sporades 0.6.6 → 0.7.0

package/CHANGES.md

@@ -1,9 +1,161 @@
 # Changes
 
-## Unreleased - 2026-08-04
+## Unreleased - 2026-08-09
 
-Changes since v0.6.5.
+Changes since v0.6.6.
+
+### ⚠️ Breaking Changes
+
+- Add runtime-owned password reset links (2affdf7).
+
+### 🚀 Features
+
+- Sporades hub concept (24bb880).
+- Add runtime bundle module boundaries PRD and tickets (e04a5b8).
+- Add issue 11: extract the shared method set behind an engine seam (06798a2).
+- Add prefactor issue 07 to open a conflict-free conformance seam (62ee7c2).
+- Add Database Adapter Engine Conformance spec (229ed2e).
 
 ### 🐛 Bug Fixes
 
-- User preferences (cebd9f0).
+- Fix Campfire async database mutations (96ebc5c).
+- Fix docs repository context link (ed5e201).
+- Fix refactor follow-up correctness gaps (f87ad5e).
+- Correct the pre-move export count in http-runtime's header (838eb11).
+- Correct the jobs note the ACL batch made stale (9831e30).
+- Correct the batch 6 accessor counts and drop the createHmac import the S3 path took with it (df54951).
+- Correct the batch 5 straggler count and record batches 4-5 findings (47f8811).
+- Fix the photo-library test's schedule race, raise the Node floor, add user preferences as batch 5 (8cbe66f).
+- Correct issue 08 blocker parsing (ec1c359).
+- Fix override taxonomy and ACL fail-closed scope in adapter ADRs (1e001ef).
+- Correct adapter contract ADR against the actual adapters (ded9ea0).
+- Fix engine-agnostic result handling in the Database adapter (b723ba0).
+
+### 🔧 Improvements
+
+- Add shutdown hint (2daa7db).
+- Add exit hint (bb0550b).
+- Verify ticket 05 against a real Postgres, and correct the baseline note (3d1d838).
+- Delete the dead mailJsonSize, and record the dead-code inventory under ticket 05 (014044c).
+- Mark ticket 04 done and record what the nine batches found (d21957c).
+- Record batch 7's plant-caller and comment-suppression findings (ac4c345).
+- Drop two dead imports, and correct three counts the batch made stale (dabe053).
+- Record batch 6's reverse-graph and orphan-blocker rules (04f7211).
+- Move the file and object storage domain into a module, with the sync/async bridge it needed (42f097a).
+- Stop the schedule skew probe scanning eight years of minutes on every bundle build (3e19121).
+- Record open items raised by batches 1-3 (9d2e0b3).
+- Record two known flaky tests for the migration batches (bc6e911).
+- Record the verification policy for ticket 04's batches (40d1f16).
+- Make ticket 04 concrete: eight named batches in landing order (1c3722c).
+- Mark ticket 03 done (ce064ce).
+- Mark ticket 01 done; close issue 17 as superseded by it (ca59c0e).
+- Mark ticket 02 done (c91f102).
+- Mark issue 12 done (e9d0842).
+- Mark issue 16 done (38610b8).
+- Serialize the bundle preamble constants (f8f5daf).
+- Mark issue 15 done; file issue 17 for a live inspection-query injection (71ff7c3).
+- Mark issue 13 done; file issue 16 for the preamble constant duplication (1845e89).
+- Mark issue 14 done (1821ad4).
+- Record the identifier-casing decision on issue 12 (0a4d629).
+- Mark issue 11 done; file issue 15 for the SQL skipper blind spot (a871d9c).
+- Consolidate the removed-override notes in the two service adapters (5eb91bd).
+- Consume an OAuth state in one statement on every engine (58a4149).
+- Take the catalog queries from the dialect (3f2338e).
+- Take the upsert form from the dialect (8eb82ca).
+- Define the Database adapter method set once, behind a dialect (773f46f).
+- Mark issue 10 done; file issues 13 and 14 from its review (09c8370).
+- Mark issue 09 done (a642324).
+- Record the app-table collision hazard on issue 12 (9aa3695).
+- Mark issue 08 done (77c077f).
+- File issue 12 and record how to run the Postgres leg locally (42664c0).
+- Declare issue 11's dependency on issue 08 explicitly (e2d1a1d).
+- Record the Log index tie-break decision on issue 10 (171976a).
