@voltro/plugin-governance 0.66.1 → 0.67.0

package/CHANGELOG.md

@@ -39,6 +39,50 @@ _Changes staged for the next release accumulate here (rolled up from
 
 ---
 
+## [0.67.0] — 2026-09-07
+
+### ⚠ BREAKING
+
+- **@voltro/client, @voltro/protocol, @voltro/runtime, @voltro/cli, @voltro/web** — Confirmed optimistic writes now reconcile against a token-bound post-ACK primary snapshot, never an unrelated delta, changed row or timeout. Matching snapshots retire only covered previews; server normalisation and later writers remain authoritative. Same-tick acknowledgements coalesce, and affected cache entries preserve primary consistency across same-subject reconnects. Migration: deploy matching client/server framework versions together and account for an additional subscription read per affected acknowledgement group; affected entries use primary snapshots instead of replica reads/delta-resume for their cache lifetime. Native hooks need no source rewrite. Direct callers of the public `supersedesConfirmedPatches(event, baseBefore, baseAfter)` helper must migrate to `(event, reconciliationToken)` using the token of the post-ACK read, or use the native `SubscriptionCache`; row comparison cannot be mechanically rewritten into causal proof.
+
+  **`voltro update` carries you across this** — codemod `0.67.0/01_subscription-reconciliation`. If you pin versions by hand and never run it, print the notes without changing anything: `voltro update --codemods-only --from <your current version> --dry-run` (this one ships in 0.67.0).
+- **@voltro/cli** — `voltro support sentry <eventId>` is removed. It wrapped `sentry-cli sourcemaps explain`, which sentry-cli 3 dropped in favour of Sentry's in-product source-map debugger; `@voltro/cli` now depends on `@sentry/cli` 3, whose `execute(args, live)` takes a boolean. Migration: delete the invocation from scripts, CI jobs and runbooks and read the event's source-map resolution in Sentry itself. `voltro support collect` is unchanged.
+
+  **`voltro update` carries you across this** — codemod `0.67.0/03_support-sentry-removed`. If you pin versions by hand and never run it, print the notes without changing anything: `voltro update --codemods-only --from <your current version> --dry-run` (this one ships in 0.67.0).
+- **@voltro/cli, @voltro/workflow, @voltro/testing** — `voltro test` runs on vitest 5, and `@voltro/workflow` names `vitest ^5.0.0` as its peer. Migration: set `vitest` and `@vitest/coverage-v8` to `^5.0.0` together in every app that declares them (the coverage provider peer-pins the exact vitest version), install, and run the suite once — vitest 5 clears mocks before each test by default, fails a test whose async assertion was not awaited, and no longer looks a config file up in ancestor directories. Scaffolded templates ship on 5.
+
+  **`voltro update` carries you across this** — codemod `0.67.0/02_vitest-5`. If you pin versions by hand and never run it, print the notes without changing anything: `voltro update --codemods-only --from <your current version> --dry-run` (this one ships in 0.67.0).
+
+### Added
+
+- **@voltro/ui-shadcn, @voltro/cli, @voltro/devtools, @voltro/devtools-ui** — Add the opt-in Signal brand stylesheet, accessible `SignalHeader` and pausable `SignalField` with reduced-motion and visibility handling. Development and production builds resolve the stylesheet from the same UI-kit installation; the in-browser devtools use the matching plum/violet palette and declare the Tailwind dependency required to compile their source stylesheet locally.
+
+  Code blocks use matching light/dark surfaces, code comparisons retain readable contrast, and the shared routes view uses a direct heading.
+
+  `DocsLayout` supports custom header and introduction slots and an optional desktop sidebar. Its mobile drawer uses native modal focus and Escape behavior; search contains keyboard focus and restores the opener when dismissed.
+
+  `VoltroWordmark` owns product badges and an operator warning tone. `SignalHeader` shares responsive brand geometry and an optional sticky reading surface; `AppShell` accepts a custom header slot. All first-party product headers and footers use this composition, including the compact local Devtools identity.
+
+  Shared `SignalPreferences`, `SignalSearch` and `SignalHeaderAction` align header controls across public and operating apps. Signal fields support both themes; `ProfileMenu` accepts a custom trigger and preserves an explicit System choice.
