mdbase connect v0.1.0-beta.155

Files containing UNSIGNED are preview builds, not trusted platform releases. Those Windows files may show Unknown Publisher or SmartScreen warnings; those macOS files require a manual Privacy & Security override and have not been notarized. Checksums and GitHub OIDC-backed Sigstore bundles establish build provenance but do not replace platform signing.

What's Changed

• Fix desktop update verification in Electron's BoringSSL runtime by @callumalpass in #1085
• Share one LAB loopback HTTP origin check across the SDK app host by @callumalpass in #1095
• Cover a body-only unknown Bases tag in the SQL candidate test by @callumalpass in #1096
• Let folders with an orphaned x-mdbase-connect identity be added (#450) by @callumalpass in #1109
• Roadmap 1.3: verify native entries of any other SEM structurally by @callumalpass in #1099
• Pass own history through LogCache and require Store::own_retained by @callumalpass in #1105
• Check log append replay before quota, and prune expired compacted tokens by @callumalpass in #1106
• Await every daemon task on shutdown (#1089) by @callumalpass in #1107
• Trust a Private approver only after its grant keys the new computer by @callumalpass in #1110
• Re-read a stalled entry on a bounded backoff, whatever the stall by @callumalpass in #1108
• Add hosting moves for migrated hosted collections by @callumalpass in #1093
• Rekey automatically after an abandoned Private switch by @callumalpass in #1100
• Use npm trusted publishing for the source-built SDK by @callumalpass in #1111
• Prepare v0.1.0-beta.150 by @callumalpass in #1112
• Build a native staging daemon from exact source by @callumalpass in #1114
• Prepare v0.1.0-beta.151 by @callumalpass in #1116
• Keep the publisher's bytes for upgraded seed-type entries by @callumalpass in #1119
• Quiet the captured mirror join log and surface it in doctor by @callumalpass in #1120
• Reconnect at once on log token renewal and name the real refusal reasons by @callumalpass in #1125
• Offer cloud copies at consent offline, treat them as hosted, and revoke grants on mode change (#1117) by @callumalpass in #1118
• Do not fail doctor on a taken-over folder registered as another collection by @callumalpass in #1121
• Add exact-pair rollback read-compatibility workflow by @callumalpass in #1127
• Upgrade seed types by content and infer a missing origin by @callumalpass in #1123
• Keep the signed file-action subset through MCP read-only authorization (#1103) by @callumalpass in #1128
• Pin mdbase-rs with byte-preserving seed upgrades in the hosted provider by @callumalpass in #1126
• Report syncing, not ready, while sync work is unfinished (#1122) by @callumalpass in #1129
• Offer the app's version for a seed type setup cannot upgrade by @callumalpass in #1124
• Forward raw projection queries through the daemon keyring wrapper by @callumalpass in #1131
• Prepare v0.1.0-beta.152 by @callumalpass in #1133
• Stop idle hosted and escrow actors staying awake on timers by @callumalpass in #1135
• Fix rollback checks for server-train predecessor tags by @callumalpass in #1134
• Fence member downgrades on log policy publication by @callumalpass in #1137
• Fix MCP record reads for legacy hosted collections by @callumalpass in #1136
• feat: continuously publish changed SDK packages from green main by @callumalpass in #1139
• feat: guarded continuous desktop releases (blocked on immutable channel policy) by @callumalpass in #1140
• fix: qualify workspace npm plans against production contracts by @callumalpass in #1142
• Allow pipeline-identity runtime Worker publication with pinned trust by @callumalpass in #1141
• chore: vendor verified production SDK 0.1.0-beta.149 by @callumalpass in #1138
• Accept merge-queue main pushes as Runtime CI qualification by @callumalpass in #1144
• Prove client compatibility against the provider's own revision by @callumalpass in #1147
• Move the portal, desktop and Editor to one lighter interface by @callumalpass in #1148
• Let the desktop coordinator read the full release list by @callumalpass in #1150
• Store field values in the record path by @callumalpass in #1149
• Match the documented locale and design paths in the client compatibility axis by @callumalpass in #1151
• Give contract-sensitive commits images of their own by @callumalpass in #1152
• Recover the Desktop line from its first tagged run by @callumalpass in #1153
• fix: run the Windows daemon in the background without the VC++ runtime by @callumalpass in #1145
• feat: package the desktop app for the Microsoft Store by @callumalpass in #1146
• Add a stateful portal review harness and visual checks by @callumalpass in #1154
• Make the Connect portal shell and reversible edits instant by @callumalpass in #1156
• chore: vendor verified production SDK 0.1.0-beta.153 by @mdbase-dev-release-automation[bot] in #1155
• Let Desktop tag workers reach publication by @callumalpass in #1158
• Unify portal, Editor and desktop shared UI controls by @callumalpass in #1157

New Contributors

• @mdbase-dev-release-automation[bot] made their first contribution in #1155

Full Changelog: v0.1.0-beta.149...v0.1.0-beta.155