Release v1.0.1

README.md

@@ -79,7 +79,7 @@ docker run -d --name specdock \
   -p 127.0.0.1:3000:3000 \
   -e PUBLIC_DEMO=true \
   -e PROXY_ENABLED=false \
-  docker.io/d8vik/specdock:v1.0.0
+  docker.io/d8vik/specdock:v1.0.1
 ```
 
 Or keep configuration in a local env file:
@@ -96,7 +96,7 @@ MOCK_SERVER_ENABLED=false
 docker run -d --name specdock \
   -p 127.0.0.1:3000:3000 \
   --env-file ./specdock.env \
-  docker.io/d8vik/specdock:v1.0.0
+  docker.io/d8vik/specdock:v1.0.1
 ```
 
 If you prefer Compose with the published image, create your own
@@ -105,7 +105,7 @@ If you prefer Compose with the published image, create your own
 ```yaml
 services:
   specdock:
-    image: docker.io/d8vik/specdock:v1.0.0
+    image: docker.io/d8vik/specdock:v1.0.1
     ports:
       - "127.0.0.1:3000:3000"
     environment:
@@ -125,7 +125,7 @@ Check health:
 curl -fsS http://127.0.0.1:3000/api/health
 ```
 
-Use immutable version tags such as `docker.io/d8vik/specdock:v1.0.0`; the project does not rely on `latest` for releases.
+Use immutable version tags such as `docker.io/d8vik/specdock:v1.0.1`; the project does not rely on `latest` for releases.
 
 ## Desktop
 

apps/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specdock/api",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "private": true,
   "type": "module",
   "scripts": {
@@ -12,8 +12,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@specdock/core": "1.0.0",
-    "@specdock/generator": "1.0.0",
+    "@specdock/core": "1.0.1",
+    "@specdock/generator": "1.0.1",
     "fastify": "5.8.5",
     "tsx": "4.22.4"
   },

apps/desktop/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specdock/desktop",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "SpecDock Electron desktop workspace beta.",
   "private": true,
   "author": "SpecDock contributors",
@@ -19,9 +19,9 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@specdock/api": "1.0.0",
-    "@specdock/core": "1.0.0",
-    "@specdock/generator": "1.0.0"
+    "@specdock/api": "1.0.1",
+    "@specdock/core": "1.0.1",
+    "@specdock/generator": "1.0.1"
   },
   "devDependencies": {
     "electron": "41.7.1",

apps/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specdock/web",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "private": true,
   "type": "module",
   "scripts": {
@@ -11,9 +11,9 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@specdock/core": "1.0.0",
-    "@specdock/generator": "1.0.0",
-    "@specdock/ui": "1.0.0",
+    "@specdock/core": "1.0.1",
+    "@specdock/generator": "1.0.1",
+    "@specdock/ui": "1.0.1",
     "@tailwindcss/vite": "4.3.1",
     "@tanstack/react-query": "5.101.0",
     "@vitejs/plugin-react": "6.0.2",

docs/DEPLOYMENT.md

@@ -41,7 +41,7 @@ Published image tags:
 ```txt
 docker.io/d8vik/specdock:v0.1.0
 docker.io/d8vik/specdock:v0.2.2
-docker.io/d8vik/specdock:v1.0.0
+docker.io/d8vik/specdock:v1.0.1
 ```
 
 Use version tags for repeatable deployments. Do not rely on `latest`.
@@ -57,7 +57,7 @@ docker run -d --name specdock \
   -p 127.0.0.1:3000:3000 \
   -e PUBLIC_DEMO=true \
   -e PROXY_ENABLED=false \
-  docker.io/d8vik/specdock:v1.0.0
+  docker.io/d8vik/specdock:v1.0.1
 ```
 
 To pass more configuration, either add more `-e` flags or use an env file:
@@ -78,7 +78,7 @@ TRUST_PROXY=false
 docker run -d --name specdock \
   -p 127.0.0.1:3000:3000 \
   --env-file ./specdock.env \
-  docker.io/d8vik/specdock:v1.0.0
+  docker.io/d8vik/specdock:v1.0.1
 ```
 
 Keep `PROXY_ENABLED=false` for public demo use. If you enable proxy mode,

docs/RELEASE.md

@@ -1,6 +1,6 @@
 # Release
 
-This document describes the manual release path for `v1.0.0`.
+This document describes the manual release path for `v1.0.1`.
 
