chore(tinycloud-node): release v1.16.1

[samgbafa]

🤖 New release

• tinycloud-node: 0.0.1 -> 1.16.1

Changelog

1.16.1 - 2026-09-15

Added

• (TC-498) authorize exact native share email delivery (#229)
• (TC-500) publish enforcer DID in readiness (#221)
• (TC-500) admit accountless policy presentations (#218)
• (TC-470) admit holder-bound policy credentials
• bind share decryption delegation (#189)
• owner-rooted sharing v2 registration (#168)
• support sharing experience flows
• export production Share invitation descriptor
• expose production share policy runtime
• integrate node share email trust bundle
• converge node email claim authority path
• inject authenticated share authority providers
• close node authority seam
• add account delegation history query (TC-178)
• (policy-capability) wire capability registry into live invoke/delegate paths (TC-119) (#102)
• meter SQL/DuckDB artifact bytes in store_size + enforce storage quota on write-class database requests (#89)
• add telemetry spans (#76)
• (node) support KV batch put invocations
• make DuckDB support opt-in (#68)
• add encryption network module
• TC-1368 Add signed KV URLs (#60)
• add write hooks server support through phase 4 (#44)
• add per-space storage quotas with admin API (#32)

Fixed

• (ci) probe embedded Policy v3 routes (TC-500) (#228)
• (TC-500) retain embedded policy and remove share data routes (#226)
• (TC-498) authorize Policy v3 share notifications (#217)
• (TC-470) validate decrypted policy graph roots
• (TC-470) report policy admission failures precisely
• (TC-470) mint canonical policy session UCANs
• (TC-470) admit credential namespace authority
• (TC-470) serialize encryption network writes
• (TC-470) serialize policy writes with SQLite
• (TC-470) authenticate recipient credential space
• (share-v2) say which check denied a policy challenge (#196)
• allow authorization on Share delivery preflight (#190)
• (share-v2) TC-349 stop the readiness probe condemning a populated graph (#181)
• preserve sharing compatibility contracts
• use vendored email claim test paths
• make node CI contract fixtures deterministic
• fix CI control assertions and hermetic email fixture
• fix CI server module and test compilation
• fix CI async tests and server clippy
• fix CI for verifier wasm and share email runtime
• include mounted n4 crate in Docker planner
• require shared trust bundle in node production
• mount shared email trust bundle
• restore frozen node share route surface
• harden share email node deployment
• align authority audit with canonical root time
• bind policy recipient digest to email bytes
• bind holder session to challenge body
• avoid release diagnostic warnings
• keep mounted authorization diagnostics compilable
• pin node email vectors to authoritative manifest
• align email claim wire responses
• reconcile node email claim authority bridge
• close email claim node review blockers
• (db) avoid epoch serialization conflicts (TC-212) (#110)
• (quota) add timeouts to sidecar quota client; bump 1.4.3 (#91)
• distinguish epoch-insert DB errors from missing spaces (#90)
• vendor openssl for aarch64 release builds (#72)
• update dstack GetKey response to match new API format (#35)

