@procedures/server 0.8.1 → 0.9.1

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @procedures/server
 
+## 0.9.1
+
+### Patch Changes
+
+- b5db4d8: The other procedures that reach files declare their rules under a root of the files in `metadata.fsRoot` (roadmap R33, tracker item O36). Without a root, nothing changes. PATCH: each procedure was refused under a root before, and now it is confined, or it is refused with a reason.
+  
+  - Confined: `s3.download` (`destPath`), `s3.presign` (no path input), `exif.read` (`path`), `privacyScan.files` (`paths`, `termsFile`, `allowFile`), `claude.read` and `claude.follow` (`outputFile`), and `manifest.generate` (`outputDir`).
+  - Confined with no path input, because the store of the host holds the data: `schedule.add`, `schedule.list`, `schedule.remove`, `procedure.store`, `procedure.load` and `procedure.sync`.
+  - Confined: each `gh.*` procedure starts gh in a working folder of the root, and the `dir` of `gh.run.download` is in the root. Its nested `shell.run` now runs under a root. `GIT_DIR` is the null device, so the git of gh finds no repository: give `repo`.
+  - Refused, with the reason in the rules: `snapshot.create`, `snapshot.restore`, `snapshot.diff`, `iosBackup.*`, `claude.start`, `server.start`, `server.stop` and `server.status`.
+- Updated dependencies [61d60c6]
+- Updated dependencies [79f750a]
+- Updated dependencies [d0c9856]
+- Updated dependencies [b5db4d8]
+- Updated dependencies [b5db4d8]
+  - @procedures/client@0.9.1
+  - @procedures/peer@0.9.1
+
+## 0.9.0
+
+### Patch Changes
+
+- Updated dependencies [8bb469c]
+- Updated dependencies [dc03903]
+- Updated dependencies [dca28c1]
+  - @procedures/client@0.9.0
+  - @procedures/peer@0.9.0
+
 ## 0.8.1
 
 ### Patch Changes

package/README.md

@@ -190,7 +190,9 @@ With `--fs-root <folder>`, the server starts `confineToRoot()` of `@procedures/f
 
 - Each procedure refuses a path outside the folder with `FORBIDDEN` and the reason `outside-root`. A relative path starts at the folder. A working folder without a value is the folder.
 - The `fs.*` procedures get the handlers of the root. A procedure with rules (`metadata.fsRoot`) gets each path of its rules examined. A nested call is confined too.
-- The server refuses each procedure that the folder cannot confine, with the same error: `git.*`, `pnpm.*`, `docker.run`, a call of `shell.run`, and a procedure that reaches files without rules.
+- The server refuses each procedure that the folder cannot confine, with the same error: `pnpm.*`, `docker.run`, a call of `shell.run`, and a procedure that reaches files without rules.
+- The `git.*` procedures are confined: git finds no repository above the folder (tracker item O35).
+- The folder refuses `server.start`, `server.stop` and `server.status` of this package. They read and write the lock files in the home folder (`~/.mark`), and `server.start` starts a server without the folder.
 - The server does not start when the folder does not exist, or when it cannot load a version of `@procedures/fs` with `confineToRoot()`.
 
 The rules and the table of the procedures are in [CAPABILITIES-2026-10.md](../documentation/CAPABILITIES-2026-10.md#the-root-of-the-files-roadmap-r33).