 ## Preflight
 
@@ -33,8 +33,8 @@ GitHub-hosted desktop artifacts are published by the `Desktop Release` workflow
 for a new immutable `v*` tag:
 
 ```bash
-git tag v1.0.0
-git push origin v1.0.0
+git tag v1.0.1
+git push origin v1.0.1
 ```
 
 The workflow builds macOS, Windows, and Linux artifacts, generates
@@ -77,7 +77,7 @@ Build a local image for smoke testing:
 
 ```bash
 docker build \
-  -t docker.io/d8vik/specdock:v1.0.0 \
+  -t docker.io/d8vik/specdock:v1.0.1 \
   .
 ```
 
@@ -87,7 +87,7 @@ Smoke the image locally:
 docker run --rm -p 127.0.0.1:3000:3000 \
   -e PUBLIC_DEMO=true \
   -e PROXY_ENABLED=false \
-  docker.io/d8vik/specdock:v1.0.0
+  docker.io/d8vik/specdock:v1.0.1
 ```
 
 Check:
@@ -102,7 +102,7 @@ Publish the Docker Hub multi-arch version tag:
 ```bash
 docker buildx build \
   --platform linux/amd64,linux/arm64 \
-  -t docker.io/d8vik/specdock:v1.0.0 \
+  -t docker.io/d8vik/specdock:v1.0.1 \
   --push \
   .
 ```
@@ -114,7 +114,7 @@ Always publish an immutable version tag. Do not publish `latest` unless you inte
 Before creating or pushing a release tag, create the release note:
 
 ```txt
-docs/release-notes/v1.0.0.md
+docs/release-notes/v1.0.1.md
 ```
 
 The release note is required for every release and must be named after the
@@ -124,11 +124,11 @@ Do not move old release tags. Create a new immutable tag for every patch
 release.
 
 ```bash
-git tag v1.0.0
+git tag v1.0.1
 git push origin main
-git push origin v1.0.0
+git push origin v1.0.1
 git push gitlab main
-git push gitlab v1.0.0
+git push gitlab v1.0.1
 ```
 
 The GitHub Actions Docker workflow publishes the Docker Hub image when `v*` tags are pushed, assuming these repository secrets exist:

docs/release-notes/v1.0.1.md

@@ -0,0 +1,29 @@
+# SpecDock v1.0.1
+
+SpecDock v1.0.1 is a patch release for the stable desktop line.
+
+## Added
+
+- Desktop runtime settings for local mock server and restricted desktop proxy
+  controls.
+- Desktop settings for proxy host allowlist, private target access, default
+  request mode, proxy timeout, proxy response limit, and mock response limit.
+- README and desktop documentation for GitHub desktop downloads and runtime
+  settings.
+
+## Fixed
+
+- Windows desktop packaging now runs Electron Builder commands through the
+  platform shell.
+- Desktop release workflow no longer tries to replace assets on an existing
+  immutable GitHub Release.
+- Desktop release documentation now directs maintainers to publish a new patch
+  tag instead of reusing a published release tag.
+
+## Security
+
+- Desktop proxy and mock server remain disabled by default.
+- Desktop proxy still requires an explicit allowed-host list and keeps private
+  targets disabled unless the user enables them locally.
+- Runtime timeout and response-size settings are validated and capped by the
+  application limits.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "specdock",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "private": true,
   "license": "MIT",
   "engines": {

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specdock/core",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "private": true,
   "type": "module",
   "main": "dist/index.js",

packages/core/src/constants.ts

@@ -1,6 +1,6 @@
 import type { GenerateOptions, UserSettings } from "./types.js";
 
-export const APP_VERSION = "1.0.0";
+export const APP_VERSION = "1.0.1";
 export const CURRENT_STORAGE_VERSION = "1";
 
 export const STORAGE_KEYS = {

packages/generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specdock/generator",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "private": true,
   "type": "module",
   "main": "dist/index.js",
@@ -19,7 +19,7 @@
     "generate": "tsx src/cli/generate.ts"
   },
   "dependencies": {
-    "@specdock/core": "1.0.0",
+    "@specdock/core": "1.0.1",
     "jszip": "3.10.1"
   },
   "devDependencies": {

packages/generator/src/index.ts

@@ -24,7 +24,7 @@ import { buildSdkModel } from "./sdk-model.js";
 import { generateTypesFile } from "./types-file.js";
 import { generateZodFile } from "./zod-file.js";
 
-export const GENERATOR_VERSION = "1.0.0";
+export const GENERATOR_VERSION = "1.0.1";
 
 export const generateSdk = (
   spec: unknown,

packages/ui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specdock/ui",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "private": true,
   "type": "module",
   "main": "dist/index.js",