0.2.11

First release cut from main since 0.2.8 — reconciles the out-of-band 0.2.9/0.2.10 releases.

• patchstack-connect protect — runtime-protection guard installer for TanStack Start + Supabase apps; guard is always-on by default, dry-run via explicit env (#36, previously published out-of-band as 0.2.9/0.2.10)
• mark-build now detects and injects a build-stack descriptor into built HTML (#35)
• Manifest endpoint test helper (#33)

v0.2.10

Runtime guard is now always-on: it blocks by default. Dry-run (log-only) is available only via an explicit PATCHSTACK_MODE=dry-run — no silent dry-run.

Additive to 0.2.9 (scan / mark-build / protect scaffolding unchanged). Stopgap release from the pulse-protect-command branch; protection logic will move to ps-node.

v0.2.9

Adds the patchstack-connect protect command — installs the runtime guard (virtual patching) into a TanStack Start + Supabase app, idempotently, with no changes to the user's own code. Ships guard type declarations (engine.d.ts / manifest.d.ts) so the scaffolded guard passes type-checked builds.

Additive to 0.2.8 (scan / mark-build unchanged). Stopgap release from the pulse-protect-command branch; the protection logic will move to ps-node.

• patchstack-connect protect [--manifest] — scaffold guard + patch Supabase client/Start entry + generate manifest.
• Guard templates bundled in dist and type-safe.

v0.2.8

What's Changed

• [ENG-3120] Fall back to the installed truth when the lockfile is stale by @devlob in #31
• Bump version to 0.2.8 by @devlob in #32

Full Changelog: v0.2.7...v0.2.8

v0.2.7

What's Changed

• Bump vite from 7.3.3 to 7.3.6 by @dependabot[bot] in #25
• Bump vitest from 3.2.4 to 3.2.6 by @dependabot[bot] in #22
• Refactor lockfile detection to probe concurrently by @mariojgt in #26
• Report manifests under the production environment by default by @mariojgt in #28
• [ENG-3120] Inject build fingerprint in mark-build for manifest parity by @devlob in #30

New Contributors

• @dependabot[bot] made their first contribution in #25
• @devlob made their first contribution in #30

Full Changelog: v0.2.6...v0.2.7

v0.2.6

What's Changed

• Add build flag injector and mark-build CLI by @mariojgt in #24

Full Changelog: v0.2.5...v0.2.6

v0.2.5

What's Changed

• Print claim URL after provisioning, expose in status by @ejntaylor in #13
• Fix claim URL path to /monitor/claim and flip default endpoint to HTTPS by @ejntaylor in #14
• Add pnpm-lock.yaml support by @ejntaylor in #15
• docs: link README to saas/docs/ecosystem.md by @ejntaylor in #18
• Stop committing dist/ to the repo by @ejntaylor in #17
• Add yarn.lock support (classic v1 and berry) by @ejntaylor in #16
• Bump version to 0.2.5 by @ejntaylor in #19

Full Changelog: v0.2.4...v0.2.5

v0.2.4

What's Changed

• replace the endpoints by @mariojgt in #12

Full Changelog: v0.2.3...v0.2.4

v0.2.3

What's Changed

• Version/bump by @mariojgt in #10

Full Changelog: 0.2.2...v0.2.3

0.2.2

What's Changed

• Update package.json by @mariojgt in #8
• Version/bump by @mariojgt in #9

Full Changelog: v0.2.1...0.2.2