@beignet/core 0.0.32 → 0.0.34

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # @beignet/core
 
+## 0.0.34
+
+### Patch Changes
+
+- 8226b4c: Isolate notification channel failures, add app-owned preference checks, provide independently retryable queued delivery through existing job dispatchers, and document the app structure for queued notification workers.
+- 9345cc9: Stabilize the pre-1.0 public surface around factory-only providers, canonical server and testing imports, consistent memory naming, and the removal of deprecated aliases.
+
+## 0.0.33
+
+### Patch Changes
+
+- 379a351: Add outbox admin ports and CLI tooling to inspect, requeue, purge, and prune durable outbox messages.
+- c909142: Add per-attempt job timeouts, app-owned job execution hooks, and a locks-backed execution lease hook across inline, outbox-inline, BullMQ, and Inngest workers.
+- c514ffc: Document the Next.js cached request-context convention separately from React
+  Query prefetching, and update generated agent guidance to use
+  `lib/server-context.ts` for shared Server Component request state.
+- ae6d7f9: Document the Next.js server prefetch convention and teach generated agent
+  guidance to preserve contract query keys while replacing server query
+  functions with direct use-case calls.
+- efe16f4: Add active tracing spans and an OpenTelemetry provider with isolated,
+  low-cardinality duration, failure, and provider-operation metrics. Background
+  providers resolve lazy contexts inside real spans, and the task CLI now runs
+  through the traced task executor.
+- 0c6c0ee: Make generated app test and database scripts package-manager neutral by using
+  `tsx`, and refresh package testing docs to avoid Bun-specific snippets.
+- 450ce71: Add opt-in runtime integrity checks for workflow registries, teach the CLI a central listener registry, and document serverless-safe boot checks.
+- 2fe26a4: Add first-class security headers and CSRF server hooks, install the security
+  headers baseline in generated apps, and warn when production apps omit it.
+- ab8b288: Refresh package-shipped skills with current tenancy and runtime-integrity conventions.
+- de3e0d2: Tighten tenant-scope enforcement in doctor and generated billing code.
+
+  `beignet doctor --strict` now detects explicit raw `tenantId` repository
+  boundaries in hand-authored Drizzle ports and checks scoped tenant/workspace
+  predicates for `tenantScopeId(scope)` drift. The payments generator now uses
+  `TenantScope` for billing tenant lookups.
+
+- 08e2d3e: Add a branded tenant scope primitive and generate tenant-scoped repositories that accept `TenantScope` instead of raw tenant IDs.
+- 4341860: Add trusted proxy request metadata helpers and wire rate-limit and CSRF hooks to the shared policy.
+- 3b0f288: Add locks-backed unique job declarations and a dispatcher wrapper that suppresses duplicate dispatches for a bounded TTL.
+- 61d9053: Harden uploads with supported content-type signature checks, optional SHA-256 checksums, and app-owned file verification hooks.
+- f263650: Harden generic webhook verification with strict unknown-event defaults and opt-in HMAC timestamp tolerance.
+
 ## 0.0.32
 
 ### Patch Changes