diff --git a/.changeset/coherent-single-shell-0284.md b/.changeset/coherent-single-shell-0284.md
deleted file mode 100644
index 4b255bc7a..000000000
--- a/.changeset/coherent-single-shell-0284.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@xnetjs/plugins': minor
----
-
-Single-shell layout primitives (exploration 0284): `createDefaultTree()` and `DEFAULT_WORKSPACE_ID` join the workspace layout API — the one canonical tree (a sectioned sidebar in the rail, the full left dock, tabs on) that replaces the quiet/calm/bench preset trichotomy. Purely additive: `createPresetTree` and the preset ids remain for the devtools seed and portable-workspace round-trips.
diff --git a/.changeset/demo-capacity-sync-halt.md b/.changeset/demo-capacity-sync-halt.md
deleted file mode 100644
index 0a625dd92..000000000
--- a/.changeset/demo-capacity-sync-halt.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-'@xnetjs/runtime': minor
----
-
-`NodeStoreSyncProvider` now handles hub capacity rejections gracefully: on the first `QUOTA_EXCEEDED` (over the hub's per-user cap) or `STORAGE_FULL` (hub disk full) rejection it pauses outbound sync instead of re-flooding the hub, keeps local data intact, and resumes on the next reconnect. Subscribe to the new `onSyncBlocked(listener)` API (with `SyncBlockedReason`/`SyncBlockedListener` types) to surface a "storage full" notice in your app.
diff --git a/.changeset/devkit-git-env-isolation.md b/.changeset/devkit-git-env-isolation.md
deleted file mode 100644
index 7c1956d7e..000000000
--- a/.changeset/devkit-git-env-isolation.md
+++ /dev/null
@@ -1,12 +0,0 @@
----
-'@xnetjs/devkit': patch
----
-
-Isolate git subprocesses from inherited repo-location env. When the dev loop (or
-its tests) ran while a git hook was active — e.g. husky `pre-push` running
-`pnpm test` — the hook's exported `GIT_DIR`/`GIT_WORK_TREE`/`GIT_INDEX_FILE`
-leaked into `git` children and overrode the explicit `cwd`, so operations
-(`config`, `commit`, even `push`) targeted the hook's repo instead of the
-requested worktree. `NodeCommandRunner` now scrubs git's repo-location env vars
-for `git` invocations so `cwd` is always authoritative; an explicit
-`options.env` entry still wins.
diff --git a/.changeset/secure-local-model-bridge-0289.md b/.changeset/secure-local-model-bridge-0289.md
deleted file mode 100644
index 62e7a733c..000000000
--- a/.changeset/secure-local-model-bridge-0289.md
+++ /dev/null
@@ -1,26 +0,0 @@
----
-'@xnetjs/devkit': major
-'@xnetjs/plugins': minor
-'@xnetjs/cli': minor
----
-
-Secure the browser↔local-model bridge (exploration 0289).
-
-- **`@xnetjs/devkit` (breaking):** the agent bridge daemon now **requires a
-  per-launch pairing token** (`Authorization: Bearer <token>`, constant-time
-  compared) on its data endpoints (`/v1/chat/completions`, `/run`) and validates
-  the `Host` header to reject DNS-rebinding requests. `BridgeServerConfig` gains
-  `pairingToken?`, `BridgeServerHandle` exposes `pairingToken`, and a token is
-  auto-generated when none is supplied — so a client that previously called the
-  data endpoints with no auth now gets `401`. `/health` stays unauthenticated so
-  detection still works before pairing. New `openAiChatAgent` lets the bridge
-  front a raw OpenAI-compatible model server (Ollama/LM Studio) through the same
-  authenticated door.
-- **`@xnetjs/plugins`:** `ConnectorEnv` gains `appOrigin` and the local-server
-  setup hint now names the exact `OLLAMA_ORIGINS=<origin>` line (never a
-  wildcard); new `localServerSetupHint` export; the MCP HTTP transport now
-  validates the `Host` header (defense-in-depth, no change for legitimate
-  callers). Additive.
-- **`@xnetjs/cli`:** `xnet bridge serve` prints the pairing code and gains
-  `--token` (pin the code) and `--upstream` / `--upstream-model` (front a raw
-  local model). Additive.
diff --git a/apps/cloud/CHANGELOG.md b/apps/cloud/CHANGELOG.md
index 4292cd513..d9440df8b 100644
--- a/apps/cloud/CHANGELOG.md
+++ b/apps/cloud/CHANGELOG.md
@@ -1,5 +1,13 @@
 # xnet-cloud
 
+## 0.0.11
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/cloud@0.0.1
+
 ## 0.0.10
 
 ### Patch Changes
diff --git a/apps/cloud/package.json b/apps/cloud/package.json
index 4ad6db335..ce2f967c5 100644
--- a/apps/cloud/package.json
+++ b/apps/cloud/package.json
@@ -1,6 +1,6 @@
 {
   "name": "xnet-cloud",
-  "version": "0.0.10",
+  "version": "0.0.11",
   "description": "xNet Cloud control plane — billing, provisioning, and fleet management (explorations 0174/0175).",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",
diff --git a/apps/electron/CHANGELOG.md b/apps/electron/CHANGELOG.md
index c2cb513e8..01d289557 100644
--- a/apps/electron/CHANGELOG.md
+++ b/apps/electron/CHANGELOG.md
@@ -1,5 +1,9 @@
 # xnet-desktop
 
+## 0.8.0
+
+Desktop shell release riding the @xnetjs/core 0.8.0 train. Desktop-specific changes are not tracked here; see the core packages' changelogs for what shipped.
+
 ## 0.7.0
 
 Desktop shell release riding the @xnetjs/core 0.7.0 train. Desktop-specific changes are not tracked here; see the core packages' changelogs for what shipped.
diff --git a/apps/electron/package.json b/apps/electron/package.json
index 796b6ab50..bd92ada29 100644
--- a/apps/electron/package.json
+++ b/apps/electron/package.json
@@ -1,6 +1,6 @@
 {
   "name": "xnet-desktop",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "xNet Desktop - Local-first data platform for macOS/Windows/Linux",
   "author": {
     "name": "xNet",
diff --git a/packages/abuse/CHANGELOG.md b/packages/abuse/CHANGELOG.md
index 53b48f0fe..3dee612e4 100644
--- a/packages/abuse/CHANGELOG.md
+++ b/packages/abuse/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/abuse
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes
diff --git a/packages/abuse/package.json b/packages/abuse/package.json
index d7a7d12c0..54d6f7696 100644
--- a/packages/abuse/package.json
+++ b/packages/abuse/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/abuse",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Composable abuse, moderation, and reach policy decisions for xNet",
   "license": "MIT",
   "repository": {
diff --git a/packages/brain/CHANGELOG.md b/packages/brain/CHANGELOG.md
index 1e071d65a..d51fa6f27 100644
--- a/packages/brain/CHANGELOG.md
+++ b/packages/brain/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/brain
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/vectors@0.0.1
+
 ## 0.0.11
 
 ### Patch Changes
diff --git a/packages/brain/package.json b/packages/brain/package.json
index b3cb6a51b..104204be9 100644
--- a/packages/brain/package.json
+++ b/packages/brain/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/brain",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",
diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
index 69c8496e9..89ca8fda0 100644
--- a/packages/cli/CHANGELOG.md
+++ b/packages/cli/CHANGELOG.md
@@ -1,5 +1,42 @@
 # @xnetjs/cli
 
+## 0.1.0
+
+### Minor Changes
+
+- [#439](https://github.com/crs48/xNet/pull/439) [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9) Thanks [@crs48](https://github.com/crs48)! - Secure the browser↔local-model bridge (exploration 0289).
+  - **`@xnetjs/devkit` (breaking):** the agent bridge daemon now **requires a
+    per-launch pairing token** (`Authorization: Bearer <token>`, constant-time
+    compared) on its data endpoints (`/v1/chat/completions`, `/run`) and validates
+    the `Host` header to reject DNS-rebinding requests. `BridgeServerConfig` gains
+    `pairingToken?`, `BridgeServerHandle` exposes `pairingToken`, and a token is
+    auto-generated when none is supplied — so a client that previously called the
+    data endpoints with no auth now gets `401`. `/health` stays unauthenticated so
+    detection still works before pairing. New `openAiChatAgent` lets the bridge
+    front a raw OpenAI-compatible model server (Ollama/LM Studio) through the same
+    authenticated door.
+  - **`@xnetjs/plugins`:** `ConnectorEnv` gains `appOrigin` and the local-server
+    setup hint now names the exact `OLLAMA_ORIGINS=<origin>` line (never a
+    wildcard); new `localServerSetupHint` export; the MCP HTTP transport now
+    validates the `Host` header (defense-in-depth, no change for legitimate
+    callers). Additive.
+  - **`@xnetjs/cli`:** `xnet bridge serve` prints the pairing code and gains
+    `--token` (pin the code) and `--upstream` / `--upstream-model` (front a raw
+    local model). Additive.
+
+### Patch Changes
+
+- Updated dependencies [[`dd3b1cb`](https://github.com/crs48/xNet/commit/dd3b1cb270386b243afe0ba28e8e2a55c9ff2726), [`853d849`](https://github.com/crs48/xNet/commit/853d849039ebf7793dcc41ef3370def95e5dba14), [`10c9f87`](https://github.com/crs48/xNet/commit/10c9f87a20264bae60e2bee51eb31fb849364be7), [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9)]:
+  - @xnetjs/plugins@0.8.0
+  - @xnetjs/runtime@0.2.0
+  - @xnetjs/devkit@1.0.0
+  - @xnetjs/data@0.8.0
+  - @xnetjs/sqlite@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.0.12
 
 ### Patch Changes
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 75b8e92bd..6e6aa5ac9 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/cli",
-  "version": "0.0.12",
+  "version": "0.1.0",
   "description": "xNet CLI - Schema migrations, diagnostics, and development tools",
   "license": "MIT",
   "repository": {
diff --git a/packages/comms/CHANGELOG.md b/packages/comms/CHANGELOG.md
index 2775e7bd5..d35b01816 100644
--- a/packages/comms/CHANGELOG.md
+++ b/packages/comms/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/comms
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/crypto@0.8.0
+
 ## 0.0.11
 
 ### Patch Changes
diff --git a/packages/comms/package.json b/packages/comms/package.json
index dfd497ba0..33c8b6399 100644
--- a/packages/comms/package.json
+++ b/packages/comms/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/comms",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "description": "Real-time communications for xNet: presence rooms, chat, calls, and the notification inbox (explorations 0167/0168)",
   "type": "module",
   "main": "./src/index.ts",
diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
index adb837e76..bb4d73f20 100644
--- a/packages/core/CHANGELOG.md
+++ b/packages/core/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @xnetjs/core
 
+## 0.8.0
+
 ## 0.7.0
 
 ## 0.6.0
diff --git a/packages/core/package.json b/packages/core/package.json
index e4ee7f262..865f769f0 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/core",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/packages/crypto/CHANGELOG.md b/packages/crypto/CHANGELOG.md
index 00c9094b3..0c8bc98ab 100644
--- a/packages/crypto/CHANGELOG.md
+++ b/packages/crypto/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @xnetjs/crypto
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes
diff --git a/packages/crypto/package.json b/packages/crypto/package.json
index 2dd107dec..1813e5d2b 100644
--- a/packages/crypto/package.json
+++ b/packages/crypto/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/crypto",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/packages/dashboard/CHANGELOG.md b/packages/dashboard/CHANGELOG.md
index c38c9e851..a53ab735b 100644
--- a/packages/dashboard/CHANGELOG.md
+++ b/packages/dashboard/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @xnetjs/dashboard
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies [[`dd3b1cb`](https://github.com/crs48/xNet/commit/dd3b1cb270386b243afe0ba28e8e2a55c9ff2726), [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9)]:
+  - @xnetjs/plugins@0.8.0
+  - @xnetjs/react@0.8.0
+  - @xnetjs/data@0.8.0
+  - @xnetjs/social@0.0.12
+
 ## 0.0.11
 
 ### Patch Changes
diff --git a/packages/dashboard/package.json b/packages/dashboard/package.json
index b84999b61..2b94396d9 100644
--- a/packages/dashboard/package.json
+++ b/packages/dashboard/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/dashboard",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",
diff --git a/packages/data-bridge/CHANGELOG.md b/packages/data-bridge/CHANGELOG.md
index 3f43390a3..8ad33f8a0 100644
--- a/packages/data-bridge/CHANGELOG.md
+++ b/packages/data-bridge/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @xnetjs/data-bridge
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/sqlite@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes
diff --git a/packages/data-bridge/package.json b/packages/data-bridge/package.json
index ebfe806f7..15fd3b0da 100644
--- a/packages/data-bridge/package.json
+++ b/packages/data-bridge/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/data-bridge",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "DataBridge abstraction for off-main-thread data access in xNet",
   "license": "MIT",
   "repository": {
diff --git a/packages/data/CHANGELOG.md b/packages/data/CHANGELOG.md
index f23723602..a902d9ffc 100644
--- a/packages/data/CHANGELOG.md
+++ b/packages/data/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @xnetjs/data
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/storage@0.8.0
+  - @xnetjs/sqlite@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes
diff --git a/packages/data/package.json b/packages/data/package.json
index d2fc0b216..41d2a1cb6 100644
--- a/packages/data/package.json
+++ b/packages/data/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/data",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/packages/devkit/CHANGELOG.md b/packages/devkit/CHANGELOG.md
index 48fee1bdf..fe542fc86 100644
--- a/packages/devkit/CHANGELOG.md
+++ b/packages/devkit/CHANGELOG.md
@@ -1,5 +1,40 @@
 # @xnetjs/devkit
 
+## 1.0.0
+
+### Major Changes
+
+- [#439](https://github.com/crs48/xNet/pull/439) [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9) Thanks [@crs48](https://github.com/crs48)! - Secure the browser↔local-model bridge (exploration 0289).
+  - **`@xnetjs/devkit` (breaking):** the agent bridge daemon now **requires a
+    per-launch pairing token** (`Authorization: Bearer <token>`, constant-time
+    compared) on its data endpoints (`/v1/chat/completions`, `/run`) and validates
+    the `Host` header to reject DNS-rebinding requests. `BridgeServerConfig` gains
+    `pairingToken?`, `BridgeServerHandle` exposes `pairingToken`, and a token is
+    auto-generated when none is supplied — so a client that previously called the
+    data endpoints with no auth now gets `401`. `/health` stays unauthenticated so
+    detection still works before pairing. New `openAiChatAgent` lets the bridge
+    front a raw OpenAI-compatible model server (Ollama/LM Studio) through the same
+    authenticated door.
+  - **`@xnetjs/plugins`:** `ConnectorEnv` gains `appOrigin` and the local-server
+    setup hint now names the exact `OLLAMA_ORIGINS=<origin>` line (never a
+    wildcard); new `localServerSetupHint` export; the MCP HTTP transport now
+    validates the `Host` header (defense-in-depth, no change for legitimate
+    callers). Additive.
+  - **`@xnetjs/cli`:** `xnet bridge serve` prints the pairing code and gains
+    `--token` (pin the code) and `--upstream` / `--upstream-model` (front a raw
+    local model). Additive.
+
+### Patch Changes
+
+- [#446](https://github.com/crs48/xNet/pull/446) [`10c9f87`](https://github.com/crs48/xNet/commit/10c9f87a20264bae60e2bee51eb31fb849364be7) Thanks [@crs48](https://github.com/crs48)! - Isolate git subprocesses from inherited repo-location env. When the dev loop (or
+  its tests) ran while a git hook was active — e.g. husky `pre-push` running
+  `pnpm test` — the hook's exported `GIT_DIR`/`GIT_WORK_TREE`/`GIT_INDEX_FILE`
+  leaked into `git` children and overrode the explicit `cwd`, so operations
+  (`config`, `commit`, even `push`) targeted the hook's repo instead of the
+  requested worktree. `NodeCommandRunner` now scrubs git's repo-location env vars
+  for `git` invocations so `cwd` is always authoritative; an explicit
+  `options.env` entry still wins.
+
 ## 0.0.2
 
 ### Patch Changes
diff --git a/packages/devkit/package.json b/packages/devkit/package.json
index 389289c77..35cf419a1 100644
--- a/packages/devkit/package.json
+++ b/packages/devkit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/devkit",
-  "version": "0.0.2",
+  "version": "1.0.0",
   "description": "The agentic dev-loop core (exploration 0190): isolate in a git worktree, let a bring-your-own coding agent edit, run a validation gate, then checkpoint or roll back. Injectable command runner; zero runtime dependencies.",
   "license": "MIT",
   "type": "module",
diff --git a/packages/history/CHANGELOG.md b/packages/history/CHANGELOG.md
index 03a001ef5..b680a99cb 100644
--- a/packages/history/CHANGELOG.md
+++ b/packages/history/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @xnetjs/history
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes
diff --git a/packages/history/package.json b/packages/history/package.json
index 59f098c9c..dd4f6bb7b 100644
--- a/packages/history/package.json
+++ b/packages/history/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/history",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "History, audit & time travel for xNet (point-in-time reconstruction, undo/redo, diffs, blame, verification)",
   "license": "MIT",
   "repository": {
diff --git a/packages/identity/CHANGELOG.md b/packages/identity/CHANGELOG.md
index 799a38de4..a6e89965a 100644
--- a/packages/identity/CHANGELOG.md
+++ b/packages/identity/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/identity
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes
diff --git a/packages/identity/package.json b/packages/identity/package.json
index 732beb12f..ff725adc6 100644
--- a/packages/identity/package.json
+++ b/packages/identity/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/identity",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/packages/labs/CHANGELOG.md b/packages/labs/CHANGELOG.md
index c97be04af..f2aeeb4b4 100644
--- a/packages/labs/CHANGELOG.md
+++ b/packages/labs/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/labs
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies [[`dd3b1cb`](https://github.com/crs48/xNet/commit/dd3b1cb270386b243afe0ba28e8e2a55c9ff2726), [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9)]:
+  - @xnetjs/plugins@0.8.0
+  - @xnetjs/data@0.8.0
+
 ## 0.0.11
 
 ### Patch Changes
diff --git a/packages/labs/package.json b/packages/labs/package.json
index bcb6da399..b728cd3e4 100644
--- a/packages/labs/package.json
+++ b/packages/labs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/labs",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/packages/licenses/CHANGELOG.md b/packages/licenses/CHANGELOG.md
index e82d17c5b..09724db28 100644
--- a/packages/licenses/CHANGELOG.md
+++ b/packages/licenses/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @xnetjs/licenses
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/crypto@0.8.0
+
 ## 0.0.11
 
 ### Patch Changes
diff --git a/packages/licenses/package.json b/packages/licenses/package.json
index 87c41ff55..00a69bfec 100644
--- a/packages/licenses/package.json
+++ b/packages/licenses/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/licenses",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "description": "Ed25519-signed, DID-bound plugin license tokens — the offline-verifiable entitlement spine for the paid plugin marketplace (exploration 0196).",
   "license": "MIT",
   "type": "module",
diff --git a/packages/maps/CHANGELOG.md b/packages/maps/CHANGELOG.md
index 4731a3ed7..64f2ab095 100644
--- a/packages/maps/CHANGELOG.md
+++ b/packages/maps/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @xnetjs/maps
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+
 ## 0.0.11
 
 ### Patch Changes
diff --git a/packages/maps/package.json b/packages/maps/package.json
index 6a8221775..16914b011 100644
--- a/packages/maps/package.json
+++ b/packages/maps/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/maps",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",
diff --git a/packages/meetings/CHANGELOG.md b/packages/meetings/CHANGELOG.md
index f2b979fd1..e830ca8fd 100644
--- a/packages/meetings/CHANGELOG.md
+++ b/packages/meetings/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/meetings
 
+## 0.0.5
+
+### Patch Changes
+
+- Updated dependencies [[`dd3b1cb`](https://github.com/crs48/xNet/commit/dd3b1cb270386b243afe0ba28e8e2a55c9ff2726), [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9)]:
+  - @xnetjs/plugins@0.8.0
+  - @xnetjs/data@0.8.0
+
 ## 0.0.4
 
 ### Patch Changes
diff --git a/packages/meetings/package.json b/packages/meetings/package.json
index 6fddd429f..95743b73d 100644
--- a/packages/meetings/package.json
+++ b/packages/meetings/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/meetings",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Botless meeting transcription + AI notes (exploration 0279). Platform-agnostic capture session (VAD chunking, Me/Them channel attribution, batched segment upserts), swappable-engine selection over @xnetjs/dictation, and the enhancement/template/chat logic. Audio capture itself is platform code (Electron/web); this package is the pure core.",
   "license": "MIT",
   "type": "module",
diff --git a/packages/plugins/CHANGELOG.md b/packages/plugins/CHANGELOG.md
index 5448975f0..b83855988 100644
--- a/packages/plugins/CHANGELOG.md
+++ b/packages/plugins/CHANGELOG.md
@@ -1,5 +1,38 @@
 # @xnetjs/plugins
 
+## 0.8.0
+
+### Minor Changes
+
+- [#420](https://github.com/crs48/xNet/pull/420) [`dd3b1cb`](https://github.com/crs48/xNet/commit/dd3b1cb270386b243afe0ba28e8e2a55c9ff2726) Thanks [@crs48](https://github.com/crs48)! - Single-shell layout primitives (exploration 0284): `createDefaultTree()` and `DEFAULT_WORKSPACE_ID` join the workspace layout API — the one canonical tree (a sectioned sidebar in the rail, the full left dock, tabs on) that replaces the quiet/calm/bench preset trichotomy. Purely additive: `createPresetTree` and the preset ids remain for the devtools seed and portable-workspace round-trips.
+
+- [#439](https://github.com/crs48/xNet/pull/439) [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9) Thanks [@crs48](https://github.com/crs48)! - Secure the browser↔local-model bridge (exploration 0289).
+  - **`@xnetjs/devkit` (breaking):** the agent bridge daemon now **requires a
+    per-launch pairing token** (`Authorization: Bearer <token>`, constant-time
+    compared) on its data endpoints (`/v1/chat/completions`, `/run`) and validates
+    the `Host` header to reject DNS-rebinding requests. `BridgeServerConfig` gains
+    `pairingToken?`, `BridgeServerHandle` exposes `pairingToken`, and a token is
+    auto-generated when none is supplied — so a client that previously called the
+    data endpoints with no auth now gets `401`. `/health` stays unauthenticated so
+    detection still works before pairing. New `openAiChatAgent` lets the bridge
+    front a raw OpenAI-compatible model server (Ollama/LM Studio) through the same
+    authenticated door.
+  - **`@xnetjs/plugins`:** `ConnectorEnv` gains `appOrigin` and the local-server
+    setup hint now names the exact `OLLAMA_ORIGINS=<origin>` line (never a
+    wildcard); new `localServerSetupHint` export; the MCP HTTP transport now
+    validates the `Host` header (defense-in-depth, no change for legitimate
+    callers). Additive.
+  - **`@xnetjs/cli`:** `xnet bridge serve` prints the pairing code and gains
+    `--token` (pin the code) and `--upstream` / `--upstream-model` (front a raw
+    local model). Additive.
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/abuse@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Minor Changes
diff --git a/packages/plugins/package.json b/packages/plugins/package.json
index 82cd7592a..1cbb42832 100644
--- a/packages/plugins/package.json
+++ b/packages/plugins/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/plugins",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/packages/react/CHANGELOG.md b/packages/react/CHANGELOG.md
index 74dd280f7..eda98b991 100644
--- a/packages/react/CHANGELOG.md
+++ b/packages/react/CHANGELOG.md
@@ -1,5 +1,20 @@
 # @xnetjs/react
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies [[`dd3b1cb`](https://github.com/crs48/xNet/commit/dd3b1cb270386b243afe0ba28e8e2a55c9ff2726), [`853d849`](https://github.com/crs48/xNet/commit/853d849039ebf7793dcc41ef3370def95e5dba14), [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9)]:
+  - @xnetjs/plugins@0.8.0
+  - @xnetjs/runtime@0.2.0
+  - @xnetjs/history@0.8.0
+  - @xnetjs/data-bridge@0.8.0
+  - @xnetjs/data@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes
diff --git a/packages/react/package.json b/packages/react/package.json
index 6338ed480..ef3fe25c8 100644
--- a/packages/react/package.json
+++ b/packages/react/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/react",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/packages/runtime/CHANGELOG.md b/packages/runtime/CHANGELOG.md
index db0d68f4a..d60cb86cc 100644
--- a/packages/runtime/CHANGELOG.md
+++ b/packages/runtime/CHANGELOG.md
@@ -1,5 +1,24 @@
 # @xnetjs/runtime
 
+## 0.2.0
+
+### Minor Changes
+
+- [#448](https://github.com/crs48/xNet/pull/448) [`853d849`](https://github.com/crs48/xNet/commit/853d849039ebf7793dcc41ef3370def95e5dba14) Thanks [@crs48](https://github.com/crs48)! - `NodeStoreSyncProvider` now handles hub capacity rejections gracefully: on the first `QUOTA_EXCEEDED` (over the hub's per-user cap) or `STORAGE_FULL` (hub disk full) rejection it pauses outbound sync instead of re-flooding the hub, keeps local data intact, and resumes on the next reconnect. Subscribe to the new `onSyncBlocked(listener)` API (with `SyncBlockedReason`/`SyncBlockedListener` types) to surface a "storage full" notice in your app.
+
+### Patch Changes
+
+- Updated dependencies [[`dd3b1cb`](https://github.com/crs48/xNet/commit/dd3b1cb270386b243afe0ba28e8e2a55c9ff2726), [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9)]:
+  - @xnetjs/plugins@0.8.0
+  - @xnetjs/history@0.8.0
+  - @xnetjs/data-bridge@0.8.0
+  - @xnetjs/data@0.8.0
+  - @xnetjs/storage@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.1.8
 
 ### Patch Changes
diff --git a/packages/runtime/package.json b/packages/runtime/package.json
index d8d1c887b..e0f9ff542 100644
--- a/packages/runtime/package.json
+++ b/packages/runtime/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/runtime",
-  "version": "0.1.8",
+  "version": "0.2.0",
   "description": "Framework-agnostic xNet runtime: createXNetClient() and sync orchestration, usable from any framework, a CLI, a worker, or a Node service",
   "license": "MIT",
   "repository": {
diff --git a/packages/server/CHANGELOG.md b/packages/server/CHANGELOG.md
index 553100c02..c2b004405 100644
--- a/packages/server/CHANGELOG.md
+++ b/packages/server/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @xnetjs/server
 
+## 0.0.11
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data-bridge@0.8.0
+  - @xnetjs/data@0.8.0
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+
 ## 0.0.10
 
 ### Patch Changes
diff --git a/packages/server/package.json b/packages/server/package.json
index af2a667f3..5f1e76ece 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/server",
-  "version": "0.0.10",
+  "version": "0.0.11",
   "description": "Bring-your-own-backend server kit for XNet React: a framework-agnostic structured-query executor + mutation engine over a server-side NodeStore, with developer auth hooks (authenticate / authorizeRead / authorizeWrite) replacing UCAN/DID, and a trust spectrum (server | custodial | signed) for how end-user identity maps onto signed changes (exploration 0223).",
   "license": "MIT",
   "type": "module",
diff --git a/packages/social/CHANGELOG.md b/packages/social/CHANGELOG.md
index ee7d81b40..2e00edda2 100644
--- a/packages/social/CHANGELOG.md
+++ b/packages/social/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/social
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/crypto@0.8.0
+
 ## 0.0.11
 
 ### Patch Changes
diff --git a/packages/social/package.json b/packages/social/package.json
index e73267e6b..93fa5ad65 100644
--- a/packages/social/package.json
+++ b/packages/social/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/social",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",
diff --git a/packages/sqlite/CHANGELOG.md b/packages/sqlite/CHANGELOG.md
index 48182d170..be6b22b7c 100644
--- a/packages/sqlite/CHANGELOG.md
+++ b/packages/sqlite/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @xnetjs/sqlite
 
+## 0.8.0
+
 ## 0.7.0
 
 ## 0.6.0
diff --git a/packages/sqlite/package.json b/packages/sqlite/package.json
index d74d0003e..99d8b662d 100644
--- a/packages/sqlite/package.json
+++ b/packages/sqlite/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/sqlite",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Unified SQLite adapter for xNet across all platforms",
   "license": "MIT",
   "repository": {
diff --git a/packages/storage/CHANGELOG.md b/packages/storage/CHANGELOG.md
index 9bd683015..e8bc262f3 100644
--- a/packages/storage/CHANGELOG.md
+++ b/packages/storage/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @xnetjs/storage
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/sqlite@0.8.0
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes
diff --git a/packages/storage/package.json b/packages/storage/package.json
index 40ec2570d..c62fb01b4 100644
--- a/packages/storage/package.json
+++ b/packages/storage/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/storage",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/packages/sync/CHANGELOG.md b/packages/sync/CHANGELOG.md
index f039e2c5e..420e086bb 100644
--- a/packages/sync/CHANGELOG.md
+++ b/packages/sync/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @xnetjs/sync
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes
diff --git a/packages/sync/package.json b/packages/sync/package.json
index 873af0b8b..63fbed639 100644
--- a/packages/sync/package.json
+++ b/packages/sync/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/sync",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Unified sync primitives for xNet (Change<T>, vector clocks, hash chains)",
   "license": "MIT",
   "repository": {
diff --git a/packages/unreal/CHANGELOG.md b/packages/unreal/CHANGELOG.md
index 33260821a..c669248a3 100644
--- a/packages/unreal/CHANGELOG.md
+++ b/packages/unreal/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @xnetjs/unreal
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+
 ## 0.0.11
 
 ### Patch Changes
diff --git a/packages/unreal/package.json b/packages/unreal/package.json
index b179081ab..1e7b1f91b 100644
--- a/packages/unreal/package.json
+++ b/packages/unreal/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/unreal",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "description": "Unreal Engine 6 interop — the governed game connector (durable player data → XNet nodes), the save-file-not-netcode granularity guardrail, and the game-event → node mapping over the @xnetjs/data game-interop schema pack (exploration 0200).",
   "license": "MIT",
   "type": "module",