sproutboat 0.16.0 → 0.18.0

package/CHANGELOG.md

@@ -10,6 +10,53 @@ maintained going forward by the `release` skill.
 
 ## Unreleased
 
+## [0.18.0] - 2026-10-20
+
+### Added
+
+- Porffor Alpha 18 (`@sproutboat/toolchain` 0.9, `@sproutboat/runtime` 0.18).
+- Standalone sprouts stream `ReadableStream` response bodies chunk by chunk, so
+  Server-Sent Events and long responses work; a client that disconnects cancels
+  the stream.
+- `HTMLRewriter` (Cloudflare's API, output matching lol-html),
+  `CompressionStream`/`DecompressionStream` (gzip, deflate, deflate-raw),
+  `structuredClone`, `Event`/`EventTarget`/`AbortController`,
+  `TextEncoderStream`/`TextDecoderStream`, and more Web Crypto (SHA-1, MD5,
+  HMAC-SHA1, `exportKey`, `generateKey`).
+- Fetch-spec `Request`, `Response`, `Headers`, `Blob` and `FormData`: byte bodies
+  go out as bytes, body readers read `ReadableStream` bodies, and `JSON.parse`
+  applies its reviver.
+
+### Fixed
+
+- `ctx.waitUntil` work no longer delays the response.
+- `setTimeout(fn, 0)` fires on Linux.
+- An edited compiler patch no longer hides behind a stale Porffor cache.
+
+### Changed
+
+- `Response.redirect` sends the serialized URL (`https://example.com/`), and a
+  204/205/304 response with a body throws, per Fetch and workerd.
+- Porffor's build cache keeps the 100 most recent builds.
+
+## [0.17.0] - 2026-10-11
+
+### Added
+
+- Native Web Streams globals and global timeout/interval functions. HTTP bodies
+  remain buffered.
+- A pinned Better Auth 1.7.1 integration probe covering email/password signup,
+  signed-cookie sessions, wrong-password rejection, signin and signout with
+  an explicit memory database adapter and default password hashing.
+
+### Changed
+
+- Upgrade to Porffor Alpha 17, fixing dynamic number conversion, Math.round
+  ties, negative zero, console precision and class-field captures.
+- Fix lexical local-function return types and Uint8Array base64 options,
+  padding and decoding. AES/JWE stateless auth sessions remain unsupported;
+  native default password hashing currently takes about six seconds.
+
 ## [0.16.0] - 2026-10-10
 
 ### Added
@@ -859,7 +906,10 @@ its own package.
 - Renamed the package to `sproutboat` (was `@sproutboat/cli`); dropped the
   `sprout` bin alias in favour of a user-defined shell alias.
 
-[Unreleased]: https://github.com/baronunread/sproutboat-cli/compare/v0.15.0...HEAD
+[Unreleased]: https://github.com/baronunread/sproutboat-cli/compare/v0.18.0...HEAD
+[0.18.0]: https://github.com/baronunread/sproutboat-cli/compare/v0.17.0...v0.18.0
+[0.17.0]: https://github.com/baronunread/sproutboat-cli/compare/v0.16.0...v0.17.0
+[0.16.0]: https://github.com/baronunread/sproutboat-cli/compare/v0.15.0...v0.16.0
 [0.15.0]: https://github.com/baronunread/sproutboat-cli/compare/v0.14.0...v0.15.0
 [0.14.0]: https://github.com/baronunread/sproutboat-cli/compare/v0.13.0...v0.14.0
 [0.13.0]: https://github.com/baronunread/sproutboat-cli/compare/v0.12.7...v0.13.0

package/SURFACE.md

@@ -3,7 +3,7 @@
 > Generated by `src/surface.test.ts` from `src/surface.ts` + the pinned
 > toolchain constants. Do not edit by hand — run `UPDATE_SURFACE=1 bun test`.
 
-**Package:** `sproutboat` 0.16.0
+**Package:** `sproutboat` 0.18.0
 
 ## Commands
 
@@ -76,7 +76,7 @@ usage: sproutboat <init [name] | check [project-dir] | types [project-dir] | dev
 | | |
 | --- | --- |
 | Zig | `0.16.0` (`zig cc -target x86_64-linux-musl`, static) |
-| Provenance stamp | `zig-musl/0.16.0+porffor/43087d4+uws/360c276d` |
+| Provenance stamp | `zig-musl/0.16.0+porffor/deda494+uws/360c276d` |
 | Artifact schema | `2` |
 | Runtime | `native-fetch` |
 | Capability profile | `http-sync-v0` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sproutboat",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "Wrangler-shaped CLI for Sproutboat. Deploys workers to any control plane via --api-url / SPROUTBOAT_API_URL.",
   "keywords": [
     "cli",
@@ -64,9 +64,9 @@
     "@sproutboat/artifact": "^0.3.0",
     "@sproutboat/assets": "^0.3.0",
     "@sproutboat/config": "^0.5.0",
-    "@sproutboat/runtime": "^0.15.0",
-    "@sproutboat/toolchain": "^0.6.0",
-    "@sproutboat/wire": "^0.11.0"
+    "@sproutboat/runtime": "^0.18.0",
+    "@sproutboat/toolchain": "^0.9.0",
+    "@sproutboat/wire": "^0.13.1"
   },
   "devDependencies": {
     "@oxlint/plugins": "1.85.0",
@@ -78,10 +78,10 @@
     "typescript": "7.0.2"
   },
   "optionalDependencies": {
-    "@sproutboat/cli-darwin-arm64": "0.16.0",
-    "@sproutboat/cli-darwin-x64": "0.16.0",
-    "@sproutboat/cli-linux-arm64": "0.16.0",
-    "@sproutboat/cli-linux-x64": "0.16.0"
+    "@sproutboat/cli-darwin-arm64": "0.18.0",
+    "@sproutboat/cli-darwin-x64": "0.18.0",
+    "@sproutboat/cli-linux-arm64": "0.18.0",
+    "@sproutboat/cli-linux-x64": "0.18.0"
   },
   "engines": {
     "node": ">=18"

package/src/compile.ts

@@ -120,19 +120,29 @@ let porfforBuildsPruned = false;
  * never removes any (one machine had 1,395 of them, 6.3 GB). Drop the ones not
  * compiled in for a week; the only cost is a recompile. Each dir's `flags`
  * stamp is rewritten on every compile, so its mtime is "last used".
+ *
+ * Age alone does not bound it: every dev session, temp-dir test and scratch
+ * build is a new entry path, so another machine reached 923 dirs (10 GB) in
+ * three days. Keep only the `keep` most recently used as well (~11 MB each).
  */
 export async function prunePorfforBuilds(
   root = resolve(process.env.HOME ?? homedir(), ".cache/porffor/build"),
   now = Date.now(),
+  keep = 100,
 ): Promise<number> {
   porfforBuildsPruned = true;
   const cutoff = now - 7 * 24 * 60 * 60 * 1000;
   const entries: string[] = await readdir(root).catch(() => []);
-  let removed = 0;
+  const dirs: { dir: string; used: number }[] = [];
   for (const name of entries) {
     const dir = resolve(root, name);
     const used = (await stat(resolve(dir, "flags")).catch(() => null)) ?? (await stat(dir).catch(() => null));
-    if (used && used.mtimeMs < cutoff) {
+    if (used) dirs.push({ dir, used: used.mtimeMs });
+  }
+  dirs.sort((a, b) => b.used - a.used);
+  let removed = 0;
+  for (const [index, { dir, used }] of dirs.entries()) {
+    if (used < cutoff || index >= keep) {
       await rm(dir, { recursive: true, force: true });
       removed++;
     }