Changelog

Unreleased — 2026-07#

Design work in flight; expect these to land in the next M1 grid drop:

SCSG (Service Consumer Session Grant) v0.1 — server-side services (ScaiWave, ScaiTerm, ScaiDrive-server, ScaiEdit-server) can obtain bounded, user-consented, per-session clipboard access. Ephemeral device model, hard duration cap, uniform audit stream. See Server-side integrations.
Scratch storage — Garage S3-backed durable store for large clipboard content, quota-metered per user and per tenant. Origin device can log off; content stays available. See Scratch storage & public links.
MediaRef sharing modes — clips carry either inline ciphertext, a ref_origin pointer (streamed on demand from the source client through a grid proxy), or a ref_scratch pointer (fetched from central storage). Users pick per-item; sensible defaults by size.
Public share links — mint a public URL for any scratch object. AEAD key rides in the URL fragment; server holds ciphertext only. Optional password (Argon2id), download limits, revoke on demand.

SCWP dedicated endpoint. ScaiClip now runs on its own WebSocket at /v1/modules/scaiclip/ws instead of the grid connection multiplexer.
Device ID accepts both wire forms. Clients may send device_id as raw bytes(16) (legacy) or as a text ScaiKey nanoid (dev_XYZ...).
wraps.ready push event promoted to v1. Eliminates polling on onboarding — new devices get pushed as soon as their sibling wraps land.
Claim Arbiter Galera-safe. One-shot claims arbitrate via atomic INSERT on a distinct claim record; the loser gets E_ALREADY_CLAIMED with {claimed_by, at}.
E_RATE_LIMITED enforced. Publish path token-bucketed per (tenant, device) — default 30/s with 60-token burst.
AI-agent claim gating (SCWP §10). Service principals may only claim ONE_SHOT clips when the tenant policy opts in.

Initial SCWP draft: framing, canonical CBOR, HPKE profile, channel model, retention engine, onboarding broker.