v0.4.0

Highlights

• Publish eligible sites to Cloudflare Pages with public or email-restricted access, durable ownership tracking, reload-safe jobs, and recovery flows in /spots. See #14 and #15.
• Delegate site management through _access.json maintainers without giving up the original owner's permanent recovery claim. Manageable-site APIs and recovery tombstones preserve safe lifecycle semantics. See #17.
• Build, deploy, and watch Spot Show report sites containing Markdown, Mermaid, diffs, terminal output, JSON, images, and sandboxed HTML. See #10.
• Explore aggregate platform activity on the new public /stats page and follow common workflows in the responsive /help field guide. See #11 and #16.
• Capture gallery previews during Spot Show deploys, filter saved spots, and use request-aware agent instructions that can be copied in full without an external fetch. See #13.

Fixes

• Preserved uploaded files' original content types when serving them.
• Improved gallery cards with separate author attribution, stable row sizing, and safer text wrapping.
• Bounded generated Cloudflare Pages project names to the provider's length limit.

Upgrade notes

This release has no breaking configuration changes. Existing site rows migrate to the active lifecycle state, and existing _access.json files remain valid; omitting maintainers grants no additional authority.

Cloudflare Pages publishing is optional and remains disabled until all required SPOT_CLOUDFLARE_* values are configured. The repository includes scripts/setup-cloudflare-pages-token.sh to create the runtime token and email one-time PIN identity provider.

Contributors

Thanks to @Codeabunga for the request-aware agent instructions and full-copy workflow in #13, and @mishamsk for the initial Cloudflare Pages publishing implementation.

Images

docker pull ghcr.io/melonamin/spot-api:0.4.0
docker pull ghcr.io/melonamin/spot-caddy:0.4.0

See the full changelog or compare v0.3.0...v0.4.0.