Alpha 0.3.37: let the gate heed once

[ael-dev3]

What changed

• latch Request Access synchronously at the button boundary
• show a disabled Request Sent state before any parent or network round trip
• prevent a same-frame repeat from replaying the Hegemony resonance, animation, or submission callback
• retain the existing status-first recovery path after a confirmed availability failure
• publish concise Alpha 0.3.37 notes as The Gate Heeds Once

Why

The controller and SpacetimeDB procedure were already idempotent, but the presentation component relied on the next React render to become disabled. A same-frame synthetic or repeated activation could therefore replay presentation feedback and invoke the guarded callback twice even though only one persistent request could be created.

Authority impact

No authentication, admission, schema, reducer, bridge, keep, balance, or Realm-data authority changes. SpacetimeDB continues to preserve the first request timestamp per admission cycle and reloads return a disabled Request Received state.

Verification

• full release check: 260 test files / 2,811 tests
• root typecheck and production build
• exact runtime asset and provenance verification
• all 239 auth-bridge tests
• 51 focused SpacetimeDB access-request/authority tests
• production exclusions and Farcaster Mini App manifest verification