v1.8.0

1.8.0 (2026-08-19)

Features

• gc: expire abandoned deploy sessions (7a92fde)
• handler: register the deploy session at init (1059c6d)
• pg: record a pending row when a deploy starts (7e26730)

Bug Fixes

• auth: bound the in-process identity caches (5c1cc74)
• auth: classify 429s and close review findings (6b1ad31)
• auth: classify secondary throttles as rate limits (a4c3abc)
• auth: give the scope guard an honest signature (030a9c6)
• backfill: render R2 keys from the configured layout (5c97934)
• cli: name the failing subcommand on stderr (b093460)
• cli: reject unknown subcommands and stray args (94acced)
• drift: alert on accruing reclaimable drift (a5884ce)
• drift: stop the blast cap silencing the report (96d1022)
• gc: cap the purge and survive per-site failures (2e15f45)
• gc: give both gc jobs explicit run budgets (4c1cb7d)
• gc: make a zero blast cap refuse, not unleash (5b9bb0f)
• gc: read live aliases in the sweep keyspace (9fcad98)
• gc: reap the oldest across both delete sources (04f48cf)
• gc: record the tombstone row before moving bytes (a5ed663)
• gc: refuse a site token outside the site segment (9f90a06)
• handler: build public URLs from config (11eb897)
• handler: record tombstones before moving bytes (5fa5317)
• server: give upload and finalize a deadline (7036f49)