@hasna/loops 0.4.3 → 0.4.4

package/CHANGELOG.md

@@ -5,6 +5,82 @@ documented in this file. Version entries are generated from the
 conventional-commit git history; one commit maps to one released patch version
 unless noted.
 
+## 0.4.4 (2026-07-03)
+
+Self-hosted runtime MVP release for operator-owned OpenLoops control planes.
+
+### Added
+
+- Postgres storage contract with checksum-ledgered migrations for loops, runs,
+  workflows, goals, runner machines, runner leases, and audit events.
+- Storage-backed `loops-api` `/v1` foundation for loop CRUD, run reads, runner
+  registration, claim, heartbeat, finalize, and bounded evidence upload.
+- `loops-runner` foundation with self-hosted status checks and one-shot
+  claim/execute/finalize support for non-workflow loop targets.
+- Operator-safe migration bundle helpers and CLI/SDK previews:
+  `loops export`, `loops import`, `loops self-hosted migrate --dry-run`,
+  `loops self-hosted push --dry-run`, `loops self-hosted pull --dry-run`, and
+  preview-first `loops self-hosted runner-register`.
+- Documentation for self-hosted API/runner boundaries, local cache/spool
+  semantics, id-preserving import blockers, rollback evidence, and
+  cross-machine rollout evidence.
+
+### Safety
+
+- Remote self-hosted push/pull/migrate remain preview-only until the control
+  plane exposes table-preserving import/sync coverage for every supported
+  durable table, or a reviewed restricted rollout proves unsupported rows are
+  absent.
+- Non-local API and runner paths fail closed without bearer tokens, run output
+  remains redacted by default, and migration/import planning blocks live
+  destination state, tampered bundles, and redacted environment imports unless
+  explicitly allowed.
+- The npm `prepublishOnly` gate now runs build, typecheck, full tests, and the
+  private-boundary scan before publishing.
+
+## 0.4.3 (2026-07-03)
+
+Registry-visible self-hosted API and runner protocol patch. The local Git tag
+set currently has no `v0.4.3` tag, so this entry backfills the release evidence
+from the branch history and npm registry.
+
+### Added
+
+- Storage-backed `loops-api` routes for loop CRUD and run listing using the
+  public storage contract, with storage-backed routes failing closed when no
+  storage adapter is injected.
+- Runner registration, claim, heartbeat, finalize, and bounded evidence upload
+  protocol endpoints for self-hosted control planes.
+- `loops-runner run-once` execution path for claimed non-workflow loop runs,
+  including claim-token fencing and heartbeat coverage while a run executes.
+
+### Safety
+
+- Non-local API serving requires a bearer token.
+- Runner claims skip workflow loops until remote workflow execution is fully
+  supported.
+- Run listing redacts stdout/stderr unless explicitly requested.
+
+## 0.4.2 (2026-07-03)
+
+Registry-visible self-hosted storage contract patch. The local Git tag set
+currently has no `v0.4.2` tag, so this entry backfills the release evidence
+from the branch history and npm registry.
+
+### Added
+
+- Async storage contract for local and self-hosted runtime adapters.
+- SQLite storage wrapper over the existing local `Store`.
+- Postgres storage migration contract with checksum ledger, core loop/run
+  tables, workflow/goal tables, runner machine/lease tables, and audit events.
+- Public package exports for storage contract, SQLite adapter, Postgres adapter,
+  and Postgres schema helpers.
+
+### Safety
+
+- `loops-runner` self-hosted status fails closed when a remote runner is
+  configured without the required API URL and token.
+
 ## 0.4.1 (2026-07-03)
 
 Contract-foundation release for the Mailery-style local/self-hosted/cloud

package/README.md

@@ -22,7 +22,7 @@ It supports deterministic command loops, JSON-defined workflows, and guarded CLI
 OpenLoops has three deployment modes:
 
 - `local`: SQLite in `LOOPS_DATA_DIR` is authoritative and `loops-daemon` executes scheduled work.
-- `self_hosted`: a user-operated `loops-api` control plane contract. This release exposes status, storage-backed `/v1` loop CRUD and run listing, runner claim/heartbeat/finalize protocol endpoints, and a one-shot `loops-runner run-once` execution path for embedded control-plane hosts; full fleet rollout and migration tooling are follow-up work.
+- `self_hosted`: a user-operated `loops-api` control plane contract. This release exposes status, storage-backed `/v1` loop CRUD and run listing, runner claim/heartbeat/finalize protocol endpoints, a one-shot `loops-runner run-once` execution path for embedded control-plane hosts, id-preserving local export/import, and preview-only self-hosted migration/sync commands; full fleet rollout and remote apply are follow-up work.
 - `cloud`: a hosted control-plane contract. This release exposes client/runner status only; hosted tenant auth and infrastructure live outside this package.
 
 `local` is the default and requires no network, token, Postgres, or hosted
@@ -44,6 +44,11 @@ Useful status commands:
 loops mode
 loops --json mode
 loops self-hosted status
+loops self-hosted migrate --dry-run
+loops self-hosted runner-register --runner-id <id> --machine-id <machine> --apply
+loops export --file ./loops-export.json --dry-run
+loops export --file ./loops-export.json
+loops import ./loops-export.json
 loops cloud status
 loops-api status
 loops-runner status

package/dist/api/index.js

@@ -3,7 +3,7 @@
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.4.3",
+  version: "0.4.4",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",
@@ -77,7 +77,7 @@ var package_default = {
     prepare: "test -d dist || bun run build",
     "dev:cli": "bun run src/cli/index.ts",
     "dev:daemon": "bun run src/daemon/index.ts",
-    prepublishOnly: "bun run build && bun run test:boundary"
+    prepublishOnly: "bun run build && bun run typecheck && bun test && bun run test:boundary"
   },
   keywords: [
     "loops",