+
+### Changed
+
+- **@voltro/cli, @voltro/runtime, @voltro/database, @voltro/protocol, @voltro/voltro, @voltro/sql-mssql, @voltro/sql-turso, @voltro/workflow, @voltro/plugin-sso-saml, @voltro/plugin-sentry** — Dependency refresh: Effect 3.22.1 with the matching `@effect/*` patch releases (`@effect/cluster` 0.60.2, `@effect/sql-mssql` 0.54.0, `@effect/platform` 0.97.1, `@effect/rpc` 0.76.2, `@effect/sql` 0.52.1, `@effect/workflow` 0.19.1), `@libsql/client` 0.18.0 — and `@effect/sql-mssql` 0.54.0 flipped its TLS default to encrypt-and-verify, so the mssql dialect now passes `encrypt: false` explicitly for an unset connection to keep the documented modes (unset → plaintext, `sslmode=require` → encrypt without verification) — `@sentry/cli` 3, `xml-encryption` 6, vite 8.2.2, and the tracked minor/patch lines. The mssql patch for `@effect/cluster` — the four SQL fixes plus the shard-release backoff — was regenerated against 0.60.2 (upstream refactored `SqlMessageStorage`, so the 0.60.0 hunks no longer applied) and ships as `patches/@effect__cluster@0.60.2.patch`; `voltro add mssql` writes the new key. Projects scaffolded by the CLI record the pnpm that ran it, which is 12.x on the framework's own toolchain; pnpm 11+ replaced `onlyBuiltDependencies` with `allowBuilds`, and the framework's workspaces declare it.
+
+### Fixed
+
+- **@voltro/cli, @voltro/runtime, @voltro/database, @voltro/voltro** — The tunable readers that take `env = process.env` (`resolveEagerFallbackWarnIntervalMs`, `resolveWorkflowRecordingMode`, `readPollCeilingMs`, and the `SchedulingEnv` / `ReactiveEnv` / `InspectRingsEnv` shapes) accept a bare `NodeJS.ProcessEnv` again. They were typed as all-optional literals, which TypeScript's weak-type check rejects for `Dict<string>` the moment nothing in the compilation augments `ProcessEnv` — an app that compiles framework source with only `@types/node` (a mobile app, which declares no env) failed `tsc` on `dbMetrics.ts`. The parameters now carry an index signature.
+- **@voltro/client, @voltro/web** — The subscription recovery watchdog knows when it was throttled. A browser delays timers in a hidden tab, so the stall timer could fire long after it was due, report the interval it was armed with as the interval waited, warn, and invalidate entries whose deliveries were queued behind the same throttling. It now compares its due time with its fire time: late beyond a tolerance, or firing in a hidden tab, it records one `subscription.recovery-timer-late` per attempt (with `timerLateMs` and `hidden`) and re-arms; the first on-time fire in a visible tab decides. `subscription.recovery-stuck` carries the time actually waited and the number of deferrals.
+
+  The client runtime yields to the event loop through a `MessageChannel` in the browser instead of `setTimeout`, so tasks queued behind Effect's periodic yield are not held to the hidden-tab timer grid. `runtime.resolved` records the channel in use as `scheduler`.
+
+  `socket.frames` marks frame-arrival bursts on the raw socket — the first frame after open and each frame that follows a gap of five seconds or more, at most eight per socket — so an export separates a late arrival from late processing.
+
+  `apiSurface: compatible` — the golden churn in `@voltro/client` and `@voltro/web` is two members added to the `ClientDiagnosticKind` union (`socket.frames`, `subscription.recovery-timer-late`); every existing member is unchanged, the framework is the only producer, and a reader that does not know the new kinds sees two more events it can ignore. Only a switch exhaustive over the vocabulary needs two arms.
+- **@voltro/cli** — Web middleware is precompiled into the server production output and rooted by runtime pruning, preserving its behavior in source-free Docker deployments. Missing transitive imports now fail loudly instead of silently disabling a present middleware; rebuilding after removal clears the previous policy. Runtime tracing also preserves transitive dependencies when a deploy directory is reached through a symlink. Native bundle imports now propagate missing-library and initialization errors instead of returning a circular shim's empty exports. Rebuild and deploy the complete `.framework` output; no application API changes are required.
+
+---
+
 ## [0.66.1] — 2026-09-06
 
