Changelog #

0.4.1 #

Bump the family floors onto the 0.2.0 substrate wave: grid_engine, grid_exploration, grid_sdk ^0.2.0; grid_diagnostics_contract ^0.2.0. No API changes.

Breaking: acquire() establishes and verifies station-owned process groups — resident stations own their spawn tree, and down kills only the station's own group. Callers embedding grid_cli must not assume the old detached-spawn behavior.
Breaking: the exploration surface speaks the ext.leonard.* VM-service namespace (protocol version 2) via leonard_contract; ext.exploration.* is gone. Attach tooling must be on leonard_* 0.2.x.
Fix: link authoring compiles against the published beads_dart — the retired IssueType.link constant is replaced by the grid-owned GridIssueTypes.link vocabulary (0.3.0 was broken here at load time).
Diagnostics ride the genesis_foundation substrate (typed tree snapshots over the station door).

Breaking: commandHandler is now REQUIRED on StationControl.start. Migration: pass the handler vended by grid_sdk ≥0.1.1 — StationControl.start(..., commandHandler: workRuntime.commands).
Added the vended resident station verbs — ResidentUpCommand, ResidentDownCommand, ResidentStatusCommand, the resident flag surface, and state-workspace/lock resolution — parameterized over a GridDelegate factory and a verb-name string, so a station composed directly on the_grid no longer copies ~1000 lines (the_grid #112).
Added the fenced station command route on StationControl with bearer-first routing, monotonic fencing, and cached idempotent dispatch (the_grid #106).
Station control serves tree snapshots; headless projection reads and count-gated snapshot streams are fenced by tests (the_grid #110, #113, #114, #115).
Added attributed beyond-cap rework; open gate beads are trusted during rework (the_grid #101, #102).

Breaking: StationLockService.acquire no longer takes a pgid parameter — the service now establishes the station's own process group itself (setsid-own-group before the lock write) and refuses via StationRefusal when the resolved pgid is not the station pid. Migration: drop the pgid: argument from acquire(...) call sites; if you were computing a group id to pass in, delete that code — the recorded pgid is now always the station's own, verified group.
stop() gains a pgid-gated group signal: when the lock's recorded pgid matches the live process group, teardown signals the whole group; on mismatch it falls back loudly to the previous pid-scoped SIGTERM.
New: establishStationProcessGroup (re-exported), with ProcessGroupController.resolvePgid as the single source of process-group identity; regression test boots from a non-leader parent and asserts the recorded group is the station's own tree.