@tinkerlandai/indiana-sdk 0.6.0 → 0.6.1

package/CHANGELOG.md

@@ -1,6 +1,14 @@
 # Changelog
 
-Release facts and artifact evidence: [SDK release ledger](../../docs/sdk-releases.md). Earlier personal-package versions are preserved in [@houzhen888/groove-grow history](../../docs/sdk-changelog-groove-grow.md). The two packages have independent version histories.
+Release facts and artifact evidence: [SDK release ledger](../../docs/sdk-releases.md). The two packages have independent version histories.
+
+## 0.6.1 — 2026-10-22
+
+- Submit only the current Funnel screen's declared input bindings. Preserve historical answers, unsaved drafts during refresh and values when navigating Back.
+- Validate public Local Funnel Feature dependencies against their declared write variables.
+- Settle the original accepted command during host polling so background completion releases the next screen and terminal recovery.
+- Recover a rejected screen display acknowledgement after Back without resubmitting the user's action.
+- Keep protocol 0.6 and the existing immutable renderer identity. Runtime and production acceptance are recorded separately in the release ledger.
 
 ## 0.6.0 — 2026-10-21
 

package/README.md

@@ -2,12 +2,14 @@
 
 [简体中文](./README.zh-CN.md)
 
-Version **0.6.0 / protocol 0.6** requires a matching Indiana runtime and database. Remote Funnel responses contain the current page's `ScreenDocument` JSON; Local and Remote use the same renderer, canonical Run, business receipts and Queue recovery. Remote graphs and private rules stay on the server.
+Version **0.6.1 / protocol 0.6** requires a matching Indiana runtime and database. Remote Funnel responses contain the current page's `ScreenDocument` JSON; Local and Remote use the same renderer, canonical Run, business receipts and Queue recovery. Remote graphs and private rules stay on the server.
 
-Pin this package to a matching protocol 0.6 service. The latest API entry checks found business readiness returning HTTP 503 on both production and test Go services; npm publication does not make those services ready. Actual publication, tags and environment state are recorded in the [release ledger](../../docs/sdk-releases.md).
+Version 0.6.1 fixes current-screen input patches, Local Feature dependency validation, original-command settlement during host polling and display acknowledgement recovery after Back. Complete production browser and Stripe acceptance remains separate; see the [repair report](../../docs/deployment-receipts/20261022-sdk-funnel-repair/README.md).
+
+Pin this package to a matching protocol 0.6 service. The published npm 0.6.0 package passes 21 foundation operations through `https://api.dev.tinker.cash`, with readiness 200 and correlated Go request logs; remaining capabilities and production business dependencies have separate gates. npm publication does not extend that accepted scope. Actual publication, tags and environment state are recorded in the [release ledger](../../docs/sdk-releases.md).
 
 ```sh
-npm install --save-exact @tinkerlandai/indiana-sdk@0.6.0
+npm install --save-exact @tinkerlandai/indiana-sdk@0.6.1
 ```
 
 Indiana's JavaScript and TypeScript SDK supports browsers, Node.js, screen rendering and optional AI usage integrations. Environment collection controls and existing Invoice/billing-window contracts remain available. Older 0.x protocols are rejected before business execution.
@@ -16,7 +18,7 @@ Indiana's JavaScript and TypeScript SDK supports browsers, Node.js, screen rende
 
 During `0.x`, only the current protocol is supported. Starting with `1.0`, compatibility is preserved within each stable major version. Once the next stable major is published, the preceding stable major remains supported for at least 12 calendar months, with at least 180 days' public notice before retirement. The later deadline applies. See the [support policy](https://tinker.cash/docs/release-notes#support-policy).
 
-Version `0.6.0` sends protocol and SDK version headers and validates the protocol declared by successful responses. Headerless historical clients retain the fixed identity `0.2`; they do not follow the current protocol automatically. Updating source code does not change an existing npm artifact or deploy a server.
+Version `0.6.1` sends protocol and SDK version headers and validates the protocol declared by successful responses. Headerless historical clients retain the fixed identity `0.2`; they do not follow the current protocol automatically. Updating source code does not change an existing npm artifact or deploy a server.
 
 ## One package, seven entry points
 
@@ -42,7 +44,7 @@ Both `beta` and `latest` versions published with this default use the production
 
 For our own testing, always require a test-service address instead of relying on the production default:
 
