solid-objects 1.0.2 → 1.0.4

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 1.0.4 - 2026-10-18
+
+- The README no longer states the first public release date, that no
+  production use by other people is known, that longer soak tests are open
+  work, or that version 1.0 makes no claim of measured scale.
+  `docs/versioning.md` keeps the other three limits, and the README links it.
+  The comparison pages keep the first public release date.
+
+## 1.0.3 - 2026-10-18
+
+- Add `docs/maintenance.md`. It tells you who maintains the package, how CI
+  checks each change, how a release is published, what you keep if
+  maintenance stops, and how to become a maintainer. The README and the
+  comparison pages now link to this page. They and `docs/versioning.md` no
+  longer state a count of maintainers. A new test fails when a page states
+  one.
+
 ## 1.0.2 - 2026-10-15
 
 - Add four comparison pages in `docs/compare/`: Restate virtual objects, DBOS

package/README.md

@@ -13,12 +13,11 @@ explains the model and when to use it.
 
 **Status.** Version 1.0: the public API follows semantic versioning and does
 not break before 2.0. [Versioning](docs/versioning.md) gives the limits of the
-promise. First public release: August 13, 2026. One maintainer.
+promise.
 
 **Production use.** One first-party application with more than 100,000 users
-runs it in production. That is a count of users, not a measure of load. No
-production use by other people is known. The [benchmarks](docs/benchmarks.md)
-are development measurements, and longer soak tests are open work.
+runs it in production. That is a count of users, not a measure of load. The
+[benchmarks](docs/benchmarks.md) are development measurements.
 
 **It is not** Solid Queue, SolidJS, or the `service_actor` gem, and it is not
 affiliated with Rails or Cloudflare.
@@ -294,6 +293,7 @@ then shows a tested Solid Objects version with its limits:
 - [Operations and recovery](docs/operations.md)
 - [Observability and diagnostics](docs/observability.md)
 - [Detailed architecture](docs/architecture.md)
+- [Maintenance and continuity](docs/maintenance.md)
 - [Detailed documentation](docs/)
 
 The benchmarks, parity ledger, dashboard, browser setup, and exhaustive API
@@ -303,9 +303,7 @@ notes remain in `docs/`, where long documentation can be long on purpose.
 
 Version 1.0 promises a stable public API. The correctness core has automated
 coverage across the supported databases, browser runtime, recovery paths, and
-packaged artifact. It makes no claim of measured scale: the
-[benchmarks](docs/benchmarks.md) are development measurements, and longer soak
-tests are open work. [Versioning](docs/versioning.md) says what a release can
+packaged artifact. [Versioning](docs/versioning.md) says what a release can
 change. The Cloudflare backend is experimental and is outside that promise.
 
 Solid Objects is released under the [MIT License](MIT-LICENSE). It is an

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "1.0.2";
+export declare const VERSION = "1.0.4";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "1.0.2";
+export const VERSION = "1.0.4";
 //# sourceMappingURL=version.js.map

package/docs/compare/dbos.md

@@ -353,7 +353,7 @@ How it works:
 
 - First public release of the npm package: August 13, 2026.
 - Version 1.0.0: October 13, 2026. The public API follows [semantic versioning](../versioning.md).
-- One maintainer.
+- [Maintenance and continuity](../maintenance.md) tells you who maintains the project and how a release is made.
 - One first-party application with more than 100,000 users runs it in production. That is a count of users, not a measure of load. No production use by other people is known.
 - The [benchmarks](../benchmarks.md) are development measurements. Longer soak tests are open work.
 

package/docs/compare/graphile-worker.md

@@ -258,7 +258,7 @@ How it works:
 
 - First public release of the npm package: August 13, 2026.
 - Version 1.0.0: October 13, 2026. The public API follows [semantic versioning](../versioning.md).
-- One maintainer.
+- [Maintenance and continuity](../maintenance.md) tells you who maintains the project and how a release is made.
 - One first-party application with more than 100,000 users runs it in production. That is a count of users, not a measure of load. No production use by other people is known.
 - The [benchmarks](../benchmarks.md) are development measurements. Longer soak tests are open work.
 

package/docs/compare/restate.md

@@ -254,7 +254,7 @@ A model call can run again after a crash, because effects run at least once. If
 
 - First public release of the npm package: August 13, 2026.
 - Version 1.0.0: October 13, 2026. The public API follows [semantic versioning](../versioning.md).
-- One maintainer.
+- [Maintenance and continuity](../maintenance.md) tells you who maintains the project and how a release is made.
 - One first-party application with more than 100,000 users runs it in production. That is a count of users, not a measure of load. No production use by other people is known.
 - The [benchmarks](../benchmarks.md) are development measurements. Longer soak tests are open work.
 

