What’s new — selected highlights

This is a curated set of user-facing highlights, not a complete commit changelog. UI highlight versions are not protocol or package versions.

This page lists only changes that are present in the loaded cockpit and lead to a real guide, inspectable object, or restartable Open MCT tour. Planned work belongs in the roadmap or issues, not in shipped history.

0.8.1 — A friendlier circuit

• Start now exposes working local notes and a local address book, without pretending to be a public chat room.
• Sign-in, same-browser resume, encrypted identity export/import, and optional GitHub recovery explain their separate persistence boundaries.
• The shell and cockpit share one unlocked Self session. A view being destroyed no longer logs out the other surface.
• A read-only health observer updates the service strip and Cloudflare circuit labels. Paused APIs stay disabled; configuration never becomes a claim of personal persistence.
• First visits are not interrupted by update announcements. Returning visitors can dismiss highlights, see the badge update across tabs, and reopen them deliberately.
• The same stable cockpit gets PCB faceplates, larger newcomer controls, mobile layouts, and reduced-motion styling.
• Every public guide gains a current, reproducible browser picture. Existing conceptual diagrams remain, and nested historical images resolve correctly.

Read Welcome, Resume, or Chat. The underlying deployment's safety gates and NOT E2E YET boundary remain in place.

0.8 — SQLite-owned Cursor Machine proof

• Added indexed batch claiming, worker and effect leases, explicit serializable continuation state, capability-gated scheduling, duplicate-safe results, and receipt-driven wakeups.
• Added transactional Linda assertions/interests, checkpoints, outbox effects, and rollback across coarse executor batches.
• Added the official SQLite Wasm dedicated Worker with memory, OPFS, and SAH-pool reporting, local ATTACH, deterministic functions, SQLite read-only authorizer enforcement, and bounded RPC/query budgets.
• Added the restricted watch-party-presence/v0 Lua source profile and real watch-party scheduler demo. Source and compiled IDs remain separate; source grants no execution authority.
• Added Nelua-generated C and scalar/SIMD Wasm scheduler-packet execution behind frozen JS-compatible fixtures and a parity gate. Rust issue #50 remains independent.
• Added the Lua + SQLite Machine Lab and standalone proof entry, showing the compiled graph, SQLite version, leased assertion, and transactional outbox readback.
• Kept Cap'n Web as live pipelined acceleration and Durable Object SQLite as a bounded semantic sync target—not continuation authority or page/WAL replication.

Read SQLite + Lua Cursor Machine, Machine Lab, SQLite Body and Lua Programs, and Nelua portable core.

0.7.1 — Start, Chat, and local peer RPC

• A clean visit now starts with three useful choices: create or resume a local Self, open the small Chat + Address Book cursor app, or enter the full cockpit.
• Mailbox and cockpit identity use one deployment-scoped encrypted vault key, including migration from the earlier production-root key.
• Chat separates identity, persistence, and content encryption; retained notes remain clearly marked NOT E2E YET.
• Cap’n Web now provides a bounded same-origin HTTP pipeline through one POST / while ordinary GET / still serves the application.
• The same ephemeral capability model can run directly between browsers over the new ordered, reliable cursors-capnweb-v1 WebRTC data channel.
• WebRTC defaults to device/LAN-local ICE with no STUN or TURN. Manual offer/answer exchange works immediately; admitted CurveMailbox signaling remains an optional later rendezvous.
• HTTP batch remains the correctness fallback, and CURSO/0 signed records remain the durable authority.

The signed cursor-app executor is not implied by the friendly Chat surface. Arbitrary downloaded JavaScript/WASM still does not execute; issue #20 remains the manifest, isolation, budget, and receipt milestone.

Deterministic CI capture of the segmented central-machine cockpit after the Start and Chat work.

Try the local peer transport in a browser console:

await globalThis.__cursorsAppRuntime.capnWebWebRtc.loopback()

Read Local Cap’n Web over WebRTC, Cap’n Web Pipeline, Chat with a Friend, or restart Tour Start, Self, and the Segmented Machine.

0.6 — Organized Self-centered cockpit

• Restored the stable territorial geometry preferred from PR #9 after previewing the denser information-superhighway experiment.
• Kept the radar sweep, circuit backplanes, observed traffic photons, and selectable machinery; Self now owns the center socket while focus uses a separate return PIP.
• Made semantic depth the third axis: zoom reveals denser instrumentation while Open MCT inspection, history, pinning, and deep links carry the full object model.
• Added browser-memory machinery and a memory cryptopointer without moving remote or unobserved services into local territory.
• Added an originless Cloudflare site Worker path and defensive static-asset size checks.
• Added executable durable-write evaluation: only a successful content-hash read-back counts as a verified copy or resurrection hint.
• Evolved the PR #9 machine into cursors-self-centered-machine-v2, enlarged routing hitboxes to cover component cards, and documented the fixed Self anchor in ADR 0002.
• Added an Open MCT Cursor Apps catalog with explicit installed, source-visible, local-prototype, and disconnected-network states.
• Added a generated /boot/ target whose response body is held below 1,200 bytes and prefers a previously cached core before the bundled release entry.

Restart Tour the Organized Orbital Cockpit under Open MCT → Start a Guided Netwalk.

0.5 — Information-superhighway preview experiment

• Replaced floating graph geometry with five semantic traffic lanes crossed by evidence-based locality districts.
• Added plug-in machinery modules, interchanges, selected-path highlighting, and traffic photons driven only by observed activity.
• Added Memory Cryptopointer and Browser Memory.
• Made pilot/mailbox status a top-bar control.
• Added encrypted identity import for deliberate cross-origin fork recovery.
• Added a pilot address book with explicit local trust labels and no false remote-connect claim.
• Added exchange devtools drill-down for material, carrier, counterparty, locality, author evidence, executor, store, and rate.
• Replaced the unsafe-looking arbitrary agent endpoint with a safe ChatGPT handoff.

This geometry is retained in HISTORY-UI.md; the current guided tour uses the organized orbital cockpit.

0.4 — Persistent bodies vocabulary

• Added Self / Body, Admission Root, Cloudflare Mailbox Object, SQLite Journal, and Signed Release Head.
• Added the working local encrypted identity vault.
• Added disabled-by-default Cloudflare Durable Object code and resurrection-capsule semantics.

Restart What’s New: Persistent Bodies under Start a Guided Netwalk.

0.3 — Explorable exchange machinery

• Made cryptopointers, cryptofabrics, mailboxes, curves, bodies, persistence, and recovery first-class Open MCT objects.
• Added compact inspection drawers, linkable/back-button state, pinning into My Items, local exchange chat, and fork provenance gates.
• Added public searchable guides with live object links and small contextual help.

Restart Trace a Local Message or Resurrect a Dry Network.

0.2 — Observable transport cockpit

• Added browser WebTorrent observation, optional native bridge telemetry, joined-source tables, wire traces, and a public reference source with payload deselected.
• Kept peer counts, content hashes, signatures, encryption, and authority as separate claims.

Read Operations Console.