chore(main): release 0.1.0

[cluckwork-lockfix]

🤖 I have created a release beep boop

0.1.0 (2026-09-02)

⚠ BREAKING CHANGES

• log in by farm code, with per-account email identity (#532) (feat!: log in by farm code, with per-account email identity (#532) #564)

Features

• accounts: add Account.Slug (farm code), suspend/reactivate, list-accounts verb (#531) (3fe9754)
• accounts: provision additional farms (#581) (006f298)
• add Aspire local development AppHost (#567) (2c9e6b9)
• add configurable worker sale allocation (#619) (0955095)
• add searchable entity pickers (#642) (60d2053)
• auth: add ApplicationUser.StepUpLogoutEpoch column (#338) (#554) (18306ee)
• certify over-cap simulation fixture bands (#633) (a67b2e1), closes #627
• customers: edit existing customer details (#625) (#626) (062a55c)
• jobs: single-runner leader gate for the durable job worker (#271) (#555) (4148f9b)
• let owners change user email addresses (#605) (842347b)
• log in by farm code, with per-account email identity (#532) (#564) (68adb62)
• ratelimit: distributed IP-keyed auth limiters (#544) (#558) (ec14972)
• ratelimit: distributed per-account report concurrency cap with local-ceiling fallback (#545) (#559) (1522e4e)
• scope Worker reads to assigned flocks (#388) (#611) (5884a9a)
• shared-state ports with Redis + in-process fallback (#543) (#552) (f767fa9)
• suspend-account / reactivate-account operator verbs (#534) (#573) (d0be26c)
• tenancy: write-side tenant guard + single-assignment TenantContext (#546) (#561) (f371f1d)
• web: dashboard rework — capture-status tiles, 14-day trend, stock as a stacked bar (#654) (396ba23)
• web: elevation hierarchy and sentence-case labels (#651, #652) (#661) (28db4c7)
• web: key the farm brand palette per farm (#586) (#600) (7183a43)
• web: let operators forget remembered farms (#598) (577d94e)
• web: prefill the farm code from ?farm= and remember it (#535) (#588) (b7f5cc6)
• web: split authenticated routes into lazy chunks (#620) (5089271)
• web: typeset numbers as numbers and refresh the Help glossary (#650, #657) (af4fe11)

Bug fixes

• api: print the farm code from bootstrap-admin (#589) (#594) (34032ac)
• auth: reject invalid account claims (#622) (8d6c7fe)
• auth: require step-up for durable user access (#360) (#607) (f767dce)
• ci: fail closed on invalid vulnerability config (#621) (1690db8)
• ci: remove invalid XML comment from nuget.lockfix.config (#541) (5f1bc0a)
• require step-up for flock scope changes (#609) (4151f89)
• scope legacy logout to selected farm (#624) (fae8d82)
• seed: drain the daily-entry lock sweep so deep simulation fixtures validate (#644) (730fa23), closes #638
• tests: bump the image-pin allow-list counts for the AppHost LocalPorts tests (#593) (58d3056)
• web: keep a paged window and an item panel on the user's newest intent (#645) (d81bccf)
• web: make login take the cross-tab cookie lock so a racing refresh cannot restore the wrong session (#648) (ff18beb)
• web: page truncated customer and movement tables with usePagedList (7cfe4d6)

Documentation

• add k6 preparation steps to the dev-database fixture runbook (#643) (a4f1f09)
• add runbook for loading the simulation fixture into a dev database (#639) (2d143b8)
• agents: find guards by grepping registry readers; amend issues a PR overtakes (#580) (fe3fde8)
• aspire: record the second local database and pin the AppHost dashboard ports (#623) (713b941)
• compress AGENTS.md to one paragraph per rule, and draw the two orders that matter (#551) (997ae8a)
• multi-farm tenancy decision record and AGENTS/GLOSSARY sync (#537) (#601) (2c34771)
• record #579 as won't-fix — suspension is immediate for use, not issuance (#582) (7a3be40)
• screenshots of the running SPA in the README (#550) (711488a)
• specify searchable entity picker (#641) (91d4300)
• split the README into audience-scoped docs and adopt repo-template scaffolding (#548) (b3f3fcf)
• surface Aspire local development workflow (#568) (a343baa)

---

This PR was generated with Release Please. See documentation.