+- File issues 09 and 10 for items routed out of issues 05 and 06 (d508a7d).
+- Mark issue 05 done (603bbe4).
+- Mark issues 03 and 04 done; add issue 08 for Postgres column mapping (79d228d).
+- Mark issue 07 done (07f88dc).
+- Break Database Adapter Engine Conformance into tickets (ca1904f).
+- Rebuild generated bundle and dist output (71f3820).
+
+### 📝 Documentation
+
+- Split feature reference into focused pages (2209883).
+- Expand template and framework guide (ad3df2f).
+- Document database backend configuration (a500d47).
+- Move SMTP documentation outside of sealed envelope sub-sections (dc38db9).
+- Close ticket 05: update the ADRs, delete three dead functions, record the trade (a401b16).
+- Record what batch 9 cost and what it found, in ADR-0041 and ADR-0042 (16f7e3e).
+- Record batch 8's shape finding, its cycle, and what its probe would have dropped (9f743e9).
+- Record batch 7 in ADR-0041, and correct two stale batch numbers (c6e123d).
+- Record batch 6's findings in ADR-0041 and ADR-0042 (abcb177).
+- Record batch 5's findings in ADR-0041 (c95ec27).
+- Move the jobs and schedules domain into a module (0ed63e2).
+- Move the auth domain into a module (81ae7c6).
+- Move the mail domain into a module (6e4645e).
+- Move the internal log-index guard into a module, and generalise the walker guard subjects (ebf379f).
+- Close the census's blind spot, make the freshness claim true, and correct ADR-0041 (c4febe8).
+- Harden the inspection-surface probe, and record what the sync transform costs (217f738).
+- Move the read-only inspection validator into a module (ffd9cf9).
+- Describe what the walker census detects instead of claiming completeness (e7a2c3c).
+- Make the WebSocket broadcast comparison deterministic (32ad5a7).
+- Widen the walker census to patterns, and state what it cannot see (6d53b94).
+- Reach the module-graph bundle from the shipping CLI path (a33bae3).
+- Make the walker guard walker-coupled, and record the sixth walker (b5b5866).
+- Collapse the two SQL walkers into one dialect-parameterized tokenizer (059b823).
+- Measure the gate against the pre-work base, not the previous round (0de1d66).
+- Refuse SQL the two line-comment rules read differently (80c14e4).
+- Quote every identifier in emitted SQL through the dialect (d11981a).
+- Derive the nesting test instead of describing it (b9fb455).
+- Refuse SQL the walk and an engine lex differently (4506b18).
+- Close the inspection query statement boundary (18e710f).
+- Record the dollar-quote dialect divergence in the PRD (883834d).
+- Describe a Postgres statement without breaking on its terminator (39497c5).
+- Record the engine seam as ADR-0037 (788c97f).
+- Sequence the Log index so its order is engine-independent (a17d353).
+- Support local Capsule templates (bf3a503).
+- Close issue 01 and fix the scope gap its reviews exposed (10938fe).
+- Separate the write-only hazard from the deriving hazard (8186b85).
+- Record Database adapter contract and conformance ADRs (7d3575d).
+- Update documentation files in the working tree: docs/api/assets/navigation.js, docs/api/assets/search.js, docs/api/functions/client.createHooks.html, docs/api/functions/client.createInfernoAdapters.html, docs/api/functions/client.createLitControllers.html, docs/api/functions/client.createSolidPrimitives.html, docs/api/functions/client.createSvelteStores.html, docs/api/functions/client.createVueComposables.html, docs/api/functions/client.isAuthenticated.html, docs/api/functions/client.onMessage.html, docs/api/functions/client.sendMessage.html, docs/api/functions/server.Boolean.html, docs/api/functions/server.capsule.html, docs/api/functions/server.Date.html, docs/api/functions/server.endpoint.html, docs/api/functions/server.job.html, docs/api/functions/server.Json.html, docs/api/functions/server.message.html, docs/api/functions/server.mutation.html, docs/api/functions/server.Number.html, docs/api/functions/server.query.html, docs/api/functions/server.Reference.html, docs/api/functions/server.requireAuth.html, docs/api/functions/server.schedule.html, docs/api/functions/server.String.html, docs/api/functions/server.table.html, docs/api/modules/server.html, docs/api/types/client.AppMessage.html, docs/api/types/client.AppMessageStream.html, docs/api/types/client.AuthApi.html, docs/api/types/client.FileMetadata.html, docs/api/types/client.FileReference.html, docs/api/types/client.FilesApi.html, docs/api/types/client.HookPrimitives.html, docs/api/types/client.InfernoAdapterHost.html, docs/api/types/client.InfernoAuthAdapter.html, docs/api/types/client.InfernoMutationAdapter.html, docs/api/types/client.InfernoObservedAdapter.html, docs/api/types/client.InfernoQueryAdapter.html, docs/api/types/client.LitAuthController.html, docs/api/types/client.LitMutationController.html, docs/api/types/client.LitQueryController.html, docs/api/types/client.LitReactiveController.html, docs/api/types/client.LitReactiveControllerHost.html, docs/api/types/client.MutationsApi.html, docs/api/types/client.MutationState.html, docs/api/types/client.PreferencesApi.html, docs/api/types/client.PreferencesResult.html, docs/api/types/client.PublicFileUrl.html, docs/api/types/client.PublicUrlOptions.html, docs/api/types/client.QueriesApi.html, docs/api/types/client.QueryState.html, docs/api/types/client.SolidAccessor.html, docs/api/types/client.SolidAuth.html, docs/api/types/client.SolidMutation.html, docs/api/types/client.SolidMutationState.html, docs/api/types/client.SolidPrimitiveInputs.html, docs/api/types/client.SolidSignalSetter.html, docs/api/types/client.SporadesHooks.html, docs/api/types/client.SporadesInfernoAdapters.html, docs/api/types/client.SporadesLitControllers.html, docs/api/types/client.SporadesSolidPrimitives.html, docs/api/types/client.SporadesSvelteStores.html, docs/api/types/client.SporadesVueComposables.html, docs/api/types/client.Subscription.html, docs/api/types/client.SvelteAuthStore.html, docs/api/types/client.SvelteMutationStore.html, docs/api/types/client.SvelteReadable.html, docs/api/types/client.UploadCompleteEvent.html, docs/api/types/client.UploadOptions.html, docs/api/types/client.UploadProgressEvent.html, docs/api/types/client.UseAuthState.html, docs/api/types/client.VueComposablePrimitives.html, docs/api/types/client.VueMutationState.html, docs/api/types/server.Capsule.html, docs/api/types/server.CapsuleContext.html, docs/api/types/server.CapsuleDefinition.html, docs/api/types/server.CapsuleHooks.html, docs/api/types/server.ContextKind.html, docs/api/types/server.ContextMiddleware.html, docs/api/types/server.EndpointContext.html, docs/api/types/server.EndpointDefinition.html, docs/api/types/server.EndpointHandler.html, docs/api/types/server.EndpointOptions.html, docs/api/types/server.EndpointRequest.html, docs/api/types/server.JobApi.html, docs/api/types/server.JobDefinition.html, docs/api/types/server.JobState.html, docs/api/types/server.JobStatus.html, docs/api/types/server.JobSummary.html, docs/api/types/server.MessageApi.html, docs/api/types/server.MessageDefinition.html, docs/api/types/server.MessageHandler.html, docs/api/types/server.MessageScope.html, docs/api/types/server.MiddlewareContext.html, docs/api/types/server.MutationDefinition.html, docs/api/types/server.MutationHandler.html, docs/api/types/server.MutationHook.html, docs/api/types/server.MutationHookEvent.html, docs/api/types/server.MutationResult.html, docs/api/types/server.PasswordResetLink.html, docs/api/types/server.PasswordResetMailOptions.html, docs/api/types/server.PrivilegedApi.html, docs/api/types/server.PrivilegedAuthContext.html, docs/api/types/server.PrivilegedContext.html, docs/api/types/server.PrivilegedFileApi.html, docs/api/types/server.PrivilegedFileError.html, docs/api/types/server