sporades 0.9.4 → 0.9.7

package/CHANGES.md

@@ -1,38 +1,76 @@
 # Changes
 
-- Expose the verified provider-free Team Billing projection to active Capsule
-  query and mutation contexts and to exact-Team Join admission. Current members
-  may be authorized for safe reads while all customer-directed commands remain
-  current-Team-admin operations; retained context handles are revoked.
-- Add an offline `sporades/server/team-billing-import` seam for exact,
-  provider-free import of verified legacy Subscription snapshots and replay
-  guards. Incomplete or conflicting evidence fails closed, including drift in
-  durable Event ordering, terminal-latch safety fields, and contradictory
-  Subscription Event/state tuples. The public adapter type now declares the
-  complete named-dialect, execution, prepared-statement, and transaction seam.
+## Unreleased - 2026-08-30
 
-## Unreleased - 2026-08-25
+Changes since v0.9.5.
 
-Changes since v0.9.3.
+### 🚀 Features
+
+- Persist encrypted OAuth registration admission (920f4a71).
+- Persist ingress receipts in runtime storage (015b03d0).
+- Stream bounded multipart ingress parts (3996fe29).
+- Add email registration admission seam (70168d34).
+- Add trusted multipart file ingress leases (b51afa4e).
 
 ### 🐛 Bug Fixes
 
-- Serialize managed route mutations (625538a3).
-- Refresh hosted routes after container restart (1cccdffd).
+- Publish ingress leases with CAS (9627b286).
+- Preserve absent registration and stream file caps (7d5b35b4).
+- Preserve null registration admission (252cf282).
+- Close ingress and admission lifetimes (fa026b59).
+- Preserve optional stable ingress keys (0002dc04).
+- Align admission and ingress validation (1856cef4).
+- Enforce multipart boundary grammar (44c43a3e).
+- Complete local admission and ingress lifecycle (80d1d1c6).
+- Validate OAuth admission envelope grammar (904b572d).
+- Enforce multipart and OAuth admission bounds (ed405e88).
+- Replay legacy principal ingress receipts (42290032).
+- Fence registration and harden multipart framing (0f0a7429).
+- Compensate failed multipart staging (2bcd0f2b).
+- Honor trusted multipart ingress policy (7a425e98).
+- Complete registration admission release parity (baeee2eb).
+- Fix integrated endpoint ingress compatibility (5149e47f).
+- Fix registration finalizer rollback (ed6d2129).
+- Recover legacy actor ingress receipts (7fcb4994).
+- Harden OAuth registration admission keys (582f0d90).
+- Bind ingress ownership to explicit authority (033f4c6e).
+- Migrate OAuth registration key pointers (fa7df6e9).
+- Retire expired ingress leases safely (1b6a6cc5).
+- Serialize ingress claims across runtimes (dc6c00c0).
+- Persist ingress claim completion transactionally (2d3f98e1).
+- Serialize ingress receipt acquisition (47d74918).
+- Retain multipart parser state across chunks (a3d0ca92).
+- Preserve multipart endpoint policy at runtime (cc4353ec).
+
+### 📝 Documentation
+
+- Prove fragmented MinIO ingress cleanup (e4d9c7c6).
+- Complete trusted file ingress parity (dd50047f).
+- Fix registration admission option examples (a18f91e6).
 
 ### 🧪 Tests
 
-- Preserve registry image authority on Host restart (1ee77740).
-- Settle absent Host runtime rollback (0c5e6b8a).
-- Separate Host install and restore authority (4b18b496).
-- Harden Host runtime key mutation settlement (5ebe90be).
-- Harden Host route locks and helper upgrades (b895981b).
-- Serialize Host route mutations with OS locks (2cc492e8).
+- Prove ingress claim transaction rollback (60a4b98c).
+- Register ingress storage in adapter conformance (0001d96d).
+- Prove ingress response loss recovery (c41025df).
+- Prove ingress descriptor conflict race (0a12ed19).
+- Prove concurrent ingress receipt acquisition (996db64d).
+- Prove multipart ingress denial and disconnect cleanup (f2a08da5).
+- Prove bounded multipart streaming (d3824243).
 
 ### 📦 Packaging
 
-- Align Host release lifecycle settlement (28c23bcf).
-- Harden Host release rollback authority (98479008).
+- Refresh host helper auth runtime (9248fc86).
+- Prepare Sporades 0.9.6 integration candidate (50bb32ae).
+
+## Unreleased - 2026-08-26
+
+Changes since v0.9.4.
+
+### 🐛 Bug Fixes
+
+- Dispatch Team billing after mutation commit (62482c15).
+- Stage Team billing from mutation transactions (fd649a91).
 
 ## 0.8.5 - 2026-08-15
 
@@ -71,4 +109,3 @@ generated artifacts, and documentation.
   never sends Join-link email. See the [Built-in Teams reference](https://mgscox.github.io/sporades/reference/teams).
 
 
-

package/bin/sporades-host-helper.js

@@ -293,6 +293,10 @@ var EMAIL_SIGN_IN_THROTTLE_WINDOW_MS = 15 * 60 * 1e3;
 var PASSWORD_RESET_DEFAULT_TTL_MS = 60 * 60 * 1e3;
 var PASSWORD_RESET_MIN_TTL_MS = 5 * 60 * 1e3;
 var PASSWORD_RESET_MAX_TTL_MS = 24 * 60 * 60 * 1e3;
+var registrationDeniedRollbackMarker = Symbol("sporades.registrationDeniedRollback");
+var invalidRegistrationAdmission = Symbol("sporades.invalidRegistrationAdmission");
+var OAUTH_REGISTRATION_KEY_GRACE_MS = 10 * 60 * 1e3;
+var oauthRegistrationUnsealFailed = Symbol("sporades.oauthRegistrationUnsealFailed");
 
 // src/cli/access-key-operator-envelope.ts
 import { createInterface } from "node:readline/promises";
@@ -454,6 +458,10 @@ var nodeFsModule = process.getBuiltinModule("node:fs");
 var transactionOperations = Symbol.for("sporades.database.transactionOperations");
 var transactionBeforeCommitChecks2 = Symbol.for("sporades.database.transactionBeforeCommitChecks");
 
+// src/file-ingress-runtime.ts
+var crypto2 = process.getBuiltinModule("node:crypto");
+var leaseTtlMs = 10 * 60 * 1e3;
+
 // src/server-runtime-source.ts
 var trustedReadTransactionAdapter = Symbol("sporades.trustedReadTransactionAdapter");
 var runtimeOwnedJobEnqueueHandler = Symbol("sporades.runtimeOwnedJobEnqueueHandler");
@@ -614,7 +622,7 @@ function writeEnvelope(result, failed = false) {
 }
 
 // src/cli/cli-version.ts
-var CLI_VERSION = "0.9.4";
+var CLI_VERSION = "0.9.7";
 
 // src/cli/schedule-inspection-envelope.ts
 var SCHEDULE_DIAGNOSTIC_FIELDS = /* @__PURE__ */ new Set([