@mmmbuto/nexuscrew 0.8.37 → 0.8.39

package/CHANGELOG.md

@@ -2,6 +2,47 @@
 
 All notable changes to NexusCrew are tracked here.
 
+## 0.8.39 — 2026-07-25 — "Honest Peer"
+
+- Fixes `nexuscrew nodes test` and `nexuscrew nodes doctor` falsely reporting a
+  broken pairing for healthy outbound peers. The commands no longer present a
+  per-peer federation credential to `/api/config`, which correctly accepts only
+  the remote browser/UI token and therefore returned a misleading `401`.
+- Probes the authenticated `/federation/health` endpoint instead, matching the
+  live topology health path and binding a successful response to the expected
+  peer instance ID. A real federation `401` remains an actionable `token-ko`;
+  transport, payload and identity failures remain distinct health failures.
+- Keeps the diagnostic read-only, never returns or logs the peer credential,
+  and preserves the existing inbound, tunnel-down and missing-token behavior.
+- Gate: **1,068 isolated Node tests** (1,067 pass / 1 platform skip),
+  **300/300 frontend tests**, production PWA build and zero production
+  dependency vulnerabilities in both dependency trees.
+
+## 0.8.38 — 2026-07-25 — "Right Voice"
+
+- Adds an optional, validated `lang` field to `nc_notify` and carries it through
+  the HTTP API, live event frame and Web Push metadata. Supported Italian,
+  English and Spanish locales accept both base and BCP-47 forms such as
+  `it-IT`; malformed or unsupported values fail closed.
+- Makes spoken alerts prefer the notification's declared content language
+  instead of the interface language. Existing MCP clients that do not yet send
+  `lang` retain a conservative compatibility path: only a sufficiently strong
+  body-language signal can override the UI fallback, while short and mixed
+  technical titles never decide the voice.
+- Normalizes full locale tags, case and whitespace. Unknown language now leaves
+  `SpeechSynthesisUtterance.lang` as the empty browser default instead of
+  silently forcing `en-US` or assigning a stringified `undefined` sentinel.
+- Selects an installed voice that matches the resolved language when available.
+  The cache is populated synchronously, refreshed by `voiceschanged`, never
+  delays or reorders the speech queue, and leaves `utterance.voice` untouched
+  while the browser reports no matching voices.
+- Labels fixed Italian service notifications for questions and delivered files
+  explicitly, preserves the localized preview/priming gate, and keeps all
+  existing queue, focus, privacy, redaction and visual-delivery boundaries.
+- Gate: **1,063 isolated Node tests** (1,062 pass / 1 platform skip),
+  **300/300 frontend tests**, production PWA build and zero production
+  dependency vulnerabilities in both dependency trees.
+
 ## 0.8.37 — 2026-07-25 — "Wheel History"
 
 - Restores desktop mouse-wheel browsing of tmux history inside writable