.PrivilegedFileMetadata.html, docs/api/types/server.PrivilegedOwnedFileMetadata.html, docs/api/types/server.PrivilegedPublicFileUrl.html, docs/api/types/server.PrivilegedResult.html, docs/api/types/server.PrivilegedRunOptions.html, docs/api/types/server.QueryDefinition.html, docs/api/types/server.QueryHandler.html, docs/api/types/server.ScheduleContext.html, docs/api/types/server.ScheduleDefinition.html, docs/api/types/server.ScheduleInspectionApi.html, docs/api/types/server.ScheduleLatestOccurrence.html, docs/api/types/server.ScheduleOccurrence.html, docs/api/types/server.SchedulePayloadFactory.html, docs/api/types/server.ScheduleSummary.html, docs/api/types/server.ServerAuthApi.html, docs/api/variables/client.auth.html, docs/api/variables/client.files.html, docs/api/variables/client.journey.html, docs/api/variables/client.mutations.html, docs/api/variables/client.preferences.html, docs/api/variables/client.queries.html.
+
+### 🧪 Tests
+
+- Delete the emitted function list and close the census hole it was hiding (67cc386).
+- Delete the emitted-list builder, its skew probes and the free-binding guard (4f0cd77).
+- Make the module-graph bundle the only server bundle a build produces (c5484ee).
+- Prove batch 9's guards by sabotage, and sharpen two probe fixtures that could not see one (d76a670).
+- Move the Database adapters and dialect into a module (1c3b80b).
+- Send the auth storage bootstrap home, and give the Log index's storage a module (38784d2).
+- Bring the writing half of the stored-value codec beside the reading half (d733a38).
+- Move the HTTP and security policy domain into a module (bcbe1ca).
+- Move the ACL and privileged-audit domain into acl-runtime.ts (b044841).
+- Extract the two non-domain blockers the ACL domain's graph left outside it (8a8fa7d).
+- Extend the carried-private-helper guard to the storage domain's subjects (c737b18).
+- Compare the storage domain between the two bundles, and cover it in the census (e7fcb1a).
+- Compare the user-preferences domain between the two bundles, and cover it in the census (d395d1b).
+- Move the user-preferences domain into a module, and finish the auth region with it (3e118db).
+- Resolve the two Job storage bootstraps by import rather than through the emitted list (e656405).
+- Build the server bundle from a module graph (efba985).
+- Run the keyword scan under both line-comment rules (833d1b1).
+- Spell a dollar-quote tag with the alphabet the guard already counts (0d9b088).
+- Teach the SQL skipper Postgres's dollar quoting and E-strings (76b58f0).
+- Make the emitted bundle define every identifier it references (04c7ad3).
+- Guard the Log index additive migration from a pre-change table (39a70e3).
+- Name row and value normalization as the seam's third part (512cfe2).
+- Take the add-missing-column strategy from the dialect (75316aa).
+- Derive the rollback case's before-state instead of fixing it (db5d23b).
+- Route shared schema migration through the adapter's transaction (a8c5b9c).
+- Close the Postgres runtime column-name gap with a derived check (2de0d07).
+- Rename database.sqlite to database.adapter throughout the runtime (bb48f94).
+- Tie coverage credit to per-engine execution, and seed the tables the DDL cases missed (8c33c42).
+- Require a conformance case for every Database adapter method (f39c8c1).
+- Extend conformance coverage to app tables and runtime metadata (d35de97).
+- Extend conformance coverage to auth storage (a6ff912).
+- Extend conformance coverage to File metadata storage (0cb2421).
+- Open a conflict-free conformance extension seam (7815529).
+- Run one conformance specification against every Database adapter (5f41be2).
+- Resolve the reset-code cap against the stored row, not the pending query (80a6503).
+
+### 📦 Packaging
+
+- Make a browser global in a runtime module a compile error, not a shipped one (d9e7dec).