-The target test API origin is `https://api.dev.tinker.cash`; `dev.tinker.cash` is the test site/Admin entry. Set `INDIANA_TEST_BASE_URL=https://api.dev.tinker.cash` only after that API domain, forwarding and matching test runtime are accepted. Neither the domain setup nor business readiness is established by this source change. Future `beta` and `latest` SDK releases share the production default; the test host supplies the override.
+The test API origin is `https://api.dev.tinker.cash`; `dev.tinker.cash` is the test site/Admin entry. Set `INDIANA_TEST_BASE_URL=https://api.dev.tinker.cash` and use the native Cloud SQL test App/Key. The legacy active dev Admin has its original database binding, so its old keys do not automatically authenticate against Go. Foundation acceptance covers 21 operations; Funnel, public configuration and provider execution remain closed. Future `beta` and `latest` SDK releases share the production default; the test host supplies the override.
 
 ```ts
 const testBaseUrl = process.env.INDIANA_TEST_BASE_URL;
@@ -63,7 +65,7 @@ const configuration = createConfigurationSync({
 
 Use the same explicit address for every client in a test run, including Funnel start/controllers and page/visual clients. Environment variables are read by the host, not automatically by the SDK. Sandbox/Live selects business scope inside the chosen service; it does not select a deployment or database. Never retry against another service automatically after an error or unknown command result.
 
-Offline tests inject `fetch` and assert the default address, overrides and failure behavior without reaching the public API. Integration tests consume a fixed local SDK tarball against an explicitly selected, protocol-compatible test runtime and retain its version/hash and request IDs. Existing dev protocol 0.5 acceptance does not certify this source's protocol 0.6; Go business checks must wait for its own readiness. See the [maintainer testing procedure](../../docs/sdk-selfserve.md#maintainer-api-origin-testing).
+Offline tests inject `fetch` and assert the default address, overrides and failure behavior without reaching the public API. Integration tests consume a fixed local SDK tarball against an explicitly selected, protocol-compatible test runtime and retain its version/hash and request IDs. The published-0.6 test API acceptance covers the 21-operation native foundation, including idempotent business results and permission refusals; broader capabilities, browsers and production require separate acceptance. See the [maintainer testing procedure](../../docs/sdk-selfserve.md#maintainer-api-origin-testing).
 
 ## Create a Customer Session from a trusted backend
 

package/README.zh-CN.md

@@ -12,10 +12,12 @@ Local / Remote 只区分纯条件、Feature / 实验和 Feature 选择在哪里
 
 步骤记录共用后端限制；历史 `report_progress` 仍是调用方观察，不能当成发券证明。原生渲染壳复用同一个 JS 纯求值器及原生 Run bridge；无界面 Swift/Kotlin 会明确返回待本地求值，不自动切换 Remote。详细使用和迁移边界见[英文说明](README.md#local-funnel-execution)及[统一回执](../../docs/implementation-receipts/20261020-funnel-shared-execution.json)。安装本包不会自动迁移数据库或部署服务；浏览器、支付渠道、容量和原生商店验收分别记录。
 
-本包版本为 **0.6.0／协议 0.6**，须配套同版本运行时和数据库。Remote Funnel 返回当前页面 JSON，与 Local 共用渲染器，完整 Remote 图和私有规则仍在服务端。最近的 API 入口检查中，生产和测试 Go 服务的业务就绪检查均返回 HTTP 503；npm 发包不会使服务就绪。实际发布、标签和环境状态见[SDK 发布总账](../../docs/sdk-releases.md)。
+本包版本为 **0.6.1／协议 0.6**，须配套同协议运行时和数据库。Remote Funnel 返回当前页面 JSON，与 Local 共用渲染器，完整 Remote 图和私有规则仍在服务端。公开 npm 0.6.0 已通过 `api.dev.tinker.cash` 的 21 项基础操作，foundation readiness 为 200；Funnel、公共配置、支付执行和生产业务仍有独立验收边界。实际发布、标签和环境状态见[SDK 发布总账](../../docs/sdk-releases.md)。
+
+0.6.1 修复当前 Screen 的输入 patch、Local Feature 依赖校验、host 轮询时原命令结算，以及 Back 后的展示确认恢复。完整生产浏览器与 Stripe 验收分别记录，见[修复报告](../../docs/deployment-receipts/20261022-sdk-funnel-repair/README.md)。
 
 ```sh
-npm install --save-exact @tinkerlandai/indiana-sdk@0.6.0
+npm install --save-exact @tinkerlandai/indiana-sdk@0.6.1
 ```
 
 ## 版本兼容与支持
@@ -50,7 +52,7 @@ JavaScript 与 TypeScript 共用本包，声明文件随包提供。内部 `@ind
 
 测试 API 地址为 `https://api.dev.tinker.cash`，测试主站／Admin 使用 `dev.tinker.cash`。测试应用配置 `INDIANA_TEST_BASE_URL=https://api.dev.tinker.cash`，业务验收仍须等待测试服务就绪。默认地址保持生产 `https://api.tinker.cash`，由测试应用显式覆盖。
 
-离线测试注入 `fetch`，验证默认地址、覆盖、renderer 地址和网络失败不换服务；集成测试用固定本地 tarball 连接明确选定、协议匹配的测试 runtime，记录包哈希、服务版本和 requestId。既有 dev 协议 0.5 验收不能覆盖当前源码的协议 0.6；Go 业务未就绪时不能用它验收业务，也不自动切回 JS。具体命令见[维护者测试流程](../../docs/sdk-selfserve.md#maintainer-api-origin-testing)。
+离线测试注入 `fetch`，验证默认地址、覆盖、renderer 地址和网络失败不换服务；集成测试用固定本地 tarball 连接明确选定、协议匹配的测试 runtime，记录包哈希、服务版本和 requestId。公开 0.6.0 的原生 GCP 测试已覆盖 21 项基础能力、原请求重放与权限拒绝；完整能力、浏览器和生产另行验收，不自动切回 JS。当前旧 dev Admin 仍有原数据库绑定，不能将其生成的 Key 当作 Go 原生测试 Key。具体命令见[维护者测试流程](../../docs/sdk-selfserve.md#maintainer-api-origin-testing)。
 
 ## 从可信后端创建 Customer Session