deepspace 0.19.0 → 0.19.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,28 @@
1
1
  # deepspace
2
2
 
3
+ ## 0.19.1
4
+
5
+ ### Patch Changes
6
+
7
+ - Enforce `users` read permissions in user-list responses and `writableFields`
8
+ on record creation. Reauthorize job snapshots and live events so revoked users
9
+ cannot retain queue access. Generated canvas and cron routes forward current
10
+ app roles without removing anonymous read-only access. Generic authenticated
11
+ Yjs rooms remain available when no `documents` schema exists, while a missing
12
+ document in a documents-backed app fails closed. Existing apps can apply the
13
+ documented app-owned route edits manually; `deepspace app update` does not
14
+ rewrite them.
15
+ - Let CLI commands exit naturally after releasing their handles, make Windows
16
+ `dev kill` handle free ports correctly, apply scaffold migrations in CRLF
17
+ checkouts, and report partial Git worktree removals accurately.
18
+ - Fix the clear post-release AX issues: avoid anonymous presence token failures,
19
+ remove direct-build secret artifacts and secure existing credential files, make the
20
+ Documents feature honor mutation readiness and confirmed ACL writes, and pin
21
+ the AI SDK family away from its moderate/high advisory path. Keep anonymous
22
+ RecordRooms from exposing the user directory, and limit non-admin user lists to
23
+ the public identity fields required for collaboration. Keep an app's direct AI
24
+ SDK dependency on the compatible version when `app update` advances DeepSpace.
25
+
3
26
  ## 0.19.0
4
27
 
5
28
  ### Minor Changes