pipework 0.83.0 → 0.84.1

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.84.1
+
+- **Fixed: under the test harness, a transaction started inside a transaction block but not awaited by it no longer loses its savepoint.** The block now waits for it before releasing, and a call made after its block ended nests in the nearest open block or queues. A route calling `accessLinks.asLink` (whose child trace closes after the block) answered 500 in tests from 0.75.2 on (#526).
+
+## 0.84.0
+
+- **New: `auth.emailLinks(config)`**, emailed single-use links that prove control of an address: password reset and address verification (#511).
+  - `request` answers the same, and takes at least `minResponseMs`, whether or not the address has an account or is over its limit; limits per address and per client are counted in Postgres outside the request transaction.
+  - The token is `HMAC(secret, link id, nonce)`: the link table keeps only its hash, and the stored mail message keeps only a reference, so the database alone cannot produce a working link. A new link for the same purpose ends the older ones; `endResets` ends a user's reset links on a password change.
+  - `check` reports a link's state without using it; `use` is one atomic step; `completeReset` stores the new hash through the app's `store`, ends the other reset links and signs the user out everywhere else.
+  - Requests and uses are flow steps and audited (`PasswordReset:requested`, `:completed`, `EmailAddress:verification-requested`, `:verified`), never with the token, the password or an unknown address. Tables behind the `auth.emailLinks` blueprint flag.
+- **New: mail late data.** `mail.registerLateData(name, fn)` and `send({ …, lateData })` supply template data computed at delivery and never stored.
+
 ## 0.83.0
 
 - **Fixed: a reaped job (worker lost) is retried.** `reap()` now applies the same rule as a failure: retried with backoff while attempts remain, then dead-lettered with a notification. `error_payload.reason` is `reaped`. `reap()` returns the reaped jobs (`ReapedJob[]`) instead of a count (#503).