v0.3.18 — expressive live sites: the full embed v8–v12 family

tinycloud 0.3.18 teaches the full expressive-live-sites embed surface (sites embed v8–v12) and extends the publish safety guard to the new private-only elements. No new verbs or flags — the embed features ship in the Cloudglue-served script, so already-published sites pick them up without republishing.

✨ New

• Live-site elements, fully taught — the skill and bundled references now cover the whole sites-embed v8–v12 family for private shareable sites:
  • <cg-chat instructions="…"> — per-site system prompt, plus a built-in Stop button
  • <cg-search> tuning: scope, modalities, label-filters, threshold, limit, group-by="file", sort-by
  • <cg-deep-search> — streamed synthesis, exclude-weak-results
  • <cg-face-search threshold limit> — face hits play as short bounded moments
  • <cg-query> — natural-language analytical questions answered as an inline table with the compiled SQL shown (the site-side face of the query verb's engine)
  • <cg-transcript> — click-to-seek speech turns that follow a bound player's playhead (unbilled)
  • <cg-chapters auto> — chapters self-populate from the live API, no baked-in markup
  • Every live panel is restylable via ::part() and emits host events (cg-results, cg-answer, cg-error, and the cancelable cg-resultopen/cg-citationopen)
• Kitchen sink refresh — the bundled references/kitchen-sink.html wires every component, including the new query/transcript/chapters-auto sections and live-panel event handling.

🛡️ Hardening

• tinycloud publish now hard-rejects <cg-query>, <cg-transcript>, and <cg-chapters auto> on a public site — their live calls only work on a private site of the same account. A <cg-chapters> list with explicit children stays public-safe.

Install

npx @cloudglue/tinycloud@0.3.18
# or
curl -fsSL https://app.cloudglue.dev/tinycloud.sh | bash

The agent-skill floor rises to 0.3.18 (tinycloud update moves an existing install).