact
-   packed-consumer gate. Review and merge a same-repository PR into `develop`;
-   the controller rejects a direct-push release commit.
+   packed-consumer gates against both pinned Starter and Landing commits before
+   tagging. Review and merge a same-repository PR into `develop`; the
+   controller rejects a direct-push release commit.
 
 Preview the native notes before merging the release PR:
 
@@ -119,17 +121,18 @@ gh api --method POST repos/aotter/mantle/releases/generate-notes \
   --jq .body
 ```
 
-The nine public packages publish in dependency order:
+The ten public packages publish in dependency order:
 
 1. `@aotter/mantle-spec`
 2. `@aotter/mantle-admin-ui`
 3. `@aotter/mantle-runtime`
-4. `@aotter/mantle-web`
-5. `@aotter/mantle-admin`
-6. `@aotter/mantle-bun`
-7. `@aotter/mantle-vercel`
-8. `@aotter/mantle-cloudflare`
-9. `@aotter/mantle`
+4. `@aotter/mantle-indexeddb`
+5. `@aotter/mantle-web`
+6. `@aotter/mantle-admin`
+7. `@aotter/mantle-bun`
+8. `@aotter/mantle-vercel`
+9. `@aotter/mantle-cloudflare`
+10. `@aotter/mantle`
 
 The umbrella package must contain its version-matched `docs/` and `skills/`
 payload. No tarball may contain `workspace:*` dependencies, secrets, local
@@ -154,7 +157,7 @@ Before creating the Core tag, the controller proves:
 - the requested version matches every package, plugin, and marketplace ref;
 - `pnpm check` passes;
 - packed Core passes in the exact pinned Starter source;
-- all nine release tarballs exist;
+- all ten release tarballs exist;
 - npm and cross-repository credentials are present and readable;
 - a fresh version is unused across npmjs, GitHub Packages, and Starter tags;
 - the pinned Starter commit is still the remote `develop` tip.
@@ -192,7 +195,7 @@ Core repository secrets:
 
 | Secret | Minimum purpose |
 |---|---|
-| `NPM_TOKEN` | Publish the nine `@aotter/*` packages on npmjs. |
+| `NPM_TOKEN` | Publish the ten `@aotter/*` packages on npmjs. |
 | `RELEASE_FANOUT_TOKEN` | Read and dispatch `aotter/mantle-starters`; also read and dispatch `aotter/mantle-landing` only when Landing is enabled. |
 
 Core's job-scoped `GITHUB_TOKEN` creates the Core tag and release and mirrors
@@ -215,6 +218,7 @@ for p in \
   @aotter/mantle-spec \
   @aotter/mantle-admin-ui \
   @aotter/mantle-runtime \
+  @aotter/mantle-indexeddb \
   @aotter/mantle-web \
   @aotter/mantle-admin \
   @aotter/mantle-bun \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aotter/mantle",
-  "version": "0.1.0-alpha.12",
+  "version": "0.1.0-alpha.14",
   "description": "Embeddable Mantle Core umbrella with Spec and Runtime; Web, Admin, Bun, Vercel, Cloudflare, and Admin UI are optional peer packages.",
   "license": "Apache-2.0",
   "homepage": "https://mantle.tools/",
@@ -83,8 +83,8 @@
     "README.md"
   ],
   "dependencies": {
-    "@aotter/mantle-runtime": "0.1.0-alpha.12",
-    "@aotter/mantle-spec": "0.1.0-alpha.12"
+    "@aotter/mantle-spec": "0.1.0-alpha.14",
+    "@aotter/mantle-runtime": "0.1.0-alpha.14"
   },
   "peerDependencies": {
     "aws4fetch": "^1.0.20",
@@ -92,12 +92,12 @@
     "hono": "^4.12.0",
     "@libsql/client": "^0.17.4",
     "zod": "^4.5.0",
-    "@aotter/mantle-admin": "0.1.0-alpha.12",
-    "@aotter/mantle-admin-ui": "0.1.0-alpha.12",
-    "@aotter/mantle-cloudflare": "0.1.0-alpha.12",
-    "@aotter/mantle-web": "0.1.0-alpha.12",
-    "@aotter/mantle-bun": "0.1.0-alpha.12",
-    "@aotter/mantle-vercel": "0.1.0-alpha.12"
+    "@aotter/mantle-admin-ui": "0.1.0-alpha.14",
+    "@aotter/mantle-cloudflare": "0.1.0-alpha.14",
+    "@aotter/mantle-vercel": "0.1.0-alpha.14",
+    "@aotter/mantle-web": "0.1.0-alpha.14",
+    "@aotter/mantle-admin": "0.1.0-alpha.14",
+    "@aotter/mantle-bun": "0.1.0-alpha.14"
   },
   "peerDependenciesMeta": {
     "@aotter/mantle-admin": {
@@ -140,12 +140,12 @@
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
     "zod": "^4.5.4",
-    "@aotter/mantle-admin-ui": "0.1.0-alpha.12",
-    "@aotter/mantle-admin": "0.1.0-alpha.12",
-    "@aotter/mantle-bun": "0.1.0-alpha.12",
-    "@aotter/mantle-cloudflare": "0.1.0-alpha.12",
-    "@aotter/mantle-vercel": "0.1.0-alpha.12",
-    "@aotter/mantle-web": "0.1.0-alpha.12"
+    "@aotter/mantle-admin": "0.1.0-alpha.14",
+    "@aotter/mantle-admin-ui": "0.1.0-alpha.14",
+    "@aotter/mantle-bun": "0.1.0-alpha.14",
+    "@aotter/mantle-cloudflare": "0.1.0-alpha.14",
+    "@aotter/mantle-vercel": "0.1.0-alpha.14",
+    "@aotter/mantle-web": "0.1.0-alpha.14"
   },
   "engines": {
     "node": ">=22"