deepspace 0.19.0 → 0.19.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,37 @@
1
1
  # deepspace
2
2
 
3
+ ## 0.19.2
4
+
5
+ ### Patch Changes
6
+
7
+ - Harden post-release upgrade and scaffold behavior: pin only real package
8
+ dependencies, expose PresenceRoom offline state, restrict fresh user rows to
9
+ their owners, wire feature roles and cron tasks correctly, and remove generated
10
+ build-preview secrets from deploy output while guiding existing Vite configs.
11
+
12
+ ## 0.19.1
13
+
14
+ ### Patch Changes
15
+
16
+ - Enforce `users` read permissions in user-list responses and `writableFields`
17
+ on record creation. Reauthorize job snapshots and live events so revoked users
18
+ cannot retain queue access. Generated canvas and cron routes forward current
19
+ app roles without removing anonymous read-only access. Generic authenticated
20
+ Yjs rooms remain available when no `documents` schema exists, while a missing
21
+ document in a documents-backed app fails closed. Existing apps can apply the
22
+ documented app-owned route edits manually; `deepspace app update` does not
23
+ rewrite them.
24
+ - Let CLI commands exit naturally after releasing their handles, make Windows
25
+ `dev kill` handle free ports correctly, apply scaffold migrations in CRLF
26
+ checkouts, and report partial Git worktree removals accurately.
27
+ - Fix the clear post-release AX issues: avoid anonymous presence token failures,
28
+ remove direct-build secret artifacts and secure existing credential files, make the
29
+ Documents feature honor mutation readiness and confirmed ACL writes, and pin
30
+ the AI SDK family away from its moderate/high advisory path. Keep anonymous
31
+ RecordRooms from exposing the user directory, and limit non-admin user lists to
32
+ the public identity fields required for collaboration. Keep an app's direct AI
33
+ SDK dependency on the compatible version when `app update` advances DeepSpace.
34
+
3
35
  ## 0.19.0
4
36
 
5
37
  ### Minor Changes