 ### Fixed

package/THIRD-PARTY-NOTICES.md

@@ -9,7 +9,7 @@ Generated from the resolved runtime dependency closure (52 packages).
 
 ---
 
-## @effect/cluster@0.60.0
+## @effect/cluster@0.60.2
 
 License: MIT
 
@@ -37,7 +37,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## @effect/platform-node@0.108.0
+## @effect/platform-node@0.108.1
 
 License: MIT
 
@@ -65,7 +65,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## @effect/platform-node-shared@0.61.0
+## @effect/platform-node-shared@0.61.1
 
 License: MIT
 
@@ -93,7 +93,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## @effect/sql@0.52.0
+## @effect/sql@0.52.1
 
 License: MIT
 
@@ -121,7 +121,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## @effect/workflow@0.19.0
+## @effect/workflow@0.19.1
 
 License: MIT
 
@@ -386,7 +386,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/api-logs@0.221.0
+## @opentelemetry/api-logs@0.222.0
 
 License: Apache-2.0
 
@@ -594,7 +594,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/context-async-hooks@2.10.0
+## @opentelemetry/context-async-hooks@2.11.0
 
 License: Apache-2.0
 
@@ -802,7 +802,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/core@2.9.0
+## @opentelemetry/core@2.10.0
 
 License: Apache-2.0
 
@@ -1010,7 +1010,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/exporter-metrics-otlp-http@0.221.0
+## @opentelemetry/exporter-metrics-otlp-http@0.222.0
 
 License: Apache-2.0
 
@@ -1218,7 +1218,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/exporter-trace-otlp-http@0.221.0
+## @opentelemetry/exporter-trace-otlp-http@0.222.0
 
 License: Apache-2.0
 
@@ -1426,7 +1426,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/otlp-exporter-base@0.221.0
+## @opentelemetry/otlp-exporter-base@0.222.0
 
 License: Apache-2.0
 
@@ -1634,7 +1634,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/otlp-transformer@0.221.0
+## @opentelemetry/otlp-transformer@0.222.0
 
 License: Apache-2.0
 
@@ -1842,7 +1842,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/resources@2.10.0
+## @opentelemetry/resources@2.11.0
 
 License: Apache-2.0
 
@@ -2050,7 +2050,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/sdk-logs@0.221.0
+## @opentelemetry/sdk-logs@0.222.0
 
 License: Apache-2.0
 
@@ -2258,7 +2258,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/sdk-metrics@2.10.0
+## @opentelemetry/sdk-metrics@2.11.0
 
 License: Apache-2.0
 
@@ -2466,7 +2466,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/sdk-trace@2.10.0
+## @opentelemetry/sdk-trace@2.11.0
 
 License: Apache-2.0
 
@@ -2674,7 +2674,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/sdk-trace-base@2.10.0
+## @opentelemetry/sdk-trace-base@2.11.0
 
 License: Apache-2.0
 
@@ -2882,7 +2882,7 @@ Apache License
    limitations under the License.
 ```
 
-## @opentelemetry/sdk-trace-node@2.10.0
+## @opentelemetry/sdk-trace-node@2.11.0
 
 License: Apache-2.0
 
@@ -3354,7 +3354,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## @upstash/redis@1.38.2
+## @upstash/redis@1.38.3
 
 License: MIT
 
@@ -3956,7 +3956,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## jose@6.2.8
+## jose@6.2.10
 
 License: MIT
 
@@ -4102,7 +4102,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## multipasta@0.2.7
+## multipasta@0.2.8
 
 License: MIT
 
@@ -4146,7 +4146,7 @@ The above copyright notice and this permission notice shall be included in all c
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ```
 
-## picomatch@4.0.5
+## picomatch@4.0.7
 
 License: MIT
 
@@ -4523,7 +4523,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## undici@8.9.0
+## undici@8.10.0
 
 License: MIT
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-governance",
-  "version": "0.66.1",
+  "version": "0.67.0",
   "description": "Data governance — retention policies (TTL sweep), GDPR subject export + erasure (right-to-be-forgotten), and consent recording. Builds on audit + soft-delete.",
   "keywords": [
     "voltro",
@@ -38,12 +38,12 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/database": "0.66.1",
-    "@voltro/protocol": "0.66.1",
-    "@voltro/runtime": "0.66.1"
+    "@voltro/database": "0.67.0",
+    "@voltro/protocol": "0.67.0",
+    "@voltro/runtime": "0.67.0"
   },
   "peerDependencies": {
-    "effect": "^3.22.0"
+    "effect": "^3.22.1"
   },
   "publishConfig": {
     "access": "public"