sporades 0.8.0 → 0.8.3

package/CHANGES.md

@@ -1,7 +1,31 @@
 # Changes
 
-## Unreleased - 2026-08-14
+## Unreleased - 2026-08-15
 
-Changes since v0.7.2.
+Changes since v0.8.1.
+
+### 🚀 Features
+
+- Add exact pagination and join admission (63f68a0).
+
+### 🐛 Bug Fixes
+
+- Resolve npm audit vulnerabilities (a6a4b51).
+
+## 0.8.1 - 2026-08-14
+
+Corrects the incomplete `0.8.0` package release with the merged `main` runtime,
+generated artifacts, and documentation.
+
+### 📝 Documentation
+
+- Require current password to change email credentials (bfba651).
+
+### ✨ Built-in Teams
+
+- Add runtime-owned Teams for Capsule collaboration: multi-Team memberships,
+  admin lifecycle, email-bound Join links, membership application roles, and
+  explicit Team decisions in table and File ACLs. Teams are built in but do
+  not select a current Team or automatically partition Capsule data; Sporades
+  never sends Join-link email. See the [Built-in Teams reference](https://mgscox.github.io/sporades/reference/teams).
 
-No changes detected.

package/README.md

@@ -51,6 +51,9 @@ sporades host push --restart
   logs, database inspection, and non-interactive commands are first-class.
 - **Comprehensive SDK**: built-in authentication, database, user preferences,
   and storage.
+- **Built-in collaboration, explicitly authorized**: runtime-owned Teams,
+  email-bound Join links, membership application roles, and explicit Team ACL
+  decisions—without a hidden current Team or automatic data partitioning.
 - **Realtime everything**: configuration free - automatic notifications, even for Postgress and AWS-S3
 
 ## Documentation
@@ -59,6 +62,8 @@ sporades host push --restart
   preferences, files, endpoints, messages, and common workflows.
 - [Feature reference](https://mgscox.github.io/sporades/guide/reference): exhaustive contracts and
   command lookup, split into focused topic pages.
+- [Built-in Teams](https://mgscox.github.io/sporades/reference/teams): collaboration model, Join
+  links, application roles, and explicit Team ACL decisions.
 - [LLM documentation manifest](https://mgscox.github.io/sporades/llms.txt): release-matched Markdown
   sources for agents and other documentation tools.
 - [Architecture](https://mgscox.github.io/sporades/architecture): platform model, runtime modes, Host

package/bin/sporades-host-helper.js

@@ -163,28 +163,14 @@ function validatePublicTreeFileSet(files) {
 // src/server-runtime-source.ts
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 
-// src/file-storage-runtime.ts
+// src/jobs-runtime.ts
 var nodeCryptoModule = process.getBuiltinModule("node:crypto");
 
-// src/auth-runtime.ts
-var nodeCryptoModule2 = process.getBuiltinModule("node:crypto");
-var EMAIL_SIGN_IN_THROTTLE_WINDOW_MS = 15 * 60 * 1e3;
-var PASSWORD_RESET_DEFAULT_TTL_MS = 60 * 60 * 1e3;
-var PASSWORD_RESET_MIN_TTL_MS = 5 * 60 * 1e3;
-var PASSWORD_RESET_MAX_TTL_MS = 24 * 60 * 60 * 1e3;
-
 // src/runtime-log-policy.ts
 function isSensitiveLogKey(key) {
   return /(^|[-_])(?:password|passwd|token|secret|authorization|cookie|client[-_]?secret|api[-_]?token|private[-_]?key|authorized[-_]?keys?|request[-_]?body|raw[-_]?body|stack(?:trace)?)([-_]|$)/i.test(String(key)) || /(?:password|passwd|token|secret|authorization|cookie|clientSecret|apiToken|privateKey|authorizedKeys|requestBody|rawRequestBody|stackTrace)/i.test(String(key));
 }
 
-// src/database-runtime.ts
-var nodeCryptoModule3 = process.getBuiltinModule("node:crypto");
-var nodeFsModule = process.getBuiltinModule("node:fs");
-
-// src/jobs-runtime.ts
-var nodeCryptoModule4 = process.getBuiltinModule("node:crypto");
-
 // src/acl-runtime.ts
 var PRIVILEGED_AUDIT_SCHEMA = "sporades.privileged-audit.v1";
 var PRIVILEGED_AUDIT_ACTOR_KINDS = /* @__PURE__ */ new Set(["privileged-server-role", "captured-user", "platform", "unknown"]);
@@ -258,6 +244,25 @@ function auditString(value, fallback) {
 }
 var ACL_HELPER_STATE = Symbol("sporades.aclHelperState");
 
+// src/file-storage-runtime.ts
+var nodeCryptoModule2 = process.getBuiltinModule("node:crypto");
+
+// src/teams-runtime.ts
+var TEAM_JOIN_LINK_DEFAULT_TTL_SECONDS = 60 * 60 * 24;
+var TEAM_JOIN_LINK_MIN_TTL_SECONDS = 5 * 60;
+var TEAM_JOIN_LINK_MAX_TTL_SECONDS = 60 * 60 * 24 * 7;
+
+// src/auth-runtime.ts
+var nodeCryptoModule3 = process.getBuiltinModule("node:crypto");
+var EMAIL_SIGN_IN_THROTTLE_WINDOW_MS = 15 * 60 * 1e3;
+var PASSWORD_RESET_DEFAULT_TTL_MS = 60 * 60 * 1e3;
+var PASSWORD_RESET_MIN_TTL_MS = 5 * 60 * 1e3;
+var PASSWORD_RESET_MAX_TTL_MS = 24 * 60 * 60 * 1e3;
+
+// src/database-runtime.ts
+var nodeCryptoModule4 = process.getBuiltinModule("node:crypto");
+var nodeFsModule = process.getBuiltinModule("node:fs");
+
 // src/server-runtime-source.ts
 function logPayloadMaxBytes(config = {}) {
   const configured = Number(config.logs?.payloadMaxBytes ?? config.logging?.payloadMaxBytes);
@@ -413,7 +418,7 @@ function writeEnvelope(result, failed = false) {
 }
 
 // src/cli/cli-version.ts
-var CLI_VERSION = "0.8.0";
+var CLI_VERSION = "0.8.3";
 
 // src/cli/schedule-inspection-envelope.ts
 function sanitizeScheduleInspectionEnvelope(envelope, invalid) {