deepspace 0.30.2 → 0.31.1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # deepspace
 
+## 0.31.1
+
+### Patch Changes
+
+- CLI failures now preserve their actual recovery path: auth-service outages retain their transport or service code, and local credential-store failures report `credential_unreadable` or `credential_unwritable` instead of suggesting another login. Deploy's post-upload refusals now use the standard envelope and exit tiers, while platform URL resolution, integrations routing, and deploy failure handling each have one shared implementation.
+
+## 0.31.0
+
+### Minor Changes
+
+- Private (`scope=self`) file URLs now render in `<img>`, `<audio>`, and `<video>` for the signed-in user — no tokens in URLs and no signed-URL scheme to build: the files proxy identifies a same-origin GET/HEAD by the app-origin session cookie via the new `resolveSessionReadAuth` helper (bearer still wins; uploads and deletes stay bearer-only; sibling `*.app.space` apps are refused by the `Sec-Fetch-Site` gate). The files API also gains bodiless `HEAD` responses and GET byte ranges (`206`/`416`, with a stale or concurrently replaced `If-Range` representation falling back to a whole `200`) so media elements can seek. Existing apps adopt it via the `2026-09-files-session-cookie-reads` migration.
+
 ## 0.30.2
 
 ### Patch Changes

package/dist/{chunk-HCV4V2SU.js → chunk-7KVD253L.js}

@@ -1274,7 +1274,7 @@ function renderInlineMarkdown(value) {
 import { useEffect as useEffect6, useRef as useRef5, useState as useState5 } from "react";
 
 // package.json
-var version = "0.30.2";
+var version = "0.31.1";
 
 // src/documentation/runtime/navigation.tsx
 import { Fragment as Fragment4, jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
@@ -1954,4 +1954,4 @@ export {
   DefaultDocumentation,
   DocumentationContent
 };
-//# sourceMappingURL=chunk-HCV4V2SU.js.map
+//# sourceMappingURL=chunk-7KVD253L.js.map