@powerhousedao/switchboard 6.2.2-dev.5 → 6.2.2-dev.50

package/CHANGELOG.md

@@ -1,3 +1,294 @@
+## 6.2.2-dev.50 (2026-08-18)
+
+### 🚀 Features
+
+- **switchboard:** read the group and condition enforcement flags ([e3d72b0a8](https://github.com/powerhouse-inc/powerhouse/commit/e3d72b0a8))
+
+### 🩹 Fixes
+
+- **ci:** install chromium from the package that owns playwright ([653349ee0](https://github.com/powerhouse-inc/powerhouse/commit/653349ee0))
+- **connect:** stage the CSP rewrite instead of sed -i ([ab5cd1d8f](https://github.com/powerhouse-inc/powerhouse/commit/ab5cd1d8f))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+- Claude Opus 5 (1M context)
+
+## 6.2.2-dev.49 (2026-08-17)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.48 (2026-08-15)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.47 (2026-08-14)
+
+### 🩹 Fixes
+
+- **connect:** sync CSP registry origin to runtime packageRegistryUrl ([418652419](https://github.com/powerhouse-inc/powerhouse/commit/418652419))
+
+### ❤️ Thank You
+
+- Frank Pfeift
+
+## 6.2.2-dev.46 (2026-08-14)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.45 (2026-08-13)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.44 (2026-08-12)
+
+### 🚀 Features
+
+- **reactor-api,codegen:** register upgrade manifests on the switchboard ([85383aa0f](https://github.com/powerhouse-inc/powerhouse/commit/85383aa0f))
+- **reactor-group:** ship the PHGroup document model as @powerhousedao/reactor-group ([d5a323016](https://github.com/powerhouse-inc/powerhouse/commit/d5a323016))
+
+### 🩹 Fixes
+
+- **shared:** harden the condition evaluator per review ([eea3fb475](https://github.com/powerhouse-inc/powerhouse/commit/eea3fb475))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+- Claude Fable 5
+
+## 6.2.2-dev.43 (2026-08-11)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.42 (2026-08-10)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.41 (2026-08-09)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.40 (2026-08-08)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.39 (2026-08-07)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.38 (2026-08-06)
+
+### 🚀 Features
+
+- added recipe e2e tests to the suite ([88cd1a55c](https://github.com/powerhouse-inc/powerhouse/commit/88cd1a55c))
+- auth phase 4 ([28aa9ad6a](https://github.com/powerhouse-inc/powerhouse/commit/28aa9ad6a))
+
+### 🩹 Fixes
+
+- stage llm files from pre-commit hook ([0af2ab705](https://github.com/powerhouse-inc/powerhouse/commit/0af2ab705))
+- **reactor:** point preflight:auth at a real store ([c1315a9f9](https://github.com/powerhouse-inc/powerhouse/commit/c1315a9f9))
+- **reactor:** filter initialState and keep auth in a scoped subscription read ([77fee70b4](https://github.com/powerhouse-inc/powerhouse/commit/77fee70b4))
+- **reactor:** degrade the poll query against a remote on the older schema ([0c3aefe65](https://github.com/powerhouse-inc/powerhouse/commit/0c3aefe65))
+- **shared:** stop a state snapshot from installing or replacing a policy ([f947e562e](https://github.com/powerhouse-inc/powerhouse/commit/f947e562e))
+- **shared:** make auth-administration retention a reachability rule ([3db42daac](https://github.com/powerhouse-inc/powerhouse/commit/3db42daac))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+- Claude Fable 5
+
+## 6.2.2-dev.37 (2026-08-05)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.36 (2026-08-04)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.35 (2026-08-03)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.34 (2026-08-02)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.33 (2026-08-01)
+
+### 🩹 Fixes
+
+- **reactor:** fixing a few defects with document scope reshuffle specifics ([7546b9ff2](https://github.com/powerhouse-inc/powerhouse/commit/7546b9ff2))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+
+## 6.2.2-dev.32 (2026-07-31)
+
+### 🚀 Features
+
+- **reactor:** feature flag guards and spec updates to make plan for guarded reshuffle edge cases ([20b0fd6be](https://github.com/powerhouse-inc/powerhouse/commit/20b0fd6be))
+
+### 🩹 Fixes
+
+- **reactor:** fix convergence in the case we deny an operation that has a skip ([21cbb3ecb](https://github.com/powerhouse-inc/powerhouse/commit/21cbb3ecb))
+- auth-scope spec updates, assert ordered streams, and fix some busted default protocol versions ([97c5a37b5](https://github.com/powerhouse-inc/powerhouse/commit/97c5a37b5))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+
+## 6.2.2-dev.31 (2026-07-31)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.30 (2026-07-31)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.29 (2026-07-31)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.28 (2026-07-30)
+
+### 🚀 Features
+
+- **reactor-browser:** add IReactorBrowserClient and a light GraphQL client ([#2893](https://github.com/powerhouse-inc/powerhouse/pull/2893))
+- **reactor:** plugging in the first decision model ([27e9b2772](https://github.com/powerhouse-inc/powerhouse/commit/27e9b2772))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+- Guillermo Puente Sandoval @gpuente
+
+## 6.2.2-dev.27 (2026-07-30)
+
+### 🩹 Fixes
+
+- **connect:** pin @privy-io/react-auth to 3.35.0 ([909352ce3](https://github.com/powerhouse-inc/powerhouse/commit/909352ce3))
+
+### ❤️ Thank You
+
+- acaldas
+
+## 6.2.2-dev.26 (2026-07-30)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.25 (2026-07-29)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.24 (2026-07-29)
+
+### 🩹 Fixes
+
+- **reactor:** fix an issue exacerbated by auth where snapshots were ordered by insertion not revision ([4aa32fe1b](https://github.com/powerhouse-inc/powerhouse/commit/4aa32fe1b))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+
+## 6.2.2-dev.23 (2026-07-28)
+
+### 🩹 Fixes
+
+- **deps:** pin qr to 0.5.5 so RainbowKit can render the WalletConnect QR ([5343f9178](https://github.com/powerhouse-inc/powerhouse/commit/5343f9178))
+
+### ❤️ Thank You
+
+- acaldas
+
+## 6.2.2-dev.22 (2026-07-28)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.21 (2026-07-27)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.20 (2026-07-27)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.19 (2026-07-27)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.18 (2026-07-27)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.17 (2026-07-26)
+
+### 🚀 Features
+
+- **attachments:** S3-compatible storage, direct transfers, and document-derived authorization ([#2884](https://github.com/powerhouse-inc/powerhouse/pull/2884))
+
+### ❤️ Thank You
+
+- Guillermo Puente Sandoval @gpuente
+
+## 6.2.2-dev.16 (2026-07-25)
+
+### 🩹 Fixes
+
+- code review fixes ([318cbefa9](https://github.com/powerhouse-inc/powerhouse/commit/318cbefa9))
+- version 0 is reserved and only 1 and on is available for setting ([193ac4c56](https://github.com/powerhouse-inc/powerhouse/commit/193ac4c56))
+- resolve a contradiction in group membership ([39845a65c](https://github.com/powerhouse-inc/powerhouse/commit/39845a65c))
+- grant evaluation needs to ignore features that do not exist yet ([0c1d06396](https://github.com/powerhouse-inc/powerhouse/commit/0c1d06396))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+
+## 6.2.2-dev.15 (2026-07-24)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.14 (2026-07-23)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.13 (2026-07-23)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.12 (2026-07-23)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.11 (2026-07-22)
+
+### 🚀 Features
+
+- **connect:** dynamic packages can contribute to the PWA configuration ([da867e21d](https://github.com/powerhouse-inc/powerhouse/commit/da867e21d))
+
+### ❤️ Thank You
+
+- Yasiel Cabrera @YasielCabrera
+
+## 6.2.2-dev.10 (2026-07-21)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.9 (2026-07-20)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.8 (2026-07-19)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.7 (2026-07-18)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
+## 6.2.2-dev.6 (2026-07-17)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
 ## 6.2.2-dev.5 (2026-07-17)
 