Other

• (release) tinycloud-node 1.16.1 (TC-500) (#232)
• (release) tinycloud-node 1.16.0 (TC-500) (#227)
• (release) tinycloud-node 1.15.2 (#224)
• (release) tinycloud-node 1.15.1 (TC-500) (#222)
• (release) tinycloud-node 1.15.0 (TC-500) (#219)
• (release) prepare Policy v3 node 1.14.0 (TC-465) (#214)
• Merge remote-tracking branch 'origin/main' into skgbafa/tc-405-unified-delegation-resolver
• harden delegation runtime boundaries
• preserve ordinary authorization compatibility
• checkpoint policy delegation resolver
• Merge pull request perf(TC-294): conditional GET and cache policy for authenticated reads #204 from TinyCloudLabs/skgbafa/tc-294-conditional-get
• implement TC-409 optimization (#200)
• accept emailOrigin in the trust bundle, and give the bundle a way into the container (#188)
• (release) 1.13.0 (#186)
• publish the node's derived share key, fail closed on mismatch, and let verify-full use the default trust roots (#185)
• bump to 1.12.0 for the chain-guard deploy (#184)
• cap the prod DB pool below the instance limit, bump to 1.11.0 (#179)
• verify and lifetime-cap invocations before the replay-cache write (#178)
• activate and refine invocation telemetry (#176)
• reconcile version to 1.10.0 across Cargo.toml, tag, and image (#175)
• TTL prune for terminal hook_delivery and expired signed tickets (#172)
• Merge pull request perf/security(TC-296): allowlist stored object metadata headers #166 from TinyCloudLabs/skgbafa/tc-296-header-allowlist
• refresh share-email authority vectors
• Merge remote-tracking branch 'origin/main' into skgbafa/tc-295-upload-buffer
• Merge pull request perf(TC-285): stream responses in useful chunks and restore Content-Length #164 from TinyCloudLabs/skgbafa/tc-285-response-streaming
• Merge pull request perf(TC-284): fix shipped runtime defaults (log level, SQLite pragmas, blocking pool) #162 from TinyCloudLabs/skgbafa/tc-284-runtime-defaults
• Merge pull request perf(TC-286): bound Prometheus route-label cardinality #163 from TinyCloudLabs/skgbafa/tc-286-metrics-cardinality
• Merge pull request perf(TC-283): enable release build optimizations and replace the musl allocator #161 from TinyCloudLabs/skgbafa/tc-283-release-profile-allocator
• apply rustfmt to sharing route
• remove unused sharing route import
• Merge remote-tracking branch 'origin/main' into feat/sharing-experience-e2e
• Integrate sharing policy and native wire repairs
• keep live control status separate from service manager
• keep fixture trust exception test-scoped
• repin email claim contract
• remove mounted SQL diagnostics
• trace mounted SQL read failure
• fix mounted invitation trace
• trace mounted invitation rejection
• remove mounted authorization diagnostics
• trace mounted read authorization
• remove mounted boundary diagnostics
• trace mounted read preflight
• trace mounted read denial
• trace mounted authority denial
• diagnose mounted policy session denial
• diagnose mounted authorization stage
• align mounted signer with frozen enrollment
• Harden email claim Node bindings and read responses
• Compose exact-email share authorization routes
• include delegation history in v1.4.10 changelog
• Merge branch 'main' into release-plz-2026-07-16T04-32-31Z
• (tinycloud-node) release v1.4.9
• never block writes on the quota service (stale-while-revalidate) (#104) (#105)
• (tinycloud-node) release v1.4.8
• (tinycloud-node) release v1.4.7
• Merge branch 'main' into release-plz-2026-07-13T19-02-35Z
• (tinycloud-node) release v1.4.6
• (tinycloud-node) release v1.4.5 (#99)
• (tinycloud-node) release v1.4.3 (#95)
• Add admin GET /admin/usage aggregate space usage endpoint (TC-108) (#97)
• Move database webhook delivery off write path
• Drop SQL DDL permission (#84)
• Accept sql schema permission (#83)
• Support SQL DDL capability (#82)
• Suppress duplicate invoke requests (#81)
• (node) cover policy runtime issued native read cutoff
• Close W1 native enforcement audit residuals (#79)
• Require SQL admin for PRAGMA (#77)
• (tinycloud-node) release v1.4.2 (#73)
• align owner DID terminology (#69)
• (tinycloud-node) release v1.4.1 (#67)
• (tinycloud-node) release v1.4.0
• (tinycloud-node) release v1.3.5
• (tinycloud-node) release v1.3.4 (#64)
• Persist SQL and DuckDB artifacts in storage database (#62)
• (tinycloud-node) release v1.3.3 (#59)
• (tinycloud-node) release v1.3.2 (#57)
• (tinycloud-node) release v1.3.1 (#55)
• (tinycloud-node) release v1.3.0 (#51)
• replace changesets with release-plz + cargo-dist (#49)
• version packages (#46)
• version packages (#41)
• version packages (#30)
• rename crates and reorganize workspace (#31)

---

This PR was generated with release-plz.

[samgbafa]

Closing as obsolete: v1.16.1 was already released from merged PR #232 at tag v1.16.1 (834c72a). Production remains on the separate 1.17.0 TinyChat lineage; TC-500 is being ported onto that exact lineage before any production deployment.