Pagecast 0.5.0 — safer publishing and recoverable state

Pagecast 0.5.0 hardens the local admin boundary, Cloudflare project ownership,
and release pipeline while keeping existing pages and URLs compatible.

Highlights

Isolated previews and authenticated mutations. Report HTML now runs on a
separate local origin. Admin writes require the current session or private
workspace capability, and non-loopback admin binds are rejected by default.
Project-scoped ownership. Publication snapshots, redirects, password and
expiry manifests, and staging are isolated by Cloudflare account and project.
Existing projects are managed only after explicit selection or adoption.
Recoverable single-writer state. Workspace leases, atomic persistence, and
a durable operation journal prevent concurrent CLI, MCP, and server processes
from silently losing updates and surface incomplete Cloudflare operations for
safe recovery.
Stronger unlisted links. New default links add 128 bits of capability
entropy. Short links and vanity slugs remain explicit public drops; existing
word-only links keep their current URLs.
Truthful deploy targets. Published links use the production origin returned
by Cloudflare, and direct whole-site deploys have target- and branch-scoped
state separate from managed /p/... publications.
Release-grade cross-platform proof. CI covers Node 20.19 and Node 22 on
Linux and Windows, plus committed dashboard, npm package, and offline Docker
runtime checks with Wrangler pinned to 4.86.0.

Pagecast 0.5.0 requires Node.js 20.19 or newer.

npx pagecast@0.4.0 background stop
npx pagecast@0.5.0 background start

If you installed the macOS login service, reinstall it with
npx pagecast@0.5.0 background service install so it captures the new CLI
path.
Replace or reload the unpacked Chrome extension from the attached 0.5.0 zip;
the extension must negotiate the new admin-session token.
Existing URLs, passwords, expiries, redirects, selected targets, and
.pagecast/ data remain readable. Legacy links without a recorded account and
project must be attached to their original project before mutation.
Fresh installs send no telemetry until pagecast telemetry enable. Existing
saved choices and explicit environment overrides are preserved.

pagecast pages deploy replaces the named Pages project as a whole; use a
separate project unless that replacement is intentional.
Old immutable Cloudflare deployment URLs keep the bytes and protection state
they originally shipped with. Prune deployment history when those snapshot
URLs must stop working.
Source-folder publishing includes non-hidden, non-symlink files beneath the
source folder. Publish from a clean directory with secrets stored elsewhere.

See CHANGELOG.md
for the complete change list.