 This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.

package/README.md

@@ -156,6 +156,43 @@ The same settings are available programmatically via
 `startSwitchboard({ workerPool: { numWorkers, dbPoolSizePerWorker, acquireTimeoutMs } })`,
 which takes precedence over the environment variables.
 
+### Reactor Enforcement Flags
+
+| Variable                       | Description                                                        | Default |
+| ------------------------------ | ------------------------------------------------------------------ | ------- |
+| `REACTOR_DOCUMENT_DECISIONS`   | Decide writes from the document stream, not the meta cache         | `false` |
+| `REACTOR_AUTH_ENFORCEMENT`     | Enforce the auth scope's policy at admission, replay and read      | `false` |
+| `REACTOR_AUTH_GROUPS`          | Let `{ group }` principals match against group-document rosters    | `false` |
+| `REACTOR_AUTH_CONDITIONS`      | Evaluate `where` / `match` conditions on grants                    | `false` |
+
+Set each to the literal `true` to enable. Each flag requires the one above it,
+and switchboard refuses to start on a set that skips one — a partially enforcing
+reactor would apply less than the operator asked for.
+
+These change replay outcomes, which are consensus outcomes, so **a flag flips
+for a whole document-sharing fleet, never per node**. Two nodes that share
+documents and disagree on the flags diverge, exactly as two nodes on
+incompatible versions would. Connect carries the same flags in
+`connect.reactor.featureFlags` (see `apps/connect/RUNTIME-CONFIG.md`); a fleet
+that includes browser replicas has to set them there too.
+
+Sweep the store before enabling either auth flag — neither unsafe condition is
+repairable after the fact, because the auth stream is never reshuffled:
+
+```bash
+cd packages/reactor && pnpm preflight:auth --pg <connection-string>
+```
+
+Exit `0` is clean for both; `1` means streams unsafe for `authEnforcement`, `2`
+means documents unsafe for `authConditions`, `3` both, and `68` means the run
+died having checked nothing. Gate on the whole code, not on a bit.
+
+One expectation worth stating: turning enforcement on protects nothing that
+already exists. The host's permission tables still own sync serving and the
+GraphQL boundary, and every document that predates the auth scope carries an
+uninitialized policy, which allows everything. Enforcement bites only on
+documents that have emitted `INITIALIZE_AUTH`.
+
 ### Authentication Configuration
 
 ```typescript

package/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="5a65c537-fadb-5705-95c0-4cec44d7b4d2")}catch(e){}}();
-import { a as parseForcePgVersion, r as startSwitchboard } from "./server-Cgud_ONM.mjs";
+import { a as parseForcePgVersion, r as startSwitchboard } from "./server-By1-k-B6.mjs";
 import "./utils-Baw7rThP.mjs";
 import { metrics } from "@opentelemetry/api";
 import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";