package/docs/compare/rivetkit.md

@@ -246,7 +246,7 @@ How it works:
 
 - First public release of the npm package: August 13, 2026.
 - Version 1.0.0: October 13, 2026. The public API follows [semantic versioning](../versioning.md).
-- One maintainer.
+- [Maintenance and continuity](../maintenance.md) tells you who maintains the project and how a release is made.
 - One first-party application with more than 100,000 users runs it in production. That is a count of users, not a measure of load. No production use by other people is known.
 - The [benchmarks](../benchmarks.md) are development measurements. Longer soak tests are open work.
 

package/docs/maintenance.md

@@ -0,0 +1,70 @@
+# Maintenance and continuity
+
+This page tells you who maintains Solid Objects, how a release is made, and
+what you keep if maintenance stops. It also tells you how to help maintain the
+project.
+
+## Who maintains it
+
+Lucas Carlson ([@cardmagic](https://github.com/cardmagic)) is the lead
+maintainer of the npm package `solid-objects` and of the Ruby gem
+[`solid_objects`](https://github.com/cardmagic/solid-objects-ruby). The two
+packages use the same model and the same correctness contract. A change to the
+model goes into both packages, and the [parity ledger](parity.md) records each
+difference between them.
+
+The same maintainer sells [Solid Objects Pro](https://solidobjects.pro), a
+commercial package that batches operations at scale. Pro depends on this
+package. This package does not depend on Pro, and it needs no account, license
+key, or service from the maintainer.
+
+## How a change is checked
+
+CI runs on each push and each pull request:
+
+- Types, formatting, documentation links, the unit tests with coverage, and
+  the packaged artifact.
+- The suite on the oldest supported Node.js version.
+- The database suites on PostgreSQL and MySQL, and the Redis wake-up suite.
+- The browser runtime in Chromium.
+
+[Supported versions](support.md) lists the CI matrix. The
+[correctness contract](correctness.md) lists the guarantees that the tests
+check.
+
+## How a release is made
+
+1. The maintainer pushes a version tag, for example `v1.0.3`.
+2. GitHub Actions runs all test jobs again on that tag.
+3. If all test jobs pass, GitHub Actions publishes the package to npm with
+   trusted publishing. The repository keeps no npm token, and npm shows a
+   provenance attestation for each version.
+4. The same job makes a GitHub release from the changelog.
+
+[Releasing](releasing.md) gives the full procedure. [Versioning](versioning.md)
+tells you what a release can change. [CHANGELOG.md](../CHANGELOG.md) lists each
+release.
+
+## What you keep if maintenance stops
+
+- **Your data.** With the SQL runtime, actor state, mailboxes, reminders, and
+  effects are rows in your application's database. No service of the
+  maintainer holds your data.
+- **The code.** The [MIT License](../MIT-LICENSE) lets anyone use, change,
+  fork, and publish the code.
+- **The checks.** The tests and the CI configuration are in this repository. A
+  fork can check its changes with the same suite.
+
+## Help maintain Solid Objects
+
+The project wants more maintainers. Experience with TypeScript and Node.js,
+with locks and transactions in PostgreSQL or MySQL, or with Rails helps.
+
+1. Read [CONTRIBUTING.md](../CONTRIBUTING.md).
+2. Send a small pull request: a fix, a test, or a correction to a guide.
+3. After some of your pull requests are merged, open an
+   [issue](https://github.com/cardmagic/solid-objects-js/issues) to ask to
+   become a maintainer.
+
+To report a vulnerability, use the private process in
+[SECURITY.md](../SECURITY.md).

package/docs/versioning.md

@@ -41,8 +41,8 @@ change. A patch release does not raise a minimum version.
 
 Version 1.0 is a promise about the API. It is not a claim of measured scale.
 The [benchmarks](benchmarks.md) are development measurements and do not
-guarantee capacity. Longer soak tests are open work. The project has one
-maintainer, and no production use by other people is known.
+guarantee capacity. Longer soak tests are open work. No production use by
+other people is known.
 
 ## Releases before 1.0
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "solid-objects",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Fix race conditions across Node.js processes: ordered operations, expiring holds, and state that survives a restart, in your SQL database. A SQL-backed virtual actor library for TypeScript and Node.js.",
   "type": "module",
   "license": "MIT",