package/README.md

@@ -57,6 +57,10 @@ sporades host push --restart
 
 - [User guide](https://mgscox.github.io/sporades/user-guide): build, run, inspect, deploy, auth,
   preferences, files, endpoints, messages, and common workflows.
+- [Feature reference](https://mgscox.github.io/sporades/guide/reference): exhaustive contracts and
+  command lookup, split into focused topic pages.
+- [LLM documentation manifest](https://mgscox.github.io/sporades/llms.txt): release-matched Markdown
+  sources for agents and other documentation tools.
 - [Architecture](https://mgscox.github.io/sporades/architecture): platform model, runtime modes, Host
   server design, and ownership boundaries.
 - [Runtime layout](https://mgscox.github.io/sporades/runtime-layout): generated files, mounts, Host
@@ -210,6 +214,15 @@ sporades create notes --template todo
 cd notes
 ```
 
+Use a reusable local Capsule template by passing its directory path. Sporades
+copies the template while honouring its `.gitignore`, excludes `.git`,
+`node_modules`, `.sporades`, and `.env.sporades.server`, rewrites the project
+name, and merges the current Sporades dependency and standard scripts:
+
+```sh
+sporades create notes --template /absolute/path/to/capsule-template
+```
+
 Run a local Dev session:
 
 ```sh
@@ -246,8 +259,9 @@ sporades host push --host personal --subname notes --verify --json
 
 Sporades is early, active platform work. It is useful for fast prototypes,
 agent-driven app loops, local production-like testing, and private hosted
-Capsules, but it is not trying to be a full production platform (yet). Check the 
-[Roadmap](docs/ROADMAP.md) for in-flight and planned features.
+Capsules, but it is not trying to be a full production platform (yet). Check the
+[Roadmap](https://mgscox.github.io/sporades/ROADMAP) for in-flight and planned
+features.
 
 The current focus is keeping the authoring surface small, the runtime
 inspectable, and the operational path friendly to both developers and agents.

