fragment v0.9.0

What's Changed

• Sign-in: a return path never leaves the platform's origin (two live open redirects) by @futurepaul in #9
• NIP-98: a malformed signature or clock is refused, never a panic (unauthenticated router crash) by @futurepaul in #11
• Reliability: effects checked where they're applied, no silent loss, bounded everything (audit R2–R23) by @futurepaul in #10
• Single source of truth: decode once at each door, one definition per fact (audit T1–T16) by @futurepaul in #12
• Speed: the audit's 23 speed items, each measured (stacked on #12) by @futurepaul in #13
• Tests: the audit's 19 test items, each check shown to fail (stacked on #13) by @futurepaul in #14
• Platform pages refuse frames; its forms refuse a fragment's page (clickjacking fix) by @futurepaul in #19
• Agent: answer a chat once, and listen once by @futurepaul in #20
• Phase 7: the plan, the decisions, and the platform's special cases by @futurepaul in #18
• Registry and the cell's JS: the route tables, dead answers, and parallel helpers go (−133) by @futurepaul in #22
• Cell: one test countdown, one life check, and route tables left to docs/api.md by @futurepaul in #23
• crates: what nothing calls, the copies, and one constructor for App by @futurepaul in #21
• Phase 7 B1: postable channels, and a quiet poll backstop by @futurepaul in #26
• Phase 7 A: an agent acts for whoever asked, one conversation per chat by @futurepaul in #31
• Cell: remove the migrations every fragment has run (−317 lines) by @futurepaul in #32
• Docs: what fragment.club runs, what master adds, and the lines that fell behind by @futurepaul in #16
• Sockets: a fragment's live socket and change feed open only from its own page by @futurepaul in #33
• Phase 7 D: share sheet and /join on the platform's origin by @futurepaul in #28
• CLI: the deletion pass (−329 lines), and fragment host keeps its config by @futurepaul in #24
• CLI tests: nine duplicate host tests (−121 lines) by @futurepaul in #25
• CLI: delete fragment build (−356 lines, 7 oxc deps, 60 lockfile packages) by @futurepaul in #27
• Sync: an installed unit carries --mirror-from by @futurepaul in #30
• Watch: the change feed's URL changes only the host's scheme by @futurepaul in #29
• The new chat: no app code, work on a channel, the platform's page (phase 7 slice C) by @futurepaul in #34
• Docs: fragments on fragment.boats (design, proposed) by @futurepaul in #35
• CI: build the e2e kit in two parallel parts; cargo rebuilds only what changed by @futurepaul in #17
• Phase 7, slice E: the acceptance e2e (phase7) by @futurepaul in #36
• Isolation between fragments, and the desktop's frames through __frame (fragment.boats slice 1) by @futurepaul in #37
• A fragment's URL signs you in; refusals a browser navigates to are pages by @futurepaul in #38
• Agent: build apps from a guide, bound each model call, never fail silently by @futurepaul in #39
• The platform's desktop frames from the start; chats listed by what they are by @futurepaul in #40
• A list read wakes no fragment; a chat says so when it sends its row by @futurepaul in #41
• Docs: fragment is the product; agents and computers are add-ons by @futurepaul in #42
• fragment's front door: a one-line install, a skill, and a home that is the product by @futurepaul in #43

Full Changelog: v0.8.0...v0.9.0