sporades 0.9.40 → 0.9.42

package/CHANGES.md

@@ -1,5 +1,64 @@
 # Changes
 
+## v0.9.42 - 2026-10-30
+
+Changes since v0.9.41.
+
+### 🚀 Features
+
+- Add atomic Capsule password-change reservations (#320) (94b959e7).
+- Add declared local Capsule container services (#315) (56a08078).
+
+### 🐛 Bug Fixes
+
+- Fix Hosted route worker readiness timeout and record hosted acceptance (#321) (09f7e539).
+
+### 🔧 Improvements
+
+- Regenerate dist and bin [skip ci] (b936a834).
+- Regenerate dist and bin [skip ci] (5ecc7466).
+- Regenerate dist and bin [skip ci] (898582f5).
+- Regenerate dist and bin [skip ci] (02920387).
+
+### 📝 Documentation
+
+- Automate npm releases with GitHub OIDC trusted publishing (#322) (31e6606c).
+- Reconcile Hosted routes after dynamic Docker port changes (#317) (08ff36b8).
+
+## v0.9.41 - 2026-10-24
+
+Changes since v0.9.40.
+
+### 🚀 Features
+
+- Allow any script version (4a43c515).
+- Add Capsule implicitMutations opt-out for the implicit table mutation surface (#304) (9692d63e).
+- Add explicitly sessionless public endpoints (#308) (1b367744).
+- Add atomic Capsule admission for additional Team creation (#305) (d74d7999).
+
+### 🐛 Bug Fixes
+
+- Prevent account-wide sign-in lockout with bounded verification (#299) (b73dc192).
+
+### 🔧 Improvements
+
+- Regenerate dist and bin [skip ci] (271b05d2).
+- Regenerate dist and bin [skip ci] (9c3e3204).
+
+### 📝 Documentation
+
+- Build dist and bin on main with local CI (#314) (3f555768).
+- Remove the runtime-owned ctx.env browser query (#289) (#301) (cde2b5cf).
+- Reject email signup from linked identities (#300) (e6348a83).
+- Make the full test suite pass in office worktrees (#309) (23d1663d).
+- Expose shared rate limits during Capsule File ingress admission (#307) (2f57e950).
+- Revoke all account authority atomically on a browser password change (#302) (32962832).
+- Isolate public collection budgets from server error delivery (#303) (c1956ad0).
+
+### 🧪 Tests
+
+- Wait for exported durable Job metrics (#311) (48951c93).
+
 ## v0.9.40 - 2026-10-23
 
 Changes since v0.9.39.
@@ -22,6 +81,15 @@ Changes since v0.9.38.
 
 ## Unreleased
 
+### 🔒 Security
+
+- Remove the runtime-owned `ctx.env` browser query (#289). Query clients,
+  including Anonymous Sessions, could subscribe to the undeclared `ctx.env`
+  name and receive the entire server environment. That name now follows the
+  ordinary unknown-query response and returns no environment data, while
+  `ctx.env` stays available to trusted server handlers. A Capsule that declares
+  its own query with that name keeps the normal declared-query contract.
+
 ### 📦 Packaging
 
 - Upgrade the default Capsule Base image to `0.3.0-node24-alpine`, using Node
@@ -34,6 +102,19 @@ Changes since v0.9.38.
 
 ### 🚀 Features
 
+- Let Capsules opt out of implicit table mutations (#292). Declaring
+  `implicitMutations: false` bounds the mutation surface to explicitly declared
+  names: every undeclared name answers the ordinary unknown-mutation refusal
+  before context middleware, any fallback write, mutation hooks, or success
+  effects such as the deferred query rebroadcast. Omitting the flag or passing
+  `true` keeps 0.9.x behavior, where undeclared names that describe a table
+  (`addNote`, `updateNoteText`) insert or update rows under their fallback
+  semantics. Declared mutations, server `ctx.db`, implicit table queries and
+  table ACLs keep their behavior, and a bundled declared mutation matching the
+  generated scaffold `add…` body stops riding the implicit path while the
+  surface is retired. Present non-boolean values are rejected at authoring and
+  at Capsule startup (`INVALID_IMPLICIT_MUTATIONS`). The flag is not business
+  quota enforcement; declare checks in mutations, ACL rules, or hooks.
 - Add read-only `sporades host db list|dump|query` for running Hosted Capsules (#285).
   It runs the Host helper over the operator's existing SSH access and the
   generated Bundle's one-shot action seam, opens the Capsule SQLite file

package/README.md

@@ -360,6 +360,12 @@ Capsules through authorized public keys in `sporades.json`. Normal management
 remains the CLI and Host helper surfaces; SSH is a compatibility and emergency
 access path.
 
+## Contributing
+
+Run a local build and tests, but never commit `dist/` or `bin/` in a PR. CI
+regenerates their tracked copies on main after merge. See the
+[generated artifacts workflow](https://github.com/mgscox/sporades/blob/main/docs/agents/generated-artifacts.md).
+
 ## License
 
 MIT