@basictech/react 0.8.0-beta.4 → 0.9.0-beta.1

package/changelog.md

@@ -1,5 +1,70 @@
 # 1.3.4
 
+## 0.9.0-beta.1
+
+### Minor Changes
+
+Local-first startup, anonymous mode, and multiple users.
+
+- **Anonymous mode (default on):** the local database works without a
+  session — writes queue as ordinary ops in a local-only workspace (sync
+  status `local`) and merge into the account automatically on sign-in via
+  the normal bootstrap+flush path (deferred identity — no copy step). Set
+  `anonymous={false}` on the provider for classic sign-in-required behavior.
+- **Offline cold start fixed:** the engine opens the local keyspace with no
+  token and no network (`openLocal()`), so reloading offline serves all data
+  from the replica; the connection acquires tokens with retry on its own.
+  `reauth_required` now *pauses* the connection instead of stopping the
+  engine — local reads/writes keep working while the user re-authenticates.
+- **Multiple users:** several local users (anonymous or signed-in) side by
+  side with per-tab switching. New `useUsers()` hook
+  (`users`, `activeUser`, `switchUser`, `addUser`, `removeUser`), profile
+  registry in localStorage, per-user auth storage namespacing and isolated
+  sync keyspaces (`basic-sync:{project}:{userId}`). Existing single-user
+  sessions are adopted as the first profile automatically.
+- **Owner guard:** keyspaces are stamped with the account DID at bootstrap;
+  local data from one account can never merge into another (a mismatched
+  keyspace is wiped before bootstrap). Also fixes a latent leak where
+  unpushed ops could survive an account change.
+- **User-aware `useQuery`:** the active user id is appended to query deps
+  automatically so live queries re-attach on user switches; in-flight
+  queries hitting a closing store during the switch return undefined and
+  re-run.
+- `signOut()` now wipes the active user's data and falls through to the next
+  local user (or a fresh anonymous workspace); `useAuth()` exposes
+  `isAnonymous`; sync status gains `local`.
+
+## 0.9.0-beta.0
+
+### Major Changes (breaking)
+
+Ground-up rewrite for the server's Sync/2 sync engine and Step 2 auth upgrade.
+The legacy dexie-syncable `/ws` protocol was removed server-side (clean
+break), so 0.8.x sync no longer works against production.
+
+- **New sync engine** (`core/sync/`): implements the Sync/2 client contract
+  (SYNC_V2.md) — snapshot bootstrap, multiplexed WebSocket subscriptions,
+  client-minted idempotent ops (`put`/`patch`/`delete`), persisted pending
+  queue with optimistic rebase, ordered apply with echo confirmation,
+  poison-op handling for terminal rejections, and re-bootstrap recovery
+  (`SNAPSHOT_REQUIRED`/`RESET_REQUIRED`). Local persistence is plain Dexie
+  (dexie-syncable/dexie-observable removed).
+- **New public API**: `db.table(name)` with `create/put/patch/delete/get/
+  getAll/find`; `useAuth`, `useDb`, `useSyncStatus`, `useShares`, `useShare`;
+  `useBasic` remains the umbrella hook. `useQuery` still provides live reads.
+- **Shares v1**: list shares and mount shared data via `useShare(shareId)` —
+  separate local keyspace per mount, guest writes when permitted, revocation
+  handling.
+- **Auth updates**: `signOut()` revokes server-side via `POST /auth/logout`;
+  sign-out (incl. cross-tab) tears down local data without page reloads;
+  token-endpoint 429s are treated as transient; `CONNECTION_REVOKED` from
+  sync triggers session reconciliation.
+- **REST mode**: `mode="rest"` replaces `dbMode="remote"`, backed by the
+  REST v2 surface (`/account/:project_id/db/...`), including
+  snapshot/changes endpoints.
+- Tests: vitest unit suite + integration suite against the Sync/2 reference
+  server (`basic-server/sync-playground`).
+
 ## 0.8.0-beta.4
 
 ### Patch Changes