solid-objects 0.12.1 → 0.13.0

package/CHANGELOG.md

@@ -2,6 +2,44 @@
 
 ## Unreleased
 
+## 0.13.0 - 2026-08-16
+
+- Replace the exhaustive README with an outcome-first introduction, explicit
+  fit and correctness boundaries, sourced comparisons, and factual design
+  provenance.
+- Add a packaged SQLite quickstart, a clean-install tarball smoke test, and a
+  deterministic multi-process crash and fencing demonstration.
+- Add a reproducible benchmark harness, record locally observed SQLite,
+  PostgreSQL 18, and MySQL 8.4 measurements, and label other configurations as
+  unmeasured.
+- Add support, contribution, and security policies plus stronger local
+  Markdown link validation.
+- **Breaking:** make unwrapped observables invalidation-only by default. They
+  continue to detect changes and refresh dependent components without storing
+  or sending their values. Wrap a projection in `broadcastValue()` to share
+  its scalar value with every authorized actor subscriber.
+
+- Add `broadcastInvalidation()` so actors can drive granular component refresh
+  without persisting or sending the observable value.
+- Add `broadcastValue()` for the explicit value-bearing observable contract.
+- Extend durable and browser invalidation envelopes with invalidation-only
+  observable names.
+- Add the framework-neutral `solid-objects/web` operator dashboard with Fetch
+  and Node/Connect mounting, runtime statistics, instance and mailbox detail,
+  reminder/effect/broadcast/dead-letter/process views, filtering, paging,
+  instance pause/resume, and idempotent dead-letter retry.
+- Deny dashboard data by default through route-specific administration policy,
+  require session-backed masked CSRF tokens for actions, escape stored values,
+  and serve a strict content security policy.
+- Add immutable dashboard extension routes, tabs, renderer overrides, and
+  middleware, plus configurable Chart.js dashboards and live statistics.
+- Preserve downstream request bodies when the Node/Connect dashboard adapter
+  cascades a request outside its mount path.
+- Add authorized and public read-only dashboard access modes that omit mutation
+  controls, reject POST actions, and require no CSRF session for public demos.
+- Refocus the README and package metadata on native Node.js concurrency,
+  realtime state synchronization, and database-backed infrastructure.
+
 ## 0.12.1 - 2026-08-13
 
 - Accept camelCase rejection codes and fail malformed codes immediately with