@mean-weasel/lineage 0.1.22 → 0.1.24

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## Unreleased
+
+## 0.1.24
+
+- Add persistent per-canvas Social marks across the UI and CLI, including agent-readable local media context, claim enforcement, and safe cleanup when a node leaves its canvas.
+- Add an explicit, atomic stable-package upgrade path for stopped production profiles, with verified runtime authority, writer refusal, rollback, identity preservation, and a guarded Make workflow.
+
+## 0.1.23
+
+- Make missing Codex CLI failures explain how to restore `PATH`, verify `npx` and Codex prerequisites explicitly, and gate releases on compatibility with the independently published plugin installer.
+- Add a reusable Lineage showcase cover and refine its presentation without browser text-selection artifacts.
+- Show absolute local paths in asset details while preserving safe relative paths in persisted lineage data.
+- Add the public documentation hub, freshness checks, CI routing, and GitHub Pages deployment workflow.
+- Refresh vulnerable transitive dependencies for `brace-expansion`, `postcss`, and `nanoid`.
+
 ## 0.1.22
 
 - Harden the landing page, README, and packaged manual dogfood guide with fail-fast first-run commands that complete the post-initialization runtime, profile, database, and service identity gate.

package/MANUAL_INSTALL_DOGFOOD.md

@@ -72,6 +72,7 @@ Record the prerequisites and registry selection:
 ```bash
 run_lineage_dogfood node --version
 run_lineage_dogfood npm --version
+run_lineage_dogfood npx --version
 run_lineage_dogfood codex --version
 run_lineage_dogfood npm view @mean-weasel/lineage dist-tags version engines --json
 ```

package/README.md

@@ -59,14 +59,17 @@ Before installing anything, verify the tools used by the path you choose:
 ```bash
 node --version
 npm --version
+npx --version
 make --version
 ```
 
-Lineage requires Node.js 22.22.0 or newer and npm. Make is required only for
-the documented `make` shortcuts. A real Codex installation is optional for the
-app, but required to install and activate the Codex plugin; verify that
-additional prerequisite with `codex --version` before following the plugin
-step.
+Lineage requires Node.js 22.22.0 or newer and npm, including the accompanying
+`npx` command used by the plugin installer. Make is required only for the
+documented `make` shortcuts. A real Codex installation is optional for the app,
+but required to install and activate the Codex plugin; verify that additional
+prerequisite with `codex --version` in the same shell before following the
+plugin step. If either command is missing, restore its executable directory on
+`PATH` before installing.
 
 On the minimum supported Node 22 line, foreground startup can print one
 `ExperimentalWarning` for Node's built-in SQLite module before the healthy
@@ -332,6 +335,43 @@ wrong-root, unsafe-manifest, unconfirmed, and active-service cases fail closed.
 The command may prepare a new structurally valid development manifest before
 its database and asset root are cloned.
 
+### Upgrade a stable production profile
+
+A stable package update and a production profile runtime pin are separate
+operations. Upgrade only while the matching managed service is stopped:
+
+```bash
+make stop-prod LINEAGE_PROD_PROFILE=team-production
+make upgrade-prod LINEAGE_PROD_PROFILE=team-production
+make start-prod-bg LINEAGE_PROD_PROFILE=team-production
+make status-prod LINEAGE_PROD_PROFILE=team-production
+```
+
+`upgrade-prod` installs the current npm `latest` into a new receipt-bound stable
+root, runs stable runtime doctor, confirms `profile upgrade-runtime`, then runs
+runtime doctor, profile doctor, and profile-selected `db info`. It deliberately
+does not stop or restart the service for you, so the stopped interval and the
+post-upgrade readiness check stay explicit.
+
+The equivalent commands between stop and start are:
+
+```bash
+make install-prod
+lineage-stable runtime doctor --json
+lineage-stable profile upgrade-runtime \
+  --profile team-production --confirm-write --json
+lineage-stable runtime doctor --json
+lineage-stable profile doctor --profile team-production --json
+lineage-stable db info --profile team-production --json
+```
+
+The upgrade target comes only from the executing verified stable package.
+Preview/dev/unverified code, an active writer, a downgrade, a same-version
+identity change, unhealthy profile data, or unsafe manifest ownership fails
+before a new pin is accepted. The operation preserves the profile fingerprint,
+database and asset paths and contents, service origin, migration requirements,
+and unknown manifest fields.
+
 To create a realistic preview or development database without copying a live
 SQLite file directly, define a new non-production target profile whose database
 does not exist, then run: