crs48 · crs48 · Jul 10, 2026 · Jul 10, 2026
diff --git a/.changeset/coherent-single-shell-0284.md b/.changeset/coherent-single-shell-0284.md
diff --git a/.changeset/demo-capacity-sync-halt.md b/.changeset/demo-capacity-sync-halt.md
diff --git a/.changeset/devkit-git-env-isolation.md b/.changeset/devkit-git-env-isolation.md
diff --git a/.changeset/secure-local-model-bridge-0289.md b/.changeset/secure-local-model-bridge-0289.md
diff --git a/apps/cloud/CHANGELOG.md b/apps/cloud/CHANGELOG.md
@@ -1,5 +1,13 @@
 # xnet-cloud
 
+## 0.0.11
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/cloud@0.0.1
+
 ## 0.0.10
 
 ### Patch Changes

diff --git a/apps/cloud/package.json b/apps/cloud/package.json
@@ -1,6 +1,6 @@
 {
   "name": "xnet-cloud",
-  "version": "0.0.10",
+  "version": "0.0.11",
   "description": "xNet Cloud control plane — billing, provisioning, and fleet management (explorations 0174/0175).",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",

diff --git a/apps/electron/CHANGELOG.md b/apps/electron/CHANGELOG.md
@@ -1,5 +1,9 @@
 # xnet-desktop
 
+## 0.8.0
+
+Desktop shell release riding the @xnetjs/core 0.8.0 train. Desktop-specific changes are not tracked here; see the core packages' changelogs for what shipped.
+
 ## 0.7.0
 
 Desktop shell release riding the @xnetjs/core 0.7.0 train. Desktop-specific changes are not tracked here; see the core packages' changelogs for what shipped.

diff --git a/apps/electron/package.json b/apps/electron/package.json
@@ -1,6 +1,6 @@
 {
   "name": "xnet-desktop",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "xNet Desktop - Local-first data platform for macOS/Windows/Linux",
   "author": {
     "name": "xNet",

diff --git a/packages/abuse/CHANGELOG.md b/packages/abuse/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/abuse
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes

diff --git a/packages/abuse/package.json b/packages/abuse/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/abuse",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Composable abuse, moderation, and reach policy decisions for xNet",
   "license": "MIT",
   "repository": {

diff --git a/packages/brain/CHANGELOG.md b/packages/brain/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/brain
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/vectors@0.0.1
+
 ## 0.0.11
 
 ### Patch Changes

diff --git a/packages/brain/package.json b/packages/brain/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/brain",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",

diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
@@ -1,5 +1,42 @@
 # @xnetjs/cli
 
+## 0.1.0
+
+### Minor Changes
+
+- [#439](https://github.com/crs48/xNet/pull/439) [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9) Thanks [@crs48](https://github.com/crs48)! - Secure the browser↔local-model bridge (exploration 0289).
+  - **`@xnetjs/devkit` (breaking):** the agent bridge daemon now **requires a
+    per-launch pairing token** (`Authorization: Bearer <token>`, constant-time
+    compared) on its data endpoints (`/v1/chat/completions`, `/run`) and validates
+    the `Host` header to reject DNS-rebinding requests. `BridgeServerConfig` gains
+    `pairingToken?`, `BridgeServerHandle` exposes `pairingToken`, and a token is
+    auto-generated when none is supplied — so a client that previously called the
+    data endpoints with no auth now gets `401`. `/health` stays unauthenticated so
+    detection still works before pairing. New `openAiChatAgent` lets the bridge
+    front a raw OpenAI-compatible model server (Ollama/LM Studio) through the same
+    authenticated door.
+  - **`@xnetjs/plugins`:** `ConnectorEnv` gains `appOrigin` and the local-server
+    setup hint now names the exact `OLLAMA_ORIGINS=<origin>` line (never a
+    wildcard); new `localServerSetupHint` export; the MCP HTTP transport now
+    validates the `Host` header (defense-in-depth, no change for legitimate
+    callers). Additive.
+  - **`@xnetjs/cli`:** `xnet bridge serve` prints the pairing code and gains
+    `--token` (pin the code) and `--upstream` / `--upstream-model` (front a raw
+    local model). Additive.
+
+### Patch Changes
+
+- Updated dependencies [[`dd3b1cb`](https://github.com/crs48/xNet/commit/dd3b1cb270386b243afe0ba28e8e2a55c9ff2726), [`853d849`](https://github.com/crs48/xNet/commit/853d849039ebf7793dcc41ef3370def95e5dba14), [`10c9f87`](https://github.com/crs48/xNet/commit/10c9f87a20264bae60e2bee51eb31fb849364be7), [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9)]:
+  - @xnetjs/plugins@0.8.0
+  - @xnetjs/runtime@0.2.0
+  - @xnetjs/devkit@1.0.0
+  - @xnetjs/data@0.8.0
+  - @xnetjs/sqlite@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.0.12
 
 ### Patch Changes

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/cli",
-  "version": "0.0.12",
+  "version": "0.1.0",
   "description": "xNet CLI - Schema migrations, diagnostics, and development tools",
   "license": "MIT",
   "repository": {

diff --git a/packages/comms/CHANGELOG.md b/packages/comms/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @xnetjs/comms
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/crypto@0.8.0
+
 ## 0.0.11
 
 ### Patch Changes

diff --git a/packages/comms/package.json b/packages/comms/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/comms",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "description": "Real-time communications for xNet: presence rooms, chat, calls, and the notification inbox (explorations 0167/0168)",
   "type": "module",
   "main": "./src/index.ts",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @xnetjs/core
 
+## 0.8.0
+
 ## 0.7.0
 
 ## 0.6.0

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/core",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",

diff --git a/packages/crypto/CHANGELOG.md b/packages/crypto/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @xnetjs/crypto
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes

diff --git a/packages/crypto/package.json b/packages/crypto/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/crypto",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",

diff --git a/packages/dashboard/CHANGELOG.md b/packages/dashboard/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @xnetjs/dashboard
 
+## 0.0.12
+
+### Patch Changes
+
+- Updated dependencies [[`dd3b1cb`](https://github.com/crs48/xNet/commit/dd3b1cb270386b243afe0ba28e8e2a55c9ff2726), [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9)]:
+  - @xnetjs/plugins@0.8.0
+  - @xnetjs/react@0.8.0
+  - @xnetjs/data@0.8.0
+  - @xnetjs/social@0.0.12
+
 ## 0.0.11
 
 ### Patch Changes

diff --git a/packages/dashboard/package.json b/packages/dashboard/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/dashboard",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "type": "module",
   "main": "./src/index.ts",
   "types": "./src/index.ts",

diff --git a/packages/data-bridge/CHANGELOG.md b/packages/data-bridge/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @xnetjs/data-bridge
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/sqlite@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes

diff --git a/packages/data-bridge/package.json b/packages/data-bridge/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/data-bridge",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "DataBridge abstraction for off-main-thread data access in xNet",
   "license": "MIT",
   "repository": {

diff --git a/packages/data/CHANGELOG.md b/packages/data/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @xnetjs/data
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/storage@0.8.0
+  - @xnetjs/sqlite@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/identity@0.8.0
+  - @xnetjs/crypto@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes

diff --git a/packages/data/package.json b/packages/data/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/data",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "license": "MIT",
   "repository": {
     "type": "git",

diff --git a/packages/devkit/CHANGELOG.md b/packages/devkit/CHANGELOG.md
@@ -1,5 +1,40 @@
 # @xnetjs/devkit
 
+## 1.0.0
+
+### Major Changes
+
+- [#439](https://github.com/crs48/xNet/pull/439) [`677856e`](https://github.com/crs48/xNet/commit/677856e0317800a0f6e78531ae490aca744570d9) Thanks [@crs48](https://github.com/crs48)! - Secure the browser↔local-model bridge (exploration 0289).
+  - **`@xnetjs/devkit` (breaking):** the agent bridge daemon now **requires a
+    per-launch pairing token** (`Authorization: Bearer <token>`, constant-time
+    compared) on its data endpoints (`/v1/chat/completions`, `/run`) and validates
+    the `Host` header to reject DNS-rebinding requests. `BridgeServerConfig` gains
+    `pairingToken?`, `BridgeServerHandle` exposes `pairingToken`, and a token is
+    auto-generated when none is supplied — so a client that previously called the
+    data endpoints with no auth now gets `401`. `/health` stays unauthenticated so
+    detection still works before pairing. New `openAiChatAgent` lets the bridge
+    front a raw OpenAI-compatible model server (Ollama/LM Studio) through the same
+    authenticated door.
+  - **`@xnetjs/plugins`:** `ConnectorEnv` gains `appOrigin` and the local-server
+    setup hint now names the exact `OLLAMA_ORIGINS=<origin>` line (never a
+    wildcard); new `localServerSetupHint` export; the MCP HTTP transport now
+    validates the `Host` header (defense-in-depth, no change for legitimate
+    callers). Additive.
+  - **`@xnetjs/cli`:** `xnet bridge serve` prints the pairing code and gains
+    `--token` (pin the code) and `--upstream` / `--upstream-model` (front a raw
+    local model). Additive.
+
+### Patch Changes
+
+- [#446](https://github.com/crs48/xNet/pull/446) [`10c9f87`](https://github.com/crs48/xNet/commit/10c9f87a20264bae60e2bee51eb31fb849364be7) Thanks [@crs48](https://github.com/crs48)! - Isolate git subprocesses from inherited repo-location env. When the dev loop (or
+  its tests) ran while a git hook was active — e.g. husky `pre-push` running
+  `pnpm test` — the hook's exported `GIT_DIR`/`GIT_WORK_TREE`/`GIT_INDEX_FILE`
+  leaked into `git` children and overrode the explicit `cwd`, so operations
+  (`config`, `commit`, even `push`) targeted the hook's repo instead of the
+  requested worktree. `NodeCommandRunner` now scrubs git's repo-location env vars
+  for `git` invocations so `cwd` is always authoritative; an explicit
+  `options.env` entry still wins.
+
 ## 0.0.2
 
 ### Patch Changes

diff --git a/packages/devkit/package.json b/packages/devkit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/devkit",
-  "version": "0.0.2",
+  "version": "1.0.0",
   "description": "The agentic dev-loop core (exploration 0190): isolate in a git worktree, let a bring-your-own coding agent edit, run a validation gate, then checkpoint or roll back. Injectable command runner; zero runtime dependencies.",
   "license": "MIT",
   "type": "module",

diff --git a/packages/history/CHANGELOG.md b/packages/history/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @xnetjs/history
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @xnetjs/data@0.8.0
+  - @xnetjs/sync@0.8.0
+  - @xnetjs/core@0.8.0
+
 ## 0.7.0
 
 ### Patch Changes

diff --git a/packages/history/package.json b/packages/history/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/history",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "History, audit & time travel for xNet (point-in-time reconstruction, undo/redo, diffs, blame, verification)",
   "license": "MIT",
   "repository": {