package/bin/sporades-host-helper.js

@@ -161,15 +161,31 @@ function validatePublicTreeFileSet(files) {
 }
 
 // src/server-runtime-source.ts
-import { createHash, createHmac, createPrivateKey, randomBytes, randomUUID, scryptSync, sign, timingSafeEqual, verify } from "node:crypto";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+
+// src/file-storage-runtime.ts
+var nodeCryptoModule = process.getBuiltinModule("node:crypto");
+
+// src/auth-runtime.ts
+var nodeCryptoModule2 = process.getBuiltinModule("node:crypto");
 var EMAIL_SIGN_IN_THROTTLE_WINDOW_MS = 15 * 60 * 1e3;
-function logPayloadMaxBytes(config = {}) {
-  const configured = Number(config.logs?.payloadMaxBytes ?? config.logging?.payloadMaxBytes);
-  return Number.isInteger(configured) && configured > 0 ? configured : 4096;
-}
-function logRedactedValue() {
-  return "[REDACTED]";
+var PASSWORD_RESET_DEFAULT_TTL_MS = 60 * 60 * 1e3;
+var PASSWORD_RESET_MIN_TTL_MS = 5 * 60 * 1e3;
+var PASSWORD_RESET_MAX_TTL_MS = 24 * 60 * 60 * 1e3;
+
+// src/runtime-log-policy.ts
+function isSensitiveLogKey(key) {
+  return /(^|[-_])(?:password|passwd|token|secret|authorization|cookie|client[-_]?secret|api[-_]?token|private[-_]?key|authorized[-_]?keys?|request[-_]?body|raw[-_]?body|stack(?:trace)?)([-_]|$)/i.test(String(key)) || /(?:password|passwd|token|secret|authorization|cookie|clientSecret|apiToken|privateKey|authorizedKeys|requestBody|rawRequestBody|stackTrace)/i.test(String(key));
 }
+
+// src/database-runtime.ts
+var nodeCryptoModule3 = process.getBuiltinModule("node:crypto");
+var nodeFsModule = process.getBuiltinModule("node:fs");
+
+// src/jobs-runtime.ts
+var nodeCryptoModule4 = process.getBuiltinModule("node:crypto");
+
+// src/acl-runtime.ts
 var PRIVILEGED_AUDIT_SCHEMA = "sporades.privileged-audit.v1";
 var PRIVILEGED_AUDIT_ACTOR_KINDS = /* @__PURE__ */ new Set(["privileged-server-role", "captured-user", "platform", "unknown"]);
 var PRIVILEGED_AUDIT_OUTCOMES = /* @__PURE__ */ new Set(["started", "completed", "errored", "finished"]);
@@ -240,6 +256,16 @@ function auditString(value, fallback) {
   const text = value === null || value === void 0 ? "" : String(value);
   return text.trim() ? text : fallback;
 }
+var ACL_HELPER_STATE = Symbol("sporades.aclHelperState");
+
+// src/server-runtime-source.ts
+function logPayloadMaxBytes(config = {}) {
+  const configured = Number(config.logs?.payloadMaxBytes ?? config.logging?.payloadMaxBytes);
+  return Number.isInteger(configured) && configured > 0 ? configured : 4096;
+}
+function logRedactedValue() {
+  return "[REDACTED]";
+}
 function createLogEnvelope(input) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const config = input.config ?? {};
@@ -309,9 +335,6 @@ function logDataContainsServerEnvValue(value, serverEnv) {
   );
   return values.some((secret) => serialized.includes(String(secret)));
 }
-function isSensitiveLogKey(key) {
-  return /(^|[-_])(?:password|passwd|token|secret|authorization|cookie|client[-_]?secret|api[-_]?token|private[-_]?key|authorized[-_]?keys?|request[-_]?body|raw[-_]?body|stack(?:trace)?)([-_]|$)/i.test(String(key)) || /(?:password|passwd|token|secret|authorization|cookie|clientSecret|apiToken|privateKey|authorizedKeys|requestBody|rawRequestBody|stackTrace)/i.test(String(key));
-}
 function isSensitiveLogString(value) {
   return /-----BEGIN [A-Z ]*PRIVATE KEY-----/.test(value) || /\b(?:ssh-rsa|ssh-ed25519|ecdsa-sha2-[^\s]+)\s+[A-Za-z0-9+/=]{32,}/.test(value) || /(^|\n)\s*at\s+.+:\d+:\d+/.test(value);
 }
@@ -348,7 +371,6 @@ function capLogEnvelope(envelope, maxBytes) {
   capped.message = capped.message.slice(0, 256);
   return capped;
 }
-var ACL_HELPER_STATE = Symbol("sporades.aclHelperState");
 
 // src/cli/cli-support.ts
 function errorDetails(error) {
@@ -391,7 +413,7 @@ function writeEnvelope(result, failed = false) {
 }
 
 // src/cli/cli-version.ts
-var CLI_VERSION = "0.6.6";
+var CLI_VERSION = "0.7.0";
 
 // src/cli/schedule-inspection-envelope.ts
 function sanitizeScheduleInspectionEnvelope(